Version 1.1 · effective 18 October 2026
1.1 Playlytix s. r. o., with registered office at Galbavého 1860/1, 841 01 Bratislava - mestská časť Dúbravka, Slovak Republic, company registration number (IČO) 57017140, registered in the Commercial Register of Mestský súd Bratislava III, section Sro, insert 191319/B ("Playlytix", "we", "us"), is the controller of the personal data described in this policy within the meaning of Article 4(7) of Regulation (EU) 2016/679 ("GDPR").
1.2 This policy explains what personal data we collect about you as a registered tester of the Playlytix platform at app.playlytix.gg, why we collect it, the legal basis on which we process it, who receives it, where it is sent, how long it is kept and what rights you have. It is provided under Articles 13 and 14 GDPR and, in respect of testers resident in the United States, constitutes our notice at collection under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").
1.3 This policy applies to you as a tester. Visitors to our public website and our Studio clients are covered by separate notices. Cookies and similar technologies are covered by our Cookie Policy.
1.4 This policy is not a contract. It is the information we are required by law to provide to you. Your confirmation at registration that you have read it is not a consent, does not give us any right, and does not remove or reduce any right you have. The agreement between us is the Tester Terms and Conditions (the "Terms"), and this policy uses the defined terms established there, including Test, Test Brief, Test NDA, Submission, Licence, Playlytix Points, Reward, Payout Partner, Studio, Connected Account, Recording Permissions and Quality Score.
1.5 Where this policy and any other Playlytix document differ on a matter of data protection, this policy prevails.
1.6 Contact. For any question about your personal data, or to exercise any right described in this policy, write to privacy@playlytix.gg, or to Playlytix s. r. o., Galbavého 1860/1, 841 01 Bratislava - mestská časť Dúbravka, Slovak Republic. For any other matter, write to support@playlytix.gg.
2.1 We collect personal data at the points described below. We collect it from you directly, save where clauses 2.5, 2.7 and 2.9 provide otherwise.
Data | Purpose |
|---|---|
Email address | To create your account, to authenticate you, and to send invitations and notices concerning your account |
Password, stored only as a cryptographic hash | To secure your account. We do not hold your password in a readable form |
Playlytix username | To identify you to other Testers, in Discord channels and in material delivered to Studios. Clause 4.2 of the Terms prohibits the use of your name or surname |
Confirmation that you are 18 or over | Eligibility under clause 3.1 of the Terms |
Where you register through Discord or Google: the account identifier, username or name, avatar and email address held by that provider | To create and authenticate your account. We do not receive your password with that provider |
The record of your acceptance: date and time, the version and content hash of the Terms and of this policy, the identifier of the text displayed, the interface language, the registration method and the age confirmation | To demonstrate what you agreed to and when |
2.3.1 Your profile allows us to match you to Tests for which you are suited and to describe the composition of a panel to a Studio. It comprises: about you (country, country of tax residence, time zone, gender, age range, employment status, games-industry experience and languages); how you play (hours, availability, platforms, player type, genres, session length and playing times); what you buy (spending, price paid, purchasing habits and subscriptions); how you find games; your setup (processor, graphics card, memory, storage, display, operating system, connection, microphone and screen recording software, all entered by you, as we do not scan your device); your testing experience; and your Connected Accounts and Discord connection.
2.3.2 Every question in the sections "about you" and "what you buy" offers the answer "Prefer not to say". Selecting it completes the question and means only that we will not match you to a Test that specifically requires that answer.
2.3.3 Your individual profile answers are not disclosed to a Studio. They reach a Studio only as statistics aggregated across the panel.
2.4.1 A connected Discord account is required under clause 6.1 of the Terms. On connection we receive your Discord user identifier, username and avatar, and permission to add you to our server. We do not receive your password and have no access to your direct messages, your friends, the other servers to which you belong or any activity outside our own server. We do not post as you.
2.4.2 Under clause 8 of the Terms a Build is delivered to a game platform account. On connection we receive your platform account identifier, your display name and confirmation that the account is yours: on Steam your SteamID64 and public display name; on Epic Games your account identifier, display name and, where region eligibility applies, your country; on Xbox your gamertag and XUID. We do not receive your password. Connection is necessary to perform our agreement with you and is not presented to you as a consent.
2.5.1 Reading your library and playtime. Under clauses 7.2 and 9 of the Terms, the eligibility check for a Test is carried out by reading from each Connected Account the games held on it, the time played in each of them, the time played in the genre relevant to a Test, and the games recently played, including their playtime. We read those data when you apply to a Test and periodically while your profile is complete, currently every 14 days, so that the data on which you are matched remain current. Each reading replaces the previous one. The reading is necessary to perform our agreement with you, in particular to match you to Tests and to meet the panel requirements we owe to a Studio, and is not presented to you as a consent. You may end the reading of an account at any time by disconnecting it; we then delete what we have read from that account, and anything derived from it, within 30 days.
2.5.2 Verification for a particular Test. Where a Test Brief states a requirement capable of verification on a platform, for example a minimum number of hours played in a named game, we verify it at the moment you apply, in respect of that data point. We record the criterion, whether it was met and the date and time of the check.
2.5.3 We read the games held, the games played and the time played in them only. We do not read your friends list, your reviews, your wishlists, your messages or your purchases. Your library and playtime data are not disclosed to a Studio; a Studio receives only the confirmation that the panel meets the requirements of the Test Brief and statistics aggregated across the panel.
2.5.4 We maintain a record of each reading and each verification, comprising the account concerned, the data points read, the result and the date and time.
Data | When collected |
|---|---|
The record of your acceptance of the Test NDA: date and time, the version and content hash of the Test NDA and the identifier of the text displayed | Every Test, before the Build is released to you |
Your questionnaire answers, bug reports, ratings and, where applicable, your session log | Every Test |
A recording of the game window | Only where the Test Brief requires it and you have given the screen recording consent for that Test |
Your spoken commentary and its written transcript | Only where the Test Brief requires it and you have given the microphone consent for that Test |
Technical information concerning the session: start and end time, duration, and whether the Build ran correctly | Every Test |
The evaluation record described in clause 13.11 of the Terms, the Playlytix Points awarded and your Quality Score | Every Test |
The recording and summary of a one-to-one session with a Studio | Only where you have consented to that particular session |
2.7.1 Under clause 15 of the Terms, Rewards are paid by the Payout Partner, a third-party payment and compliance provider engaged and paid by us which acts as merchant of record for the payment. When a Reward first becomes payable to you, and not at registration, we direct you to the Payout Partner to complete onboarding. You provide your first name and surname, date of birth, address, country of residence and country of tax residence, payment method and payment details, and any tax identification documentation required by the law applicable to the payment directly to the Payout Partner. The Payout Partner collects and processes that data as an independent controller under its own terms and privacy notice, which are presented to you at onboarding. We do not receive your IBAN, PayPal account or other payment details, and we do not receive your tax identification documents.
2.7.2 We pass to the Payout Partner your Playlytix tester ID, your email address, your first name and surname as declared to us, your country of residence and country of tax residence as declared to us, the amount of each Reward, the Test to which it relates and the payment reference. We receive from the Payout Partner confirmation of your onboarding status, the outcome of its verification of your identity and of the name on the receiving account, the outcome of its screening against sanctions and restricted party lists, the status of each payment, and, where a deduction at source has been made, the amount and basis of the deduction as stated in the payment statement.
2.7.3 We record the result of the comparison between the name confirmed by the Payout Partner and the name on your account, the result of our own screening against sanctions and restricted party lists, and the record of each payment, comprising the amount, date, reference, the Test to which it relates and any deduction made.
2.7.4 Payment records are held separately. The payment records we hold are stored in a logically separate environment from all testing data, are encrypted, are accessible only to our finance function, and are never combined with a Submission or exported into any material delivered to a Studio.
2.8.1 Where you take part in our Discord server we process your Playlytix username, your Discord identifier and the content you post in our channels. Content posted in a community space is visible to other members and is not confidential. We do not request payment details through Discord or by direct message, and any such request is fraudulent.
3.1 We process your personal data for the purposes and on the legal bases set out below.
Purpose | Legal basis |
|---|---|
Creation, authentication, operation and security of your account | Article 6(1)(b) GDPR, performance of a contract, and Article 6(1)(f), legitimate interests, as to security |
Maintenance of your profile and the matching of testers to Tests | Article 6(1)(b) |
Connection of a game platform account in order to deliver a Build, and connection of Discord in order to conduct Tests in a private channel | Article 6(1)(b) |
Reading the games held on a Connected Account, the time played in them and the games recently played, repeating that reading periodically, and verifying a requirement stated in a Test Brief, in each case for the eligibility check under clauses 7.2 and 9 of the Terms | Article 6(1)(b), performance of a contract |
Recording of your acceptance of the Test NDA for each Test | Article 6(1)(b) and Article 6(1)(f) |
Collection, evaluation and analysis of your Submission, the award of Playlytix Points, the use of your Submission under the Licence, and maintenance of your Quality Score | Article 6(1)(b) |
Recording of the game window, recording and transcription of your spoken commentary, and disclosure of the resulting material to the Studio whose game you tested | Article 6(1)(a), consent given for that Test |
Arrangement and conduct of a one-to-one session with a Studio | Article 6(1)(a), a standing indication in your profile together with your confirmation of the particular session |
Transmission of your tester ID, name, email address, declared countries and Reward data to the Payout Partner, and payment of a Reward through the Payout Partner | Article 6(1)(b) |
Retention of payment, accounting and tax records, and reporting to a tax authority where required | Article 6(1)(c), legal obligation, in particular Act No. 431/2002 Coll. on Accounting and Act No. 595/2003 Coll. on Income Tax |
Recording of your acceptance of the Terms and of your consents | Article 6(1)(c), read with Article 7(1), and Article 6(1)(f) |
Prevention of fraud, detection of duplicate accounts, comparison of the name confirmed by the Payout Partner with your registered identity, screening against sanctions and restricted party lists, and enforcement of confidentiality | Article 6(1)(f), and Article 6(1)(c) as to sanctions screening. The right to object under Article 21 applies to processing based on Article 6(1)(f) |
Messages concerning your account, the Tests you have joined and your Rewards | Article 6(1)(b) |
Newsletters and marketing communications | Article 6(1)(a), consent, withdrawable at any time |
Establishment, exercise or defence of legal claims | Article 6(1)(f) |
3.2 Where we rely on our legitimate interests, we have assessed whether those interests are overridden by your interests or your fundamental rights and freedoms and have concluded that they are not, the processing being limited to what is necessary and disclosed to you here. A record of that assessment is available on request. You may object at any time under clause 10.
3.3 Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand. Upon withdrawal we cease the processing concerned and delete the material to which it relates within the period stated in clause 8.2. Withdrawal has no effect on your standing as a Tester, on your Quality Score, on your access to other Tests or on any Reward already earned.
4.1 The following are optional. Each is a separate choice, presented unticked, with equally prominent options, and each may be changed at any time in the same place in which it was given.
Optional item | If you decline |
|---|---|
Screen recording, and microphone commentary, each given separately | You may take part in Tests that do not require the deliverable concerned. Which criteria are scored changes; the Guaranteed Points and the way Points are converted into a Reward do not |
Disclosure of your recording and transcript to the Studio | Given together with the recording consents. Refusing disclosure while consenting to the recording is not possible, the disclosure being the purpose of the recording |
One-to-one sessions | You receive no invitations to sessions. Nothing else changes |
Newsletters and marketing | We continue to send messages concerning your account, the Tests you have joined and your Rewards |
General Discord community channels | You remain in the private channel of each Test you join. Nothing else changes |
4.2 Your account data, your profile, your Discord connection, your Connected Account or your declaration that you use none of the supported platforms, the reading of your library and playtime from each Connected Account under clause 2.5.1, your acceptance of the Test NDA for each Test you join, and the onboarding with the Payout Partner when a Reward becomes payable, are not optional in the same sense. We cannot match you to a Test, confirm to a Studio that the panel meets the requirements of the Test Brief, release a Build to you or pay you without them. We accordingly rely on the performance of our agreement with you rather than on consent, and they are not presented as switches.
4.3 Where you decline an optional item, we will not ask you again within 6 months, except the consent associated with particular Test Brief (invitations).
5.1 We do not seek data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, and we do not process genetic data.
5.2 A recording of your voice is not biometric data within the meaning of Article 4(14) GDPR unless it is processed for the purpose of uniquely identifying you. We do not apply voiceprint or speaker identification technology to your audio, do not use audio to authenticate you, and draw no inference of any special category of data from your voice or from a transcript.
5.3 Where you volunteer special category data in a free-text answer, we remove it before the material is delivered to a Studio and we do not use it for any purpose.
6.1.1 A Studio receives three things in respect of a Test: the interactive report compiled from the panel's answers; where you have given the screen recording consent, your gameplay recording; and where you have given the microphone consent, the transcript of your commentary.
6.1.2 Each of those carries your Playlytix tester ID and nothing else. A Studio cannot identify you from what it receives. It does not receive your name, your email address, your username, your payment details, your IP address, your Discord identity, your platform account identity, your individual profile answers or any means of contacting you. Your profile answers reach a Studio only as statistics aggregated across the panel.
6.1.3 The material is pseudonymised, not anonymous. A Studio cannot identify you, but we retain the key that links a tester ID to an account, so the material remains personal data in our hands and this policy continues to apply to it. Statistics aggregated across the panel are anonymous and fall outside the GDPR.
6.1.4 On receipt of that material a Studio acts as a separate and independent controller. Our contract with each Studio requires it to use the material solely for the development of the title you tested, to keep it confidential, not to seek to identify you, not to contact you, not to publish it, and to delete it at the end of an agreed period. Where you ask us to delete your data we delete our copy and instruct the Studio to delete its own.
Recipient | Function | Role |
|---|---|---|
Microsoft Azure | Operation of the platform and storage of data | Processor acting on our instructions |
Cloudflare R2 | Storage and playback of gameplay recordings | Processor |
Vercel | Hosting of the dashboard used to analyse answers and transcripts and compile reports for Studios | Processor acting on our instructions |
Zoho ZeptoMail; Resend (alternative email delivery provider) | Delivery of account and Test messages | Processor |
Google Meet | Hosting of one-to-one sessions | Processor |
ElevenLabs | Transcription of the spoken commentary in your recordings, only where you have given the microphone consent for that Test; only the sound of a recording is sent | Processor acting on our instructions |
Talentir | Payments and Tax compliance Onboarding, identity verification, sanctions screening, collection of tax documentation, execution of Reward payments, deduction at source and tax reporting under clauses 14 and 15 of the Terms | Independent controller under its own terms and privacy notice |
Discord, Google, Valve Corporation, Epic Games, Microsoft | Sign-in providers and the accounts you connect | Independent controllers under their own terms |
Professional advisers, accountants and auditors | Legal, accounting and audit services | Bound by professional confidentiality |
6.2.1 Each processor acts only on our documented instructions under a contract meeting the requirements of Article 28 GDPR. We do not permit a processor to use your data for its own purposes. Screening against sanctions and restricted party lists is carried out by us against publicly published lists and, separately, by the Payout Partner before it releases a payment.
6.2.2 The Payout Partner receives from us only the data listed in clause 2.7.2. It collects your payment details and tax documentation from you directly. Our contract with the Payout Partner requires it to use the data it receives from us solely for the onboarding, verification, payment, deduction and reporting described in clauses 14 and 15 of the Terms, and to return to us only the confirmations listed in clause 2.7.2. The Payout Partner's own privacy notice, presented to you at onboarding, describes its processing, its retention periods and how you exercise your rights against it.
6.3.1 We may disclose personal data where required by law, to a public authority acting within its powers, to establish, exercise or defend a legal claim, or to a purchaser in connection with a sale or reorganisation of our business. In the last case we will inform you and your rights will not be reduced.
6.4.1 We do not sell personal data and we do not share it for cross-context behavioural advertising, as those terms are defined under the CCPA. We do not license or supply personal data to any third party for that party's own independent purposes. We do not use personal data, and do not permit any other person to use it, to train artificial intelligence models. We do not disclose personal data to advertisers.
7.1 No decision concerning you is taken by automated means. Testers are matched to Tests and panels are composed by our staff. The acceptance of a Submission, the Playlytix Points awarded, the withholding of a Reward and the restriction, suspension or closure of your account are in every case decided by a person, as clause 13.9 of the Terms provides. There is accordingly no automated decision-making producing legal effects concerning you or similarly significantly affecting you within the meaning of Article 22 GDPR.
7.2 Software is used to transcribe spoken commentary, to assist in compiling the report delivered to a Studio, to carry out preliminary technical checks on a Submission, such as whether a file is complete and a recording audible, to convert Playlytix Points into the Reward amount at the fixed rate stated in clause 10.3 of the Terms, and to flag signals of possible fraud or duplicate accounts. A flag is never acted upon without a person reviewing it.
7.3 We do not use automated systems to analyse your emotional or psychological state, to predict whether you will exercise a legal right, or to infer any special category of data.
7.4 We will inform you in advance of any substantial change to the processing described in this clause.
8.1.1 Our Testers and our Studio clients are located worldwide, and some personal data is accordingly transferred outside the European Economic Area. This occurs where a Studio is established outside the EEA and receives material under your tester ID, where a service provider listed in clause 6.2 is established outside the EEA, and where you are yourself located outside the EEA.
8.1.2 Where we transfer personal data outside the EEA we rely on an adequacy decision of the European Commission covering the destination country or the recipient's certification; or the standard contractual clauses adopted by Decision (EU) 2021/914, together with an assessment of the law and practice of the destination country and any supplementary measures that assessment identifies; or, exceptionally and only where no other safeguard is available, a derogation under Article 49 GDPR.
8.1.3 We do not rely on a certification under an adequacy framework without confirming its status at the time of contracting. You may request a copy of the safeguard applicable to a particular transfer by writing to privacy@playlytix.gg. We store data within the EEA wherever it is practicable to do so.
8.2.1 We retain personal data for the periods set out below. On expiry we delete the data or anonymise it so that it can no longer be linked to you. Statistics that no longer identify any person remain in our reports, no longer constituting personal data.
Data | Period |
|---|---|
Account and authentication data | While the account is open, then 30 days |
Record of acceptance of the Terms and of this policy, and the consent log | Life of the account plus 4 years |
Tester profile | While the account is open, and 24 months after your last activity, in accordance with clause 18.5 of the Terms |
Discord identifier | Life of the account, then 30 days |
Connected Account identifier and display name | Until you disconnect the account, then 30 days |
Result of a requirement verification under clause 2.5.2: criterion, outcome and timestamp | 24 months |
Library and playtime data read under clause 2.5.1 | Until you disconnect the account, then 30 days; each periodic reading replaces the previous one |
Questionnaire answers, bug reports, session logs, transcripts, the Playlytix Points awarded and the evaluation record under clause 13.11 of the Terms | End of the project plus 24 months |
Gameplay recordings, voice recordings and one-to-one session recordings | End of the project plus 12 months. Deletable on request at any time |
Quality Score | Life of the account |
Payout Partner onboarding status and verification confirmations | Until the Payout Partner confirms closure of your payee record, or 30 days after closure of your account, whichever is later |
Payment and accounting records, the declaration of tax residence, and any deduction or reporting statement | 10 years, as required by Act No. 431/2002 Coll. |
Name-match results, sanctions screening results, and records of fraud, abuse and failed payments | 36 months |
Record of acceptance of each Test NDA | Term of the Test NDA plus 5 years |
Support correspondence, and security and access logs | 24 months and 12 months respectively |
9.1 We implement technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR. Recordings, transcripts and payment records are encrypted in transit and at rest. Access is restricted by role: only the finance function has access to payment records and only research staff have access to session material, and no role holds both by default. Access to recordings is logged. Payment details are not held by us and are held by the Payout Partner under its own security measures. Material delivered to a Studio carries only your tester ID, and transcripts are reviewed for the removal of personal details before delivery. Our staff are bound by obligations of confidentiality and trained in the handling of session material. We maintain records of processing activities, review our measures periodically, and execute deletion by automated expiry, each deletion being logged.
9.2 Where a personal data breach occurs we notify the supervisory authority in accordance with Article 33 GDPR and, where the breach is likely to result in a high risk to your rights and freedoms, we notify you without undue delay in accordance with Article 34.
10.1 You have the following rights. They are free to exercise and their exercise never counts against you.
Right | What it means | Article |
|---|---|---|
Access | To obtain confirmation of whether we process data concerning you, a copy of that data and the information set out in Article 15 | 15 |
Rectification | To have inaccurate data corrected and incomplete data completed | 16 |
Erasure | To have your data deleted where no overriding ground for retention applies | 17 |
Restriction | To have processing suspended while a dispute is resolved | 18 |
Portability | To receive the data you provided in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible | 20 |
Objection | To object to processing based on our legitimate interests, including profiling | 21 |
Withdrawal of consent | To withdraw any consent at any time, without affecting the lawfulness of processing carried out beforehand | 7(3) |
10.2 Most of these rights are exercisable directly in Settings, Privacy: download your data, correct your profile, delete a recording, withdraw a consent and close your account. For anything else, write to privacy@playlytix.gg. Rights in respect of the payment details and tax documentation held by the Payout Partner are exercised against the Payout Partner in the manner described in its privacy notice; where you write to us instead, we forward your request to the Payout Partner and tell you that we have done so.
10.3 We respond within one month of receipt. Where a request is complex or numerous we may extend that period by up to two further months and will inform you of the extension and the reasons within the first month. We may require verification of your identity before acting and will request no more information than is necessary for that purpose.
10.4 Two limits on erasure, stated plainly. First, a record of a payment made to you is retained for ten years because accounting and tax law requires it; Article 17(3)(b) GDPR preserves that processing. Those records are stored separately and used for no other purpose. Second, where material from a Test you completed has already been delivered to a Studio, we delete our own copy and instruct the Studio to delete its copy. We cannot guarantee the retrieval of material already disclosed and we do not represent otherwise.
11.1 If you are dissatisfied with the manner in which we handle your personal data, please tell us first at privacy@playlytix.gg. We acknowledge a complaint within 3 working days and respond within one month.
11.2 You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. Our lead supervisory authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, Slovak Republic, statny.dozor@pdp.gov.sk, www.dataprotection.gov.sk.
12.1 The platform is for adults. You must be at least 18 years of age to register, participation involving a contractual relationship, the receipt of payment and undertakings of confidentiality. We do not knowingly collect personal data concerning any person under that age. Where you believe that a person under 18 has registered, tell us at privacy@playlytix.gg and we will close the account and delete the data.
13.1 The protections described in this policy apply to every Tester, wherever resident. This clause sets out the additional information and rights applicable to residents of California and of other United States states with comprehensive privacy legislation, and constitutes our notice at collection under the CCPA.
13.2 Categories collected. The personal information we collect is described in full in clause 2. Expressed in the statutory categories, it comprises identifiers; the categories listed in Cal. Civ. Code § 1798.80(e), namely your name, collected and passed to the Payout Partner only when a Reward becomes payable; characteristics of protected classifications, namely age range and gender, each of which may be answered "Prefer not to say"; commercial information; internet or other electronic network activity; approximate geolocation at country level; audio, electronic and visual information, collected only where you have given the relevant consent; professional or employment-related information; and inferences, namely your player profile and Quality Score. We do not collect biometric information or non-public education information. Your financial account information is collected by the Payout Partner, not by us.
13.3 The sources of that information are you, the platforms you connect, the Payout Partner as to the confirmations listed in clause 2.7.2, and the operation of the platform itself. The business purposes are those set out in clause 3, the recipients are those set out in clause 6, and the retention periods are those set out in clause 8.2.
13.4 Sensitive personal information. The only sensitive personal information we collect is your account log-in credentials. We do not collect a social security, driver's licence, identification card or passport number; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; the contents of your mail, email or text messages; genetic data; biometric information processed for unique identification; or information concerning health, sex life or sexual orientation. Financial account information and any tax identification number are collected by the Payout Partner directly from you. We use and disclose sensitive personal information only for the purposes permitted by section 1798.121(a) of the CCPA, namely to provide the service you have requested, to secure your account and to prevent fraud, and not to infer characteristics about you. On that basis the right to limit does not arise; we will nonetheless honour any request to limit that you make.
13.5 Sale, sharing and incentives. We do not sell personal information and we do not share it for cross-context behavioural advertising. We do not engage in targeted advertising. We do not offer a financial incentive or a price or service difference in exchange for the collection, sale, sharing, deletion or retention of personal information; a Reward is remuneration for the Licence to your Submission under clause 21 of the Terms, and is not payment for personal information. No person under 18 is permitted to register.
13.6 Your rights. Where you are a resident of California you have the right to know the categories and specific pieces of personal information collected, the sources, the purposes and the recipients; to access a portable copy; to delete; to correct; to opt out of sale or sharing, which does not arise; to limit the use of sensitive personal information, as qualified by clause 13.4; and not to be discriminated or retaliated against for exercising any of them. Where you are a resident of another state with comprehensive privacy legislation, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware or New Jersey, you have the rights conferred by the law of your state, which generally comprise access, correction, deletion, a portable copy and the right to opt out of targeted advertising, sale and certain profiling.
13.7 You may exercise these rights in Settings, Privacy, or by writing to privacy@playlytix.gg. We respond within 45 days and may extend that period once by a further 45 days, informing you of the extension and the reasons. We will verify your identity to a degree appropriate to the request and will not use the information supplied for verification for any other purpose. You may use an authorised agent, in which case we may require written authorisation from you and may verify your identity directly.
13.8 Where we decline a request you may appeal by writing to privacy@playlytix.gg with the word "Appeal" in the subject line. We will respond within 45 days with a written explanation. Where an appeal is denied you may contact the Attorney General of your state, and we will provide the means of doing so with our response.
14.1 Where you are resident in the United Kingdom, this policy applies to you as it applies to a Tester in the European Economic Area, references to the GDPR being read as references to the UK GDPR and the Data Protection Act 2018.
14.2 Where you are resident in Brazil, Canada, Japan, India, Australia, South Korea, Switzerland or another country with applicable data protection legislation, the rights conferred on you by that legislation are available in addition to those described in this policy and may be exercised in the same manner. Where the law of your country confers a right that this policy does not describe, that right applies.
14.3 We apply the standard set by this policy to every Tester, irrespective of residence. Where the law applicable to you sets a lower standard, this policy nonetheless applies.
15.1 We may update this policy. Where a change is material, for example a new purpose, a new category of recipient or a change to a retention period, we will notify you by email and through the platform not less than 30 days before it takes effect and will explain what is changing. A minor correction takes effect on publication. Every version is dated and every previous version is retained and available on request.
15.2 A change to this policy does not convert personal data collected under one consent into use for a different purpose. Where we intend to process data already collected for a materially new purpose, we will ask you again. A change affecting screen recording or microphone recording is always the subject of a separate consent and is never made through a change to this policy.