Privacy Policy

Last updated: 19 de julio de 2026

1. Data controller

[PLACEHOLDER: legal company name, tax ID, registered address, contact email] is the data controller for the personal data processed through GamePartner.

2. What data we collect

• Account data: email address, password (stored as a bcrypt hash, never in plain text), date of birth, gender, language, and account status.
• Profile data: nickname/gamer tag (never your legal name), bio, city/country, up to 6 photos, and your "Gamer DNA": main platform, favorite games and genres, playstyle, setup, whether you use a mic, gaming schedule, and what you're looking for on the platform.
• Special category data (Art. 9 GDPR): the gender you're looking for, and other matching preferences, can reveal sexual orientation. We only process this with your explicit, separate consent, given when you set up your search preferences, and solely to show you compatible profiles. You can withdraw it anytime by adjusting your preferences or deleting your account.
• Identity verification data: if you choose to verify your profile (optional and free), we temporarily store your ID document and a selfie in a storage location that is never publicly accessible, only visible to authorized moderators, and deleted once the review is completed or your account is removed.
• Optional connected accounts: if you link Steam, Discord, Twitch, Riot Games or Xbox, we only store the public identifier and display name returned by that provider — never your password for those services.
• Technical data: IP address and basic request logs (for security and abuse prevention), and the cookies described in our Cookie Policy.
• Communications: messages you exchange with your matches, and reports/blocks you submit against other users.

3. Legal basis for processing

• Contract performance (Art. 6.1.b): creating your profile, matching you with other users, chat, and account management.
• Explicit consent (Art. 9.2.a): processing of data that may reveal sexual orientation through your matching preferences, and processing of your ID/selfie for identity verification.
• Legitimate interest (Art. 6.1.f): fraud and fake-profile prevention (e.g. detecting a photo reused across different accounts), platform security, and enforcing our Terms & Conditions.
• Legal obligation (Art. 6.1.c): responding to lawful requests from authorities, e.g. in cases involving minors or criminal conduct.

4. Who we share data with

We never sell your personal data. We only share it with:

• Our hosting provider (data processor), strictly to store and run the service.
• Our outgoing email provider, strictly to send verification, security and account notices.
• Public authorities, only when legally required (e.g. a report involving a minor or a criminal investigation).
• Other users, but only the information you choose to make public on your profile — your bio stays hidden until you match, unless you enable the optional Premium "public bio" setting.

5. International transfers

Our infrastructure and processors are based within the European Economic Area. If this ever changes, we will update this policy and rely only on transfer mechanisms recognized by the GDPR (e.g. adequacy decisions or standard contractual clauses).

6. How long we keep your data

• Account and profile data: for as long as your account is active.
• Identity verification documents: deleted once your verification request is reviewed, and in any case when your account is deleted.
• Accounts inactive for 90 days are deactivated (with prior warning) and permanently deleted after the usual 15-day grace period.
• Voluntarily deleted accounts: permanently erased after the same 15-day grace period.
• Security logs: kept for a limited, proportionate period strictly for abuse prevention.

7. Your rights

Under the GDPR you can exercise, at any time and free of charge: access, rectification, erasure, restriction, portability, and objection to the processing of your data, as well as withdrawing any consent you've given (without affecting past lawful processing). Most of these — editing your profile, changing your search preferences, downloading or deleting your account — are available directly from your account settings. For anything else, contact us at [PLACEHOLDER: privacy contact email]. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

8. Minors

GamePartner is restricted to people 18 years or older. We do not knowingly collect data from minors; if we become aware that an account belongs to a minor, it is deleted immediately.

9. Security

Passwords are hashed with bcrypt and never stored in plain text. All form submissions are protected against CSRF. Identity verification documents are stored outside the publicly served folder and are only accessible to authenticated administrators. We apply standard security headers and, on request, current best practices to keep the service secure — no system is 100% risk-free, and we recommend using a strong, unique password.

10. Cookies

See our dedicated Cookie Policy for full details.

11. Changes to this policy

We may update this policy to reflect legal or product changes. Material changes will be notified in-app or by email before they take effect.

Contact

[PLACEHOLDER: privacy contact email], [PLACEHOLDER: postal address].