Gauntlets Privacy Policy

1 Scope and privacy responsibility

This Policy applies to information we handle through our website and services and related support, event administration and business communications. It applies to free beta activities as well as paid features when those features are offered. A description of payment or verification information does not mean that deposits, withdrawals or identity checks are available in every version of the platform.

Our founders oversee privacy requests and compliance through the Privacy Officer role. Information about our privacy practices and complaint process is available on request at support@gauntlets.gg.

The Terms of Service at gauntlets.gg/terms govern your use of Gauntlets. This Policy is a notice about our data practices. Accepting the Terms or reading this Policy does not, by itself, supply consent for every use of personal information. Where a separate choice or consent is required, we provide it in connection with the relevant activity.

2 Information you provide

The information you provide depends on how you use Gauntlets. It can include:

• Account information, such as your email address, chosen username, password supplied through our authentication process, linked sign-in identity and changes to your profile or account settings.
• Eligibility information, such as your age or date of birth, declared country and state or province, and information reasonably requested to confirm eligibility for a game, prize or payment.
• Community content, including chat messages, public posts, reports and other content you choose to submit.
• Support and dispute information, such as your correspondence, relevant game or transaction details, screenshots and other evidence you provide. If you contact us through Discord, we receive the messages and profile information visible to us there.
• Event and payment information, such as entry details, prize-claim information, recipient details, payment instructions and tax information when needed to deliver a prize or other payment or meet a legal obligation.
• Referral and affiliate information, such as a referral code, attribution details, program communications and information needed to verify and pay eligible commissions.
• Privacy and communication choices, including consent records, document versions presented to you, preference changes and requests to unsubscribe, access information or close an account.

We identify required information in the relevant process. If you do not provide information needed to create an account, verify eligibility, settle a dispute or deliver a payment, we may be unable to provide that part of the service. Do not send passwords, full payment credentials or identity documents through public chat or ordinary support correspondence. We will identify an appropriate process if sensitive verification information is needed.

3 Information generated through use of the services

Our systems generate records of account access, game participation and transactions. These include account and session identifiers, entry amounts, game and room identifiers, timestamps, player inputs and actions, relevant game state, results, eliminations, collections, extractions, rank progress, ledger entries, settlement adjustments and referral activity. Records may be linked to your account so that we can operate games, maintain balances, calculate rewards and resolve disputes.

When you connect to the services, we and our service providers process technical information such as IP address, browser and device characteristics, operating system, connection and request information, pages or features used, referring links, error reports and security logs. An IP address can be used to estimate your country or region. We may compare that estimate with location information you provide when checking eligibility or investigating misuse.

Analytics can include page views, feature interactions, performance measurements, errors, referral sources and identifiers used to associate events with a browser, session or account. Some records may therefore identify an account even if they do not contain an email address or real name. A hashed or coded identifier is not necessarily anonymous.

We also record gameplay and relevant session activity for fair play, technical investigation and dispute resolution. These records can include a sequence of actions or game states from which an incident can be reviewed. Browser session replay is a separate diagnostic feature described in section 6.

4 Information received from other sources

If you choose Google sign-in, we receive the account identifiers and profile information made available through that sign-in process, such as your email address and verification status. The information depends on the permissions and account settings involved. We do not receive your Google password through that process.

Other players may provide information about you in reports, disputes or public messages. Referral links and affiliates can provide attribution information. We assess reports alongside relevant records rather than assuming that a report establishes misconduct.

Where a payment, prize-delivery or verification provider is used, it may give us transaction references, amounts, statuses, limited payment-method details, verification results or fraud indicators. We may also receive information from professional advisers, public authorities or other lawful sources where needed to investigate a specific issue or meet a legal obligation. We limit that collection to the purpose involved.

5 How we use personal information

We use the information described above for the following purposes:

• To create and secure accounts, authenticate users, provide account recovery, apply preferences and communicate about the service.
• To admit players, operate multiplayer games, determine and record results, maintain balances, settle entries, correct errors and provide transaction history.
• To administer events, confirm eligibility, verify standings, deliver prizes and handle associated reporting obligations.
• To attribute referrals, calculate and verify eligible commissions, maintain program records and address abuse.
• To operate chat and community features, publish the public information described in section 7 and review reports about harmful or unlawful conduct.
• To investigate cheating, collusion, account misuse, fraud and technical incidents; protect users and systems; enforce the rules; and review complaints or appeals.
• To understand use of the platform, diagnose errors and improve game performance, reliability and usability, subject to the choices applicable to optional analytics and replay.
• To send permitted marketing communications and promote Gauntlets using public gameplay or other content as described in sections 7 and 11.
• To respond to privacy requests, maintain evidence of choices and notices, meet legal obligations, obtain professional advice and establish or defend legal claims.

We use information for the purposes explained when it is collected or for a compatible purpose permitted by law. If we introduce a materially different use requiring further notice or consent, we address that before starting the new use. We do not require consent to unrelated marketing as a condition of playing.

6 Cookies analytics and session replay

Cookies, browser storage and similar technologies support sign-in, session continuity, security, preferences and referral attribution. Some are needed for functions you request. Blocking or clearing them can sign you out, reset a preference or prevent a feature from working.

Referral links use attribution information to connect a qualifying signup with a referrer. The referral attribution cookie can remain for up to 30 days. Related visitor identifiers and visit-confirmation records help measure link activity and distinguish repeat visits. A referral relationship and related commission records may remain in our account records after the browser cookie expires. Cookie expiry is not a deletion date for all related records.

We use analytics integrations, including PostHog and Vercel Analytics, to measure service use and diagnose performance or technical problems when enabled. Depending on the integration and configuration, relevant information can include the technical and usage information described in section 3. Some analytics or diagnostic events are generated by our servers and do not depend on a browser cookie.

Where browser session replay is enabled, it reconstructs interactions with the Gauntlets interface, such as navigation, clicks, scrolling and the page elements displayed during a visit. It can reveal how a person uses the service even without recording video from a camera. We use this feature for diagnosing problems and improving the experience, not as a source of advertising footage. It is separate from game records needed to adjudicate play.

Before enabling optional replay, we limit its collection through masking or exclusion of sensitive fields and areas, including passwords, payment credentials, identity documents and private communications. We provide any required notice and obtain any required consent before optional analytics or replay begins. Where a preference control is offered, you can use it to change your choice; you can also contact support@gauntlets.gg to withdraw consent or ask about available controls. Refusing optional analytics or replay does not prevent ordinary account access or gameplay.

Browser settings can block or remove stored data, but they do not erase records already held by us or necessarily stop server-side processing. A general Do Not Track browser setting does not switch off the account, gameplay and security records needed to provide the service. Any legally required recognition of an opt-out preference signal, including Global Privacy Control, applies to the processing covered by that requirement.

7 Public gameplay community content and promotion

Gauntlets is a multiplayer service. Your public username, rank, gameplay, selected results, leaderboard position and lobby activity may be visible to other players or visitors. Public chat is visible to its audience. Automated community announcements may identify your public handle and a game result or extraction payout. Event announcements may identify a winner by public handle, placement and prize under the event rules.

A public result or prize amount is different from access to your private balance, complete transaction history, email address or payment information. We do not make those private records public merely because you participate in a game or event. Choose a handle that you are comfortable using publicly, and avoid posting contact details or other information you want to keep private.

We may use public gameplay clips, public handles, ranks and published achievements in Gauntlets website content, social media, promotional videos and paid advertisements, as described in the Terms of Service and subject to applicable privacy requirements. Advertising platforms and people viewing or sharing those materials receive the information included in them. This use does not include nonpublic session replays, private support correspondence, identity documents, contact details or private financial records.

We obtain separate permission where required for promotional use, including use of your real name, personal photograph, identifiable voice or testimonial. We do not portray participation as an endorsement you have not given. You may contact us about promotional use of information relating to you, including to exercise an applicable consent-withdrawal or removal right. A content licence does not override a mandatory privacy right.

Other people may copy, stream, screenshot or redistribute public information. Removing information from our services may not remove copies held by independent third parties. We will address requests concerning the copies and uses within our control and any further steps required by law.

8 Payments prizes and identity verification

When a payment or verification feature is offered, the information needed depends on the transaction and provider. A provider may collect payment credentials, billing or recipient details, identity evidence and information needed to check fraud, eligibility or legal requirements. The relevant process will identify the provider and explain any additional collection before you submit the information.

Gauntlets may receive or retain the information needed for account accounting, reconciliation, support and compliance, such as your recipient details, transaction amount and currency, payment reference, status, verification outcome and relevant dispute records. A provider collecting payment credentials directly does not mean that Gauntlets receives every underlying credential or document. We do not claim that a provider arrangement eliminates our responsibility for information under our control.

For prizes or affiliate payments arranged with you directly, we collect the contact, eligibility, payment and tax information reasonably needed for that payment. We use it to verify and deliver the entitlement and meet applicable obligations. Claiming a prize does not itself authorize publication of private identity or payment information.

If an additional verification process involves materially different or sensitive collection, the associated notice and any required consent must be provided before that collection. We do not treat this general Policy as permission for an undisclosed biometric verification process.

9 Who receives personal information

Access within Gauntlets is limited to people who need information for their responsibilities, such as account support, technical operation, fair-play review, privacy requests and payment administration.

We use service providers for authentication, databases, website and game hosting, network delivery, chat, analytics, communications and related technical services. Platform integrations include Supabase for account and database services, Stream for chat, Vercel for website services and analytics, and PostHog for analytics and diagnostics. An integration processes information when enabled for the relevant service. Providers receive the information needed for their role; for example, chat operation involves account identifiers, public handles, rank information and messages.

Where applicable, payment, verification and prize-delivery providers receive the information needed to process a transaction or check. Some providers also process information for their own legal, security or payment-network purposes, which their notices explain. For processing performed on our behalf, we remain accountable as required by law and require appropriate restrictions and safeguards. You may ask us about the providers relevant to your information.

Affiliates may receive reports about visits, registrations, qualifying activity and commissions attributable to their referral links. This does not give them general access to referred players’ private account records, email addresses, balances or full transaction histories. We limit disclosures to what is needed to administer the referral arrangement and explain any additional identifiable reporting before introducing it.

We may disclose relevant information to professional advisers, auditors, insurers or authorities where reasonably necessary and lawfully permitted to obtain advice, comply with an obligation, respond to valid legal process, investigate fraud or protect legal rights and safety. We assess requests and limit disclosures to the information justified by their purpose.

Information may be reviewed or transferred in connection with a genuine business acquisition, financing, reorganization or transfer of assets, subject to applicable confidentiality, purpose-limitation and privacy requirements. Such a transaction does not give a recipient unrestricted permission to repurpose your information.

We also disclose public information as described in section 7 and information you specifically direct or consent to us sharing. We do not sell your personal information. We do not provide private account records or gameplay histories to third parties for their own direct marketing. Introducing advertising technology that uses personal information for targeting across other companies’ services would require appropriate updated disclosures and choices before that processing begins.

10 International processing

Gauntlets is operated by a Canadian company and uses services that may process or store information outside your province, state or country, including in the United States. Processing locations depend on the service involved. This Policy does not promise that all information remains in Canada or in a single hosting region.

Information processed in another country may be subject to that country’s laws and lawful access by courts, law-enforcement bodies or other public authorities. We use safeguards appropriate to the transfer and remain responsible for information under our control as required by applicable law. You may contact our Privacy Officer for information about processing outside Canada and the providers involved.

11 Consent and communication choices

Where we rely on consent, we seek it in a form appropriate to the information and purpose. You may withdraw consent by using the applicable control or contacting support@gauntlets.gg. We will explain any resulting limits on the service. Withdrawal does not undo processing already lawfully completed and does not require us to stop processing that the law requires or otherwise permits without consent.

You can decline optional marketing. Marketing emails include an unsubscribe method, and you can also ask us to stop them at support@gauntlets.gg. We retain the information needed to honor an unsubscribe request. Essential account, security, transaction, support and event-administration messages may still be sent when needed to provide the service or meet an obligation.

Public participation necessarily reveals some information to other players, as described in section 7. Optional advertising use and private information are subject to the separate limits described there. If you want to discuss a particular disclosure or change your participation, contact us so we can explain the available options.

Preferences may apply to a particular browser, device, account or communication channel. Changing devices, clearing browser storage or using a different email address can affect how a preference is recognized. You can contact us if a choice does not appear to be taking effect.

12 Retention and deletion

We keep personal information for as long as reasonably needed for the purposes described in this Policy, subject to applicable retention requirements. The relevant period depends on the type of information, whether your account is active, any unsettled game or payment, the need to investigate an incident or complaint, and legal or accounting requirements.

Account information is retained while needed to provide the account and resolve closure. Transaction, prize and affiliate records may need to remain after closure for reconciliation, reporting, disputes or legal obligations. Gameplay, chat, analytics and diagnostic records are retained according to their operational purpose; relevant portions may be preserved longer as evidence of a specific incident. We retain consent and preference records as needed to demonstrate and honor your choices. Where law requires information used in a decision affecting you to be kept for a minimum period, that requirement also applies.

We do not keep every record indefinitely merely because it might be useful. When personal information is no longer needed and no retention requirement applies, we delete it or make it no longer reasonably identifiable. Removing direct identifiers from an accounting record may allow us to preserve a necessary transaction history, but a record that can still reasonably be linked to you remains subject to applicable privacy protections.

Account closure is not instantaneous deletion from every system. Necessary records may remain while pending matters are resolved, and backup copies may persist until their retention cycle ends. Information retained for a limited purpose is restricted to that purpose, including legal compliance and recovery. We coordinate applicable deletion or correction actions with providers processing information on our behalf and address them if retained backups are restored.

You may request information about the retention criteria relevant to your records. A deletion request does not itself cancel a valid balance, prize or other entitlement; we may need to retain limited information to settle it.

13 Security

We use technical and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration and disclosure. These include authentication and access restrictions, controls over account and transaction operations, and relevant security logging. Measures are selected according to the information and risks involved. No online service can guarantee absolute security.

Keep your credentials private and contact support@gauntlets.gg promptly if you suspect account compromise or discover a security issue. Do not include passwords, full payment credentials or unnecessary identity documents in an initial report. We assess incidents, take appropriate protective and recovery steps, and provide notifications when required by applicable law.

14 Your privacy requests and rights

You can ask us to explain our handling of your information, provide access, correct inaccurate information, delete information where applicable, or close your account. Depending on your location and the law that applies, you may also have rights to confirm processing, obtain a portable copy, restrict certain processing, withdraw consent, or object to particular uses. Some laws provide rights to opt out of sale, sharing for cross-context advertising, targeted advertising or certain profiling, and to limit specified uses of sensitive information. Those rights apply where the relevant law and activity apply.

Send a request to support@gauntlets.gg, addressed to the Privacy Officer. Include your account email or public handle and a description of what you want us to do. You do not need to know a statute or cite a section to make a request. If you cannot access your account email, tell us so we can consider another verification method.

We may take proportionate steps to confirm identity or authority before disclosing or changing account information. An authorized representative may contact us where permitted by law, subject to appropriate proof of authority. We use verification information for that process and related security needs, rather than requesting unrelated details.

We respond within the period required by applicable law and explain any permitted extension. If we cannot fulfill all or part of a request, we explain the reason and available review or complaint options, subject to lawful limits. Access may require redaction of another person’s information, privileged material or protected investigation details. We do not treat an internal record or investigation label as a blanket exemption from privacy rights.

You may ask our Privacy Officer to review a response or decision by replying to the response or emailing support@gauntlets.gg. We handle any applicable appeal within the legal requirements. You may also contact the privacy regulator or other authority with jurisdiction. For British Columbia, the Office of the Information and Privacy Commissioner is at oipc.bc.ca; the Office of the Privacy Commissioner of Canada is at priv.gc.ca. Using our internal process does not remove any right to approach an authority.

We will not unlawfully discriminate or retaliate against you for exercising privacy rights. If a request prevents processing that is genuinely necessary for a particular service, we explain the consequence rather than treating the request as misconduct.

15 Automated processing and fair play review

Software processes account and gameplay information to operate rules, calculate results and balances, enforce admission conditions, and identify activity that may require security or integrity review. This can affect whether an entry is accepted, a transaction proceeds or a result is recorded. Automated records and indicators can contain errors.

You can contact support@gauntlets.gg to dispute a game, balance, eligibility restriction or enforcement action and request review. We consider relevant information when reviewing the matter. Where an applicable law requires specific notice, an explanation, an opportunity for human review or another safeguard for an automated decision, we provide that safeguard. This Policy does not waive those rights or make an automated flag conclusive evidence of misconduct.

16 Children and underage users

Gauntlets is intended for adults who meet the age requirements in the Terms of Service and applicable competition rules. It is not directed to children, and we do not knowingly permit people under 18 to create accounts. A higher age requirement may apply to participation.

If you believe an underage person has provided personal information or opened an account, contact support@gauntlets.gg. We will investigate and take appropriate steps to restrict access and delete the information, subject to limited retention permitted or required for security, legal obligations or resolving the matter. A parent or guardian reporting a concern should not send the child’s password.

17 Other websites and changes to this Policy

Links to Discord, sign-in services, payment providers or other websites may take you to services with their own privacy notices and controls. This Policy describes Gauntlets’ handling of information; it does not govern an independent provider’s separate activities. When our team receives information through an external service, our handling of that information remains subject to this Policy.

We may update this Policy as our services or practices change. The version posted at gauntlets.gg/privacy identifies its last update date. For material changes, we provide appropriate notice, such as a notice through the service or an email, before the change takes effect where required. We obtain further consent when required for a new or changed use. Posting a revised Policy does not by itself authorize an incompatible use of previously collected information or override an existing choice.

18 Contact

For privacy questions, requests, complaints or concerns about how a provider handles information for Gauntlets, contact:

Privacy Officer
FOUNDRY PLATFORMS INC
Gauntlets
support@gauntlets.gg