Privacy Policy
This Privacy Policy works together with our Terms of Use. Gaminute is a solo, part-time project. We minimise data and only process what’s needed to run the site and deliver Lab benefits.
Who we are (data controller)
Patreon relationship. When you support Gaminute via Patreon, Patreon acts as the data controller for payment processing and platform services. We receive limited Patron Data (e.g., display name, tier, join status, and where available, email) from Patreon to deliver Lab benefits (early builds, Discord access, credits). For this purpose, we act as a data processor under Patreon’s Data Processing Agreement. For our website, emails with you, and Discord moderation we act as a data controller.
What data we process
- Basic technical data (IP address, user agent) captured by our hosting for security and delivery (short-lived logs).
- Emails you send to us (address, message, metadata) to respond and keep a record of communications.
- Membership info from Patreon (display name, tier, join status) to deliver Lab benefits.
- Discord handles/messages if you join our Discord. Discord is a separate service with its own policy.
- Beta playtesting (optional): crash logs or feedback you voluntarily send us.
- Fonts: pages load web fonts; if served from a third-party CDN your IP is sent to that provider to deliver the files.
- We do not knowingly collect special category data.
Purposes & legal bases (GDPR)
- Run the site & security – legitimate interests (Art. 6(1)(f)). Our interest: operate a functional, secure website. Impact: minimal; only basic technical data stored briefly.
- Reply to emails – legitimate interests (communication) or pre-contract steps (Art. 6(1)(b)).
- Provide Lab benefits to Patrons – contract performance (Art. 6(1)(b)).
- Moderate Discord / community – legitimate interests (healthy community) (Art. 6(1)(f)). Impact: public messages may be reviewed; moderation actions if rules are violated.
- Comply with law (e.g., accounting) – legal obligation (Art. 6(1)(c)).
- Consent – only where we explicitly ask for it (Art. 6(1)(a)).
Security & data breaches
We use reasonable technical and organisational measures (encrypted connections, access controls, secure hosting). No system is 100% secure.
If a breach occurs that is likely to pose a risk to your rights and freedoms, we will notify the supervisory authority and, where required, affected individuals in line with GDPR Articles 33–34.
Retention
- Server logs: typically ≤ 30 days unless investigating abuse.
- Emails/support: up to 24 months after last interaction.
- Patron membership data: while membership is active + up to 3 years for records we must keep.
- Playtest reports/crash notes: up to 12 months (aggregated learnings may persist without personal data).
Sharing & recipients
- Patreon – membership, billing, messaging. They are controller for their platform; we process Patron Data under their DPA to deliver benefits.
- Discord – if you join our server, your data is processed by Discord.
- Email/hosting providers – to deliver mail and host this site.
- Web font providers/CDNs – if fonts load from a CDN, your IP will reach that CDN.
- We don’t sell your personal data. We share only what’s necessary to run the Lab and the site.
International transfers
Your data may be transferred outside the EEA when using services like Patreon or Discord. Where applicable, we rely on the EU Commission’s Standard Contractual Clauses (SCCs) or adequacy decisions to safeguard the transfer.
Cookies & similar tech
We aim to minimise cookies. This site does not use analytics or marketing cookies. Essential cookies (if any) are used only to run the site.
Analytics & tracking
We currently do not use analytics services. If we introduce privacy-friendly analytics (e.g., Plausible or self-hosted Matomo), we will update this policy and (where appropriate) provide an opt-out.
Web fonts
Pages load web fonts. If they are served from a third-party CDN, your IP may be transmitted to deliver the files (legal basis: legitimate interest — readability/UX). We are evaluating self-hosting to remove external requests.
Automated decisions
We do not make decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects.
Your rights
- Access your data and get a copy
- Rectify inaccurate data
- Erase data (“right to be forgotten”) where applicable
- Restrict processing in certain cases
- Data portability
- Object to processing based on legitimate interests
- Not be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects
To exercise a right, email support@gaminute.com. We may need to verify your identity.
Supervisory authority (Czech Republic)
If you are in the EU/EEA, you can lodge a complaint with a supervisory authority. In the Czech Republic:
Children
Gaminute is for general audiences and not directed to children. For online services in the Czech Republic, a child may consent to data processing from age 15. If you are under that age, please ask a parent/guardian to contact us on your behalf.
Changes
We may update this notice when our services or providers change. We will post updates on this page and refresh the “Last updated” date.
Contact
Questions or requests: support@gaminute.com
Change log
- v1.0 (10 Nov 2025): Initial public version.