Back to Home

Privacy Policy

Last Updated: October 13, 2025

Privacy Policy

PlayFly Platform
Last Updated: October 13, 2025

Table of Contents


Introduction

PlayFly ("PlayFly", "we", "us", or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy.

This Privacy Policy describes how we collect, use, and share information about you as well as your rights and choices about such collection, use, and sharing. It applies when you:

If you do not agree with our policies and practices, your choice is not to use the Services. By accessing or using the Services, whether or not you create an account, you agree to this Privacy Policy.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes, we will:

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.


Information Collection

Information You Provide to Us

We collect personal information that you voluntarily provide when you use our Services:

Account Registration and Profile Information

User-Generated Content

Social Interactions

Payment Information (if applicable)

Communications with Us

Information Collected Automatically

When you use our Services, we automatically collect certain information:

Usage and Activity Data

Device and Technical Information

Location Information

Cookies and Similar Technologies

See the Cookies & Similar Technologies section for more details.

Information from Third-Party Sources

We may receive information about you from third-party sources:

Authentication Providers

If you sign in using third-party services (such as Google, Discord, or other OAuth providers):

Analytics and Advertising Partners

Other Users


How Long We Keep Your Data

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Retention Periods

Type of Data Retention Period
Account Information (username, email, profile data) Retained while your account is active and for 90 days after account deletion, unless required for legal compliance
User-Generated Content (games, comments, chat messages) Retained while your account is active. After account deletion, content may be anonymized rather than deleted to preserve platform integrity
Gameplay and Activity Data (play statistics, views, likes) Retained while account is active and for up to 1 year after last activity, or until deletion request
Usage and Analytics Data (page views, session data, device information) Retained for up to 2 years, or deleted/anonymized upon request
Support and Communication Records Retained for up to 3 years to provide ongoing support and improve services
Payment Transaction Records Retained for 7 years to comply with legal and tax obligations
Security and Fraud Prevention Data Retained as long as necessary to maintain security and prevent fraud, typically up to 5 years
Legal Compliance Data Retained as long as necessary to comply with applicable laws and regulations
Cookies and Session Data Varies by type; session cookies expire when you close your browser, persistent cookies expire after their set duration (typically 1-2 years)

After the retention period expires, we will either:

You may request deletion of your personal information at any time by contacting us. However, we may retain certain information as required by law or for legitimate business purposes (such as fraud prevention or resolving disputes).


Why We Process Your Information

We use your personal information for the following purposes:

Core Platform Services

Platform Improvement and Analytics

Communication

Safety and Security

Legal Compliance

Personalization

Research and Development

Legal Bases for Processing (for EEA/UK/CH users):


How We Disclose Your Personal Information

We may share your personal information with the following categories of third parties:

Service Providers and Partners

Category Types of Information Shared Purpose
Cloud Hosting Providers (e.g., Supabase, Vercel, Cloudflare) Account data, user content, usage data, device information Platform hosting, database management, content delivery
Authentication Services (e.g., Supabase Auth, OAuth providers) Email, username, authentication tokens Account authentication and security
Payment Processors (e.g., Stripe, PayPal) Payment card information, billing address, transaction details Processing payments for paid content or features
Analytics Providers (e.g., Google Analytics, Vercel Analytics) Usage data, device information, IP address (anonymized) Understanding platform usage and improving services
Email Service Providers (e.g., SendGrid, Amazon SES) Email address, username, communication preferences Sending transactional and marketing emails
Content Delivery Networks (CDN) IP address, device information, content requests Delivering games and media files efficiently
Customer Support Tools (e.g., Intercom, Zendesk) Contact information, support inquiries, account details Providing customer support
Security and Fraud Prevention IP address, device information, usage patterns Detecting and preventing fraud and abuse

Public Information

The following information may be visible to other users and the public:

Legal Requirements and Safety

We may disclose your information when required by law or to protect rights and safety:

Business Transfers

If PlayFly is involved in a merger, acquisition, sale of assets, or bankruptcy:

With Your Consent

We may share information for other purposes with your explicit consent.

Information We Do NOT Sell

We do not sell your personal information to third parties for monetary consideration. We do not share your personal information for third-party marketing purposes without your explicit consent.


Cookies & Similar Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content.

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you, remember your preferences, and understand how you use our Services.

Types of Cookies We Use

1. Essential Cookies (Required)

These cookies are necessary for the platform to function properly. You cannot opt out of these cookies.

Examples:

2. Functional Cookies (Optional)

These cookies enable enhanced functionality and personalization.

Examples:

3. Analytics Cookies (Optional)

These cookies help us understand how users interact with our platform.

Examples:

4. Advertising Cookies (Optional)

These cookies are used to deliver relevant advertisements and measure their effectiveness.

Examples:

Other Tracking Technologies

Managing Cookies

You can control and manage cookies in several ways:

Browser Settings

Most browsers allow you to:

Note: Blocking essential cookies may prevent you from using certain features of the platform.

Cookie Consent Manager

When you first visit our website, we'll display a cookie consent banner allowing you to:

You can change your preferences at any time by clicking the "Cookie Settings" link in the footer.

Opt-Out Links

Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Currently, there is no industry consensus on how to respond to DNT signals. We do not currently respond to DNT signals, but we provide you with tools to control cookies and tracking.


Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it.

Security Measures

Technical Safeguards

Organizational Safeguards

Infrastructure Security

Data Breach Notification

In the event of a data breach that affects your personal information:

Your Responsibility

You can help protect your account by:

Limitations

No system is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You provide information at your own risk.


Children's Privacy

Age Requirements

PlayFly is intended for users who are 13 years of age or older (or the minimum age required in your jurisdiction to consent to the use of online services).

If you are under 13 (or the applicable age in your jurisdiction), you may not create an account or use our Services.

Parental Consent

In some jurisdictions, users between 13 and the age of majority may require parental consent to use our Services. If we become aware that parental consent is required and has not been obtained, we may suspend the account until consent is provided.

Information from Children

We do not knowingly collect personal information from children under 13.

If we discover that we have inadvertently collected information from a child under 13:

Parental Rights

If you believe your child under 13 has created an account or provided personal information to us:

Content Restrictions

We enforce Community Guidelines to ensure age-appropriate content:


Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

Universal Rights (Available to All Users)

Right to Access

You can request a copy of the personal information we hold about you.

Right to Correction

You can request that we correct inaccurate or incomplete information.

Right to Deletion

You can request that we delete your personal information.

Right to Data Portability

You can request your data in a portable format to transfer to another service.

Communication Preferences

Opt-Out of Marketing

You can opt out of promotional emails by:

Note: You will still receive essential account-related communications (such as security alerts, policy updates, or transaction confirmations).

Additional Rights (Region-Specific)

See the Region-Specific Privacy Notices section for rights specific to:


International Data Transfers

PlayFly is based in California, United States and operates globally. Your personal information may be transferred to, stored, and processed in countries other than your own.

Data Transfer Mechanisms

When we transfer personal information internationally, we use appropriate safeguards:

Standard Contractual Clauses (SCCs)

We use European Commission-approved Standard Contractual Clauses to protect data transferred from the EEA/UK/CH to countries without adequacy decisions.

Adequacy Decisions

We may transfer data to countries that have been deemed to provide adequate data protection by:

Privacy Shield Frameworks (Where Applicable)

For transfers to the United States, we may rely on the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework (where applicable and certified).

Countries Where Data May Be Processed

Your data may be processed in:

Your Rights Regarding International Transfers

If you are in the EEA, UK, or Switzerland:


Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@playfly.com
Support: support@playfly.games
Website: https://playfly.com

Mailing Address:
PlayFly
PlayFly Inc.
123 Game Street
San Francisco, CA 94102
San Francisco, CA 94102
United States

Response Times

We strive to respond to all inquiries within:

When contacting us, please include:


Region-Specific Privacy Notices

This section provides additional information for residents of specific jurisdictions.

California Residents (CCPA/CPRA)

This section applies to California residents and describes rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

Category Examples Collected?
Identifiers Name, email, username, IP address, device ID Yes
Personal Information (Cal. Civ. Code ยง 1798.80) Name, address, payment card number Yes
Protected Classifications Age, date of birth Yes
Commercial Information Purchase history, payment records Yes (if applicable)
Internet Activity Browsing history, search history, interactions with website Yes
Geolocation Data General location (country/region, not precise GPS) Yes
Sensory Information Audio from voice chat (if feature is used) No
Professional Information Employment information No
Education Information Education records No
Inferences Profile reflecting preferences, behavior, and interests Yes
Sensitive Personal Information Account credentials (password), precise geolocation Password only

Business Purposes for Collection

We collect and use personal information for the business purposes described in the Why We Process Your Information section.

Categories of Third Parties

We disclose personal information to the categories of third parties described in the How We Disclose Your Personal Information section.

Sale and Sharing of Personal Information

Your California Privacy Rights

California residents have the following rights:

1. Right to Know

Request information about the personal information we collect, use, disclose, and sell.

2. Right to Delete

Request deletion of your personal information (subject to certain exceptions).

3. Right to Correct

Request correction of inaccurate personal information.

4. Right to Opt-Out of Sale/Sharing

Opt out of the "sale" or "sharing" of your personal information.

5. Right to Limit Use of Sensitive Personal Information

Request that we limit use of sensitive personal information to providing services (not for advertising or analytics).

6. Right to Non-Discrimination

You will not receive discriminatory treatment for exercising your privacy rights.

How to Exercise Your Rights

Verification: We will verify your identity before processing your request. We may ask for additional information such as your email address, username, or recent account activity.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.

Shine the Light Disclosure

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes without your explicit consent.


European Economic Area, United Kingdom, and Switzerland (GDPR)

This section applies to individuals in the EEA, UK, and Switzerland and describes rights under the General Data Protection Regulation (GDPR) and related laws.

Data Controller

PlayFly is the data controller responsible for your personal information.

Contact Details:
PlayFly
PlayFly Inc.
123 Game Street
San Francisco, CA 94102
Email: privacy@playfly.com

Data Protection Officer (if applicable):
Data Protection Officer
Email: dpo@playfly.com

Legal Bases for Processing

We process personal information based on the following legal grounds:

  1. Contract Performance: To provide services you've requested and fulfill our contract with you
  2. Legitimate Interests: For purposes that are in our or third parties' legitimate interests (such as security, fraud prevention, and service improvement), provided your rights don't override these interests
  3. Consent: Where you have given explicit consent for specific purposes
  4. Legal Obligations: To comply with legal requirements

Your GDPR Rights

You have the following rights:

Right to Access

Request access to your personal data and information about how we process it.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances:

Right to Restriction of Processing

Request that we restrict processing of your personal data in certain circumstances:

Right to Data Portability

Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

Lodge a complaint with your national data protection authority:

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

International Data Transfers

We transfer personal data outside the EEA/UK/CH using appropriate safeguards:

To request a copy of the safeguards we use, contact us at privacy@playfly.com.

Data Retention

We retain personal data for the periods described in the How Long We Keep Your Data section.

How to Exercise Your Rights

Contact us at:

We will respond to your request within one month (may be extended by two months for complex requests).


Canada (PIPEDA)

This section applies to individuals in Canada and describes rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws.

Accountability

PlayFly is responsible for personal information under our control. We have designated a privacy officer to oversee compliance.

Privacy Officer:
Privacy Officer
Email: privacy@playfly.com

Your Canadian Privacy Rights

Right to Access

You have the right to be informed of the existence, use, and disclosure of your personal information and to access that information.

Right to Correct

You have the right to challenge the accuracy and completeness of your personal information and have it corrected as appropriate.

Right to Withdraw Consent

You may withdraw consent to the collection, use, and disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with the Office of the Privacy Commissioner of Canada:

International Data Transfers

Your personal information may be processed in the United States and other countries. When transferred outside Canada, it is subject to the laws of those jurisdictions, including lawful access by government authorities.

We use contractual safeguards to protect personal information transferred internationally.

How to Exercise Your Rights

Contact us at:

We will respond to your request within 30 days.


Australia (Privacy Act)

This section applies to individuals in Australia and describes rights under the Privacy Act 1988.

Australian Privacy Principles (APPs)

We comply with the Australian Privacy Principles, which govern how we collect, use, disclose, and store personal information.

Your Rights

Complaints Process

If you have a complaint:

  1. Contact us at privacy@playfly.com
  2. We will investigate and respond within 30 days
  3. If not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC):

Other Jurisdictions

If you are located in a jurisdiction not specifically addressed above, the core provisions of this Privacy Policy apply to you. You may have additional rights under local law. Contact us at privacy@playfly.com for information about your specific rights.


Updates and Changes

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

How We Notify You of Changes

Your Acceptance

By continuing to use the Services after changes become effective, you accept the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the Services and contact us to delete your account.


Definitions


Acknowledgments

This Privacy Policy is designed to comply with:


Last Updated: October 13, 2025

Version: 1.0

For questions or concerns about this Privacy Policy, please contact us at privacy@playfly.com.


This Privacy Policy works alongside our Terms of Service and Community Guidelines. Violations of these documents may result in account action.