Privacy Policy

Effective Date: August 12, 2026 / Last Updated: August 5, 2026

GamePal ("we", "us", or "our") takes your privacy seriously and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

1. Information We Collect

• Required Information: Email address, phone number, date of birth, gender, nickname, profile information, profile photos (2 or more), gaming-related information (play style, favorite games, etc.)
• Information collected upon game account linking (with user consent):
  • Riot Games: Riot ID, rank, win/loss records, champion and agent statistics
  • Steam: Steam ID, owned games list, playtime
  • Battle.net: BattleTag, game-specific rank and character information
  • Discord: Discord username, link status
• Optional Information: Marketing preferences, interest information
• Automatically Collected: Service usage records, device information (OS, model, etc.), IP address, cookies, advertising ID

2. How We Use Your Information

• Service provision and contract fulfillment: account registration, identity verification, matching services, personalized recommendations
• AI image generation: creating avatar and card images based on photos uploaded by users
• Service improvement: usage analysis, new service development
• Customer support: inquiry responses, notifications, dispute resolution
• Marketing and advertising: event information, personalized ads (with consent only)

3. Data Retention

• Until account deletion: Basic information required for service provision
• Upon game account unlinking: Associated game account data is immediately deleted
• Party stats lookup: Data is temporarily processed through third-party APIs and is not stored separately
• Source photos for AI image generation: Retained until account deletion (for reuse when regenerating cards); destroyed without delay upon withdrawal
• 30 days after deletion: Minimal information for fraud prevention (hashed ID, phone number)
• Legal retention: As required by applicable laws and regulations

4. Information Sharing

We do not sell or share your personal information with third parties except in the following cases:

• With your prior consent
• As required by law or legal process
• For statistical purposes in anonymized form

5. Data Processing Partners

We work with the following partners to provide our services:

• AWS (Amazon Web Services): Cloud hosting services
• Google LLC: AI image generation — processing photos uploaded by users through the Gemini API to create avatar and card images
• Firebase: Push notification services
• SMS providers: Authentication services
• Riot Games: Game account verification and stats data retrieval (League of Legends, VALORANT, Teamfight Tactics)
• Valve Corporation: Steam account verification and game library retrieval
• Blizzard Entertainment: Battle.net account verification and game data retrieval (Overwatch 2, World of Warcraft, etc.)
• KRAFTON: PUBG stats data retrieval
• Discord: Account linking and voice chat connection

6. Cookies and Tracking

We use cookies for service usage analysis. You can disable cookies through your browser settings, but this may limit service functionality.

7. Security Measures

• Technical measures: Data encryption, access controls, security software
• Administrative measures: Limited access, regular training

8. Your Rights

You have the right to:

• Access your personal information
• Correct or update your information
• Delete your account and data
• Withdraw consent for data processing

9. Contact Information

For privacy-related inquiries:

• Privacy Officer: [Name]
• Email: [Email Address]

10. International Transfers

Your data may be transferred to and processed in countries other than your own. We minimize international transfers and, where they are necessary to provide our services, process them per processor as follows. We ensure appropriate safeguards are in place for such transfers:

• AWS (Amazon Web Services, Inc.)
  • Destination country: United States
  • Data transferred: Personal information stored for service provision
  • Purpose of transfer: Data storage on cloud infrastructure
  • Retention period: Until account deletion
• Google LLC
  • Destination country: United States
  • Data transferred: Photos uploaded by users for AI image generation
  • Purpose of transfer: AI image generation processing through the Gemini API
  • Retention period: Not retained after generation processing is complete

You have the right to refuse the international transfer of your personal information. However, if you refuse, your use of features that depend on such processing (such as the AI image generation feature) may be limited.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes at least 7 days before they take effect.

Effective Date: August 12, 2026