Privacy Policy
Effective date: 1 July 2026
1. Controller
The data controller is PlayPair, MB (a mažoji bendrija), company code 308030895, Europos pr. 34-47, Kaunas, Lithuania. Contact: info@playpair.gg.
2. What we collect
- Account & auth: email, password (stored only as a secure hash by our auth provider), account timestamps.
- Profile: display name, region/country/continent, languages, timezone, bio, mic preference, availability, Discord tag (if added), profile flair/tier.
- Age assurance: your confirmation that you are 18+ and related age-band data used to enforce the 18+ requirement.
- Connections: Steam ID and verification status, and other linked-account identifiers if you connect them.
- Activity: requests, applications, matches, conversations and messages, ratings and reputation, game follows, reports/disputes, notifications.
- Billing: subscription plan and status, billing period, and payment-provider customer/subscription identifiers. We do not receive or store your full card details — Paddle handles these.
- Technical: data needed to run the app (authentication token in your browser, standard server logs). We do not currently use third-party analytics.
3. Why we use it (GDPR legal bases)
- To provide the service (account, matchmaking, messaging, showing your profile) — performance of a contract.
- To operate paid plans and process payments via Paddle — performance of a contract.
- To keep the service safe (enforce 18+, moderation, fraud/abuse prevention, blocks/mutes/reports) — legitimate interests and legal obligation.
- To send service/notification emails and in-app notifications per your settings — contract / consent where required.
- To comply with legal obligations (e.g. tax/records via Paddle, lawful requests).
4. Sharing & processors
We share data only as needed to run PlayPair, with partners including:
- Supabase — database, authentication and hosting (EU region, eu-central-1).
- Paddle — payments and subscription management (Merchant of Record; independent controller for payment data).
- Resend (transactional and notification email, where enabled) — transactional/notification emails (if enabled).
- Lovable (application hosting) — application hosting.
- Steam / Discord / Twitch / IGDB — only when you use those integrations, limited to what the feature needs. Other users see information you make public (display name, profile, requests, ratings, tier badge). We do not sell your personal data.
5. International transfers
Where a processor transfers data outside the EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent safeguards.
6. Retention
We keep your account and profile data for as long as your account is active. After you delete your account, we remove or anonymise your personal data within 90 days, except where we must keep limited records for longer to meet legal, tax and accounting obligations (for example, billing records held via Paddle are retained for the statutory period, typically up to 10 years under Lithuanian law), or to resolve disputes and enforce our agreements.
7. Your rights
You can access, rectify, erase, restrict and port your data, object to certain processing, and withdraw consent where processing relies on it. Edit most data in your profile; request account deletion via info@playpair.gg. You may complain to your supervisory authority — in Lithuania, the State Data Protection Inspectorate (VDAI).
8. Security
We protect data with measures including database row-level security, hashed passwords, scoped service access, and encryption in transit. No system is perfectly secure, but we work to keep your data safe.
9. Children
PlayPair is not directed to and may not be used by anyone under 18. We do not knowingly collect data from minors; if we learn we have, we delete it.
10. Cookies & local storage
We use only the minimum storage needed to run the app — an authentication token and preferences (such as your theme) in your browser's local storage. We do not use advertising or analytics cookies. If this changes, we will add a cookie banner and list them here.
11. Changes
We may update this Policy and will post the new version with an updated effective date.