Privacy Policy

This policy explains how personal data is handled when you play a game powered by Gamivate. Two parties may act as data controllers, each for their own separate purposes:

• The brand running the campaign — controller of the data you submit to enter and play their game. You agree to the brand using your details for its own marketing when you submit your score, which is required to enter the campaign.
• Gamivate — controller for (a) your Gamivate account data and (b), where you separately opt in, using your data for Gamivate's own product updates and marketing. For everything else, Gamivate acts only as the brand's processor.

Data we collect

• Details you provide at opt-in — the fields a campaign asks for (e.g. name, email, phone).
• Your consent choices, game scores, and play metadata.
• Technical data: a hashed IP address (never stored raw), coarse location, and device/browser information.

How your data is used

• To run the game, track scores, and issue your reward.
• By the brand:to contact you with the brand's marketing — the consent you give when you submit your score to enter the campaign.
• By Gamivate: to operate and secure the platform. Gamivate uses your data for its own marketing or product outreach only if you separately opt in to that — it is never required to submit your score or to receive your reward.

Your consent, and what's optional

You can play the game without giving any details. To submit your scoreand enter a brand's campaign, you agree to that brand using your details for its marketing — that is the purpose of the campaign, so it is required. Gamivate's own marketing is always a separate, optional checkbox you can decline and still submit your score. Consents are unticked by default, you can withdraw or unsubscribe at any time, and we keep an auditable record of what you agreed to and when.

We do not sell or resell your data

Gamivate does not sell your personal data, and does not shareit with unrelated third parties for their own marketing. One brand never gets access to another brand's players.

Legal basis

The brand's marketing relies on the consent you give to enter its campaign and submit your score. Gamivate's own marketing relies on a separate, optionalconsent. Both are recorded with a full audit trail. We reference the GDPR and Egypt's Personal Data Protection Law (Law No. 151 of 2020) as our baseline.

Retention

Data is retained per the brand's plan and instructions, after which it is anonymized or deleted. Consent and audit records are kept as required for compliance.

Your rights

You may request access, correction, export, or deletion of your data, and withdraw consent at any time. Contact the brand for data they control, or Gamivate for data we control — we provide the tooling to fulfil these requests either way.

Sub-processors

We use vetted providers for hosting, storage, email, and analytics (e.g. Supabase, Cloudflare, Resend), each under a data-processing agreement.

Contact

Questions about this policy? Reach us via our contact page.