Privacy Policy

Your Privacy Matters

Game Retain is committed to protecting your privacy and being transparent about how we collect, use, and protect your data. This policy explains our practices regarding your personal information and game analytics data.

1. Information We Collect

1.1 Account Information

When you create an account with Game Retain, we collect:

Email address (for account identification and communication)
Display name (for personalization within the service)
Authentication tokens (encrypted and stored securely)

1.2 Google OAuth Data

To provide our retention monitoring services, we request access to specific Google services through OAuth. Here's exactly what we access and why:

OAuth Scopes We Use:

openid, email, profile

Purpose: Basic user identification and authentication
Data accessed: Your Google account email and basic profile information
Why we need it: To identify you as a user and provide personalized service

https://www.googleapis.com/auth/firebase.readonly

Purpose: List your Firebase projects for connection
Data accessed: Names and IDs of Firebase projects you have access to
Why we need it: To display your available Firebase projects so you can choose which one to monitor

https://www.googleapis.com/auth/bigquery.readonly

Purpose: Read retention analytics data from BigQuery
Data accessed: Aggregated, anonymized analytics data (user counts, retention rates)
Why we need it: To calculate D1, D7, D30 retention metrics and detect drops

1.3 Game Analytics Data

We access your game's analytics data through Firebase BigQuery integration:

Daily active users (DAU) - aggregated counts only
Retention cohort data - anonymized user groups
Revenue data (ARPU) - aggregated financial metrics
Event data - only retention-related events, not personal user data

2. How We Use Your Information

Retention Monitoring

We analyze your game's retention data to detect significant drops and send you alerts when retention falls below your configured thresholds.

Service Communication

We use your email to send retention alerts, service updates, and important account notifications.

2.1 Data Processing

All data processing is performed for the following legitimate business purposes:

Providing retention monitoring and alerting services
Calculating retention metrics (D1, D7, D30) and ARPU trends
Detecting significant drops in retention rates
Improving our service functionality and user experience
Complying with legal obligations and protecting our rights

3. Data Storage and Security

Security Measures

Encryption: All OAuth tokens are encrypted using Fernet encryption before storage
Secure Storage: Data is stored in Google Firestore with enterprise-grade security
HTTPS Only: All data transmission uses HTTPS encryption
Access Control: Strict access controls and authentication requirements
No Raw Data: We never store raw, unencrypted analytics data

3.1 Data Location

Your data is stored in Google Cloud infrastructure, primarily in the United States. We ensure compliance with applicable data protection laws regardless of storage location.

3.2 Data Retention

We retain your data for the following periods:

Account data: Until you delete your account or request deletion
Analytics data: 24 months maximum, then automatically deleted
OAuth tokens: Until you revoke access or delete your account
Alert history: 12 months, then automatically purged

4. Your Rights and Choices

Data Export

You can request a copy of all data we have about you at any time by contacting us at privacy@game-retain.com

Data Deletion

You can request complete deletion of your account and all associated data at any time.

4.1 Your Rights Under GDPR/CCPA

If you are in the EU, UK, or California, you have additional rights:

Right to Access: Request copies of your personal data
Right to Rectification: Correct inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Portability: Receive your data in a structured format
Right to Object: Object to processing of your personal data
Right to Restrict Processing: Limit how we use your data

5. Third-Party Services

5.1 Google Services

We integrate with Google services (Firebase, BigQuery) to provide our monitoring services. Your use of these services is also subject to Google's Privacy Policy.

5.2 Other Third Parties

We use the following third-party services:

Stripe: Payment processing (we don't store payment information)
Resend: Email delivery service for alerts and notifications
Render: Cloud hosting infrastructure

6. Children's Privacy

Game Retain is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated policy on this page
Sending you an email notification
Displaying a notice in the Game Retain application

Your continued use of our service after any changes constitutes acceptance of the updated policy.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@game-retain.com

Support: support@game-retain.com

Data Protection Officer: dpo@game-retain.com

Google API Services User Data Policy Compliance

Game Retain's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We will not use Google user data for advertising purposes or sell it to third parties.