// LEGAL

Privacy Policy

Effective Date: [DATE]

Last Updated: [DATE]

This Privacy Policy describes how [LEGAL ENTITY NAME] ("Company," "we," "us," or "our"), operator of the Lootify service available at lootify.gg and related domains, applications, and properties (collectively, the "Service"), collects, uses, discloses, and otherwise processes information in connection with your use of the Service.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

1. Scope

This Privacy Policy applies to information we process in connection with the Service. It does not apply to third-party platforms, websites, or services that we do not own or control, including Valve Corporation's Steam platform, even where the Service interoperates with them. Your use of such third-party services is governed by their respective privacy policies and terms.

2. Information We Collect

We may collect and process the following categories of information. The specific information collected depends on how you interact with the Service, the configuration of your connected accounts, and the features you use.

2.1 Information from Authentication

The Service uses third-party platform authentication (currently Steam OpenID) to verify your identity and create your account. When you connect a platform account, we may receive and store a verified platform account identifier and related account references. We do not request, receive, or store your platform password.

2.2 Account and Profile Information

When you create or maintain an account, we may collect and store account, profile, and identity information associated with the Service, including display names, profile slugs, account identifiers, and similar records used to operate your account.

2.3 Gaming and Platform Data

Where available and permitted by your connected platform's settings and APIs, we may collect, retrieve, and store gaming and platform-related information associated with your connected account, including but not limited to: public profile details (such as persona name, avatar, profile URL, account creation date, level, status, and visibility state); game library and ownership data; playtime, activity, and usage metrics; recently played and historical activity; wishlist and related interest data; achievements, completion data, and related statistics; badges, experience, and progression data; account standing and enforcement-related indicators; group, community, and social counts; device and hardware indicators; region or country indicators; game tags and category data; and associated raw data returned by connected platform interfaces.

The availability of this information depends on your connected platform account's privacy settings. If your platform profile is set to private or restricted, certain information may not be available, and certain features may be limited or unavailable.

2.4 Derived and Inferred Information

We may generate, derive, and store information about you based on the data described above, including but not limited to: interest, genre, and affinity profiles; player archetypes and classifications; behavioral indicators and scores; estimated library value, play patterns, and activity-based metrics; engagement, collector, and spending-related indicators; and other analytical, statistical, or inferred attributes. Some of this information may be used for personalization, analytics, product development, security, and to support relevant features and offers as described in this Policy.

2.5 AI-Generated and Personalized Content

We may use automated and artificial-intelligence systems to generate personalized content based on your information, including narrative summaries, profile descriptions, and similar outputs. Such content may be stored, displayed, and associated with your account and, where applicable, made publicly accessible as described in Section 6.

2.6 Information You Provide Directly

When you contact us, submit a form, participate in a feature, or otherwise communicate with us, we may collect the information you choose to provide, such as your name, email address, message content, and any other details you include.

2.7 Technical and Usage Information

When you access the Service, we and our service providers may automatically collect technical and usage information, including but not limited to IP address, device and browser information, log data, timestamps, session and authentication data, and similar information generated through your use of the Service or through our hosting and infrastructure providers. We may use cookies and similar technologies as described in Section 7.

We may collect additional categories of information not specifically listed above where reasonably related to the operation, improvement, security, or commercialization of the Service.

3. How We Use Information

We may use the information we collect for purposes including, but not limited to:

  • Providing, operating, maintaining, and securing the Service;
  • Creating and managing your account and authenticating your access;
  • Generating, displaying, and personalizing content, profiles, classifications, and recommendations;
  • Developing, testing, and improving the Service and developing new features and products;
  • Performing analytics, research, and statistical analysis;
  • Detecting, preventing, investigating, and addressing fraud, abuse, security incidents, and violations of our terms or applicable law;
  • Communicating with you, including responding to inquiries and sending service-related or, where permitted, promotional communications;
  • Offering, facilitating, or measuring rewards, drops, sweepstakes, promotions, partner offers, and related features;
  • Presenting, personalizing, and measuring offers, content, and promotions, including from third-party brands and partners;
  • Complying with legal obligations and enforcing our rights and agreements; and
  • Any other purpose disclosed to you or for which you provide consent.

We may aggregate, anonymize, or de-identify information and use it for any lawful purpose without restriction under this Policy.

4. Automated Processing and Artificial Intelligence

We may use automated systems and third-party artificial-intelligence providers to process information, generate content, and derive insights. Certain features of the Service rely on automated profiling and classification. Outputs of automated and AI systems may be inaccurate, incomplete, or unsuitable for any particular purpose and are provided without warranty. Where required by applicable law, you may have rights with respect to automated decision-making; see Section 9.

5. How We Share Information

We do not sell or rent your personal information, and we do not share your personal information with brands or partners for them to use on their own behalf. We may disclose information only as described in this section:

  • Service Providers and Processors. We may share information with vendors, contractors, and service providers that perform functions on our behalf, such as hosting, infrastructure, authentication, database, analytics, communications, and artificial-intelligence services, subject to appropriate obligations.
  • Connected Platforms. We interact with connected platforms (such as Steam/Valve and related interfaces) to authenticate you and retrieve permitted data. Such interactions are subject to those platforms' own terms and policies.
  • Brands and Partners. Brands and partners may offer rewards, discounts, and promotions to players who meet certain criteria (for example, a particular archetype or play profile). When they do, the matching takes place within the Service using information we already hold: we determine which accounts qualify and deliver the offer to you through the Service. We do not provide brands or partners with your personal information, your account credentials, or your connected-platform data for this purpose. Brands or partners may receive aggregated, de-identified, or anonymized information, such as the number of players who viewed or redeemed an offer. If you choose to redeem an offer or follow a link to a brand or partner, any information you provide to them, or that they collect on their own properties, is governed by their own privacy policies.
  • Legal and Safety. We may disclose information where we believe it is reasonably necessary to comply with law, legal process, or governmental requests; to enforce our terms; or to protect the rights, property, safety, or security of the Company, our users, or others.
  • Business Transfers. We may disclose or transfer information in connection with, or during negotiations of, a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, or in the event of insolvency or bankruptcy.
  • With Your Direction or Consent. We may share information at your direction or with your consent.

We may also share aggregated, anonymized, or de-identified information without restriction.

6. Public Information

Certain features of the Service generate a public-facing profile that may be accessible to anyone with the corresponding link or address, without authentication. Information made available through a public profile may include items such as your display name, avatar, archetype and classification data, selected statistics, derived lore or summary content, and AI-generated narrative content.

By using these features, you understand and agree that such information may be publicly accessible, indexed, cached, shared, or copied by third parties, and that we cannot control the further use of information once it has been made public. If you wish to request removal or restriction of a public profile, you may contact us as described in Section 14, and we will address such requests in accordance with applicable law.

7. Cookies and Similar Technologies

We and our providers may use cookies, local storage, and similar technologies to operate the Service, maintain sessions and authentication, remember preferences, and support security, analytics, and functionality. You may be able to control certain technologies through your browser settings; however, disabling them may affect the availability or functionality of the Service. We may update our use of these technologies over time.

8. Data Retention

We retain information for as long as reasonably necessary to fulfill the purposes described in this Policy, to operate and improve the Service, to comply with our legal obligations, to resolve disputes, and to enforce our agreements, unless a longer or shorter period is required or permitted by law. We may retain aggregated, anonymized, or de-identified information indefinitely. Retention periods may vary depending on the type of information and the context in which it was collected.

9. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights with respect to your personal information, which may include the right to access, correct, delete, restrict, or object to certain processing; the right to data portability; the right to withdraw consent; and the right to lodge a complaint with a supervisory authority. Residents of certain jurisdictions, including the European Economic Area, the United Kingdom, and certain U.S. states (such as California), may have additional rights under applicable law.

To exercise any rights available to you, you may submit a request to us using the contact details in Section 14. We may take reasonable steps to verify your identity before responding and may decline requests where permitted by law. We will not discriminate against you for exercising your rights.

You may also disconnect your account from the Service and, separately, revoke the Service's access through your connected platform's account settings.

Additional Disclosures for U.S. State Residents. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. If our practices change, we will update this Policy and provide any opt-out rights required by law before doing so. You may contact us at any time using the details in Section 14 to exercise applicable rights.

10. International Data Transfers

We are based in the United States, and our service providers may be located in the United States and other jurisdictions. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in countries that may have data-protection laws different from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

11. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or the minimum age required to use the underlying connected platform, or the minimum age of digital consent in your jurisdiction, whichever is greater). If you believe a child has provided us with personal information without appropriate consent, please contact us, and we will take reasonable steps to address the matter.

12. Security

We implement reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account and access credentials.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Material changes may be communicated through the Service or by other reasonable means. Your continued use of the Service after any update constitutes your acceptance of the revised Policy.

14. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or our data practices, you may contact us at:

[LEGAL ENTITY NAME]
[ADDRESS]
[CONTACT EMAIL]

Or use our contact form →. See also our Terms & Conditions.

This document is a template and does not constitute legal advice. It should be reviewed and adapted by qualified legal counsel before publication or reliance.