Richard Anthony Alvarez operates GameLink from 1834 14th Street, Santa Monica, CA 90404, USA. Contact gamelink54support@gmail.com, with or without an account. This notice covers the U.S. adult beta, not a worldwide registration offer.

We receive account email, authentication information handled by Supabase, date of birth and declared residence; profile name, username, biography and chosen games; private Signal Bank choices; activities, messages and participation; reports, blocks, appeals and support correspondence; connected-provider identifiers and permitted imports when you connect a provider; and technical request, security and delivery information such as IP address and timestamps.

Sources include you and your use of GameLink, optional connected services, hosting and email providers, and members who interact with or report content. We do not ask for identity documents during ordinary signup. Profile photos are optional. When you upload a selected image, GameLink scans and normalizes it privately. Authorized moderators review it before you can select and save it for profile display.

For optional Plus purchases, GameLink sends its account identifier to Stripe and keeps customer, checkout, subscription and payment-event identifiers, subscription status and verified paid-access dates. You enter payment and billing details in Stripe checkout or billing management. GameLink does not collect full card numbers or card security codes through its own forms.

For registration measurement, we keep a private account-linked record of creation and confirmed-email timestamps and test-account status. Only if you separately choose optional product-improvement measurement during signup do we also record a supported GameLink campaign label and the landing-page variant. We do not include search terms, advertising click IDs, full referring URLs or browsing history in that measurement record.

When you choose to show an invitation, event or public group you own in News, we keep a reference to the original plan, your account, publication and removal times, and information needed to recognize changes. News reads current authorized previews from the original plan. Sharing-request recovery records contain your account, a request identifier, chosen action and plan revisions. When results need another page, a private temporary paging record includes your current sign-in session, game and type filters, search terms and position in the results.

When you create a community question or reply, GameLink keeps your account-linked title and text, the community you deliberately choose, an optional game, revisions, state and creation/change times. Showing a question in News creates separate placement metadata. Private Saved posts contain your account, canonical post type and reference, revisions and save/removal times, rather than copies of the original content. Server request receipts contain a request identifier, action, canonical references and revisions; question and reply payloads are represented by a hash in those receipts. Temporary paging can include your session, community, category, game, search terms and position in the results.

Where optional peer-message email controls are offered, the current permission record contains your choice, revision and generation, affirmative consent time and provenance, and request metadata needed to recognize a retry or withdrawal. This record does not add a copy of your email address or message text. A withdrawal retires the current permission generation but can retain the last affirmative consent time and request metadata; it does not immediately erase all permission evidence.

We use account and content information to provide sign-in, profiles, discovery, communications and participation; deliver account messages; respond to support, privacy and safety requests; prevent abuse; operate recoverable backups; and meet applicable legal obligations. Required policy acknowledgement does not authorize unrelated optional processing.

Optional product-improvement choices and community-expression choices are separate. You may decline them and use the core service, or withdraw them in Privacy & Account. Withdrawing community-expression permission removes the saved expression covered by that control. Protected identity is not a search filter, eligibility rule, negative ranking factor or paid targeting signal.

GameLink is not a health service. Do not submit medical records or another person’s sensitive information unless strictly necessary for a safety request. We do not infer health conditions or use private correspondence to build advertising profiles. Support may request a less sensitive description or restrict unnecessary information.

We count confirmed new accounts separately from submitted forms or visits. Optional campaign measurement starts off; declining it leaves campaign attribution unknown and does not prevent registration. Withdraw it in Profile → Settings → Privacy and account → Product improvement. Withdrawal removes the saved campaign and landing-page attribution, including the original signup metadata. We do not reinterpret older optional choices as permission for new campaign attribution.

Showing a plan in News is a separate choice from its audience and other placements. It does not save an interest, follow a game, join a group, reserve a place or start a conversation. Removing it from News keeps the original plan and its audience. Current access, source availability and expiry control each results read; an already displayed preview can remain for its short access window, no more than 25 seconds. Reopening a plan or changing its owner does not silently show it in News again.

Community questions use the current eligible-member audience, with a separate choice to show them in News. Removing a question from News keeps its canonical question and replies; closing it stops new replies without deleting its text. Saving a post is private and does not follow a game, add a friend, join a group, RSVP, reserve a place or widen the original audience. Saved previews still require current permission to the original; an unavailable original is not preserved as a readable archive. Your posts helps you find and manage your own questions and replies, including unplaced questions or an own reply whose parent is unavailable, without revealing the unavailable parent’s information.

Optional email about new peer messages starts off and needs a new affirmative choice in its dedicated control. Historical email or in-app message settings and unrelated preference saves do not grant this permission. Turning off the current global email choice withdraws this peer-message permission as well; a later new affirmative peer-message choice is a new grant. Saving a permission choice sends no email. These controls do not mean that an email provider or delivery service has been configured or enabled. Account-confirmation and password-recovery email remain separate account functions.

If separately enabled, peer-message email uses a generic notice without message text or personal names. Its fixed HTTPS Messages link contains only an opaque canonical conversation identifier. That link can remain in the email and appear in browser history; opening it still requires current authorized conversation access. Eligibility is checked against the current permission generation, consent time, confirmed recipient, conversation access, blocks, account restrictions, quiet hours and expiry. Old queued messages are not made eligible by a later grant. An ambiguous send is not automatically resent. Withdrawal stops later eligible handoff but cannot recall email already handed to a provider; provider acceptance does not establish delivery or that a person read it.

Location-dependent features ask for permission when available. Precise foreground coordinates are used on your device to derive an approximate area, not published as your home address or exact position. No background location tracking is used. An area choice can expire after 24 hours; publishing an activity there is a separate choice. Declared U.S. residence is not a location permission.

Chosen profile fields and published activities are shown to the audience indicated by their feature. Messages are available to their participants. Authorized safety operators can inspect the exact reported content and relevant case details. Another participant may copy content; we cannot prevent every copy outside GameLink.

While you are signed in and actively viewing GameLink, eligible signed-in members can find you in Ready Now. GameLink stores your account/session identifier and a short-lived activity timestamp to provide this feature. The status expires after updates stop, normally within 90 seconds; another member’s list can take up to 30 more seconds to refresh. We do not infer which game you are playing or collect location through this status. Hidden or disconnected pages do not renew it. There is no online/offline switch in this release. Signing out ends that session’s eligibility; another signed-in session may remain active.

In Messages, Online filters your existing conversations using the same short-lived signed-in activity signal as Ready Now. It does not show a last-seen time, identify a game someone is playing or create a new conversation. Another eligible signed-in session can keep a person online after one session ends. Missing or expired activity information does not establish that a person is offline.

Distance orders existing authorized conversations using saved approximate areas only while both participants have a current optional location-sharing choice and an unexpired area. GameLink returns a relative ordering, not coordinates or an exact distance. Conversations remain accessible when area information is unavailable. Messages rechecks these temporary results while it is visible; an already displayed result can remain until its short lease expires, no more than 30 seconds. Turning location off prevents further proximity use of your area. Existing blocks and account restrictions still apply. This does not add background location tracking or a new location-sharing choice.

Choosing a News community is manual content browsing, independent of GPS, residence, Profile location and optional location-sharing consent. A county includes only itself and admitted child communities; a city view does not silently broaden to the county. Area-less game-wide posts are not relabelled as city posts. Browsing or searching does not move your Profile, share a location, create a nearby placement or become Signal Bank, chat or advertising state.

Supabase provides authentication, database and related server services; Cloudflare hosts the website and handles request/security information; Brevo sends account and service-alert emails. Support uses the Gmail mailbox shown above, so correspondence is also handled by Google under its applicable terms. Optional connected gaming services receive the information necessary for the connection you initiate. The operator and current account database are in the United States; providers may process operational information in other countries.

We disclose information when necessary to a provider operating these functions, to your chosen audience, or for lawful requests, security, fraud prevention, protection of rights, or an authorized business transfer subject to applicable law. We limit safety emails to necessary information; private case details are not publicly exposed.

Stripe and Link provide optional checkout, recurring billing, payment management, transaction support and fraud prevention. Stripe, through Link, acts as merchant of record for Managed Payments transactions. These services process payment, billing, transaction and technical information under their own terms and privacy notices. GameLink uses verified payment notifications to link paid access to the correct account, stop access when paid time ends, handle refunds and prevent duplicate processing.

Browser storage maintains your sign-in, registration progress and chosen settings. Registration passwords are not saved as drafts. Optional product-improvement collection uses its separate choice. Account email delivery logs are retained for one month; new email previews are not stored. Email open/click tracking is off unless the recipient has opted in.

We do not sell personal information or share it with advertisers, and do not use third-party behavioral advertising on this service. Browser Do Not Track and Global Privacy Control signals do not change necessary sign-in or security processing; the service does not enable cross-site advertising tracking when these signals are absent. Providers may process technical information for their own security and service operations under their terms.

This first-party registration measurement does not add a Google advertising or analytics tag or transmit conversion records to Google. Administrative marketing reports contain aggregate counts, not account IDs, email addresses, private signals, message content or location. A campaign label is stored with a consenting account so email confirmation does not depend on a tracking cookie or carrying advertising parameters in the confirmation link.

Before sending a News sharing or removal request, this browser saves its account, original-plan reference, request identifier, chosen action, plan revisions and request time so an uncertain result can be checked safely. This account-scoped record contains no plan description or News search terms. It remains until the request is confirmed and cleared, checked against the current News choice and cleared, or the browser data is removed. It is not automatically deleted after seven days or sent again in the background. News search terms do not become Signal Bank interests, public profile fields or advertising signals.

Separately from the metadata-only plan-sharing request above, before sending a community question, reply, edit, deletion or Saved request this device stores the exact account-scoped pending request. Depending on the action it includes title/body/reply text, chosen area and game, canonical references, revisions, request identifier and time. Ordinary unfinished drafts are session memory; a potentially submitted request is stored durably so an uncertain result can be checked using the same request. It has no automatic expiry and is not resent in the background. It remains until matching confirmation or a known rejection safely clears it, or browser/device data is removed. Sign-out hides but does not erase that owner’s pending key. A verified account deletion attempts cleanup on this device and reports recovery if cleanup cannot be confirmed; it cannot erase copies on other devices or browser profiles.

Community, category, game, search and page-return context can appear in News URLs and browser history. This does not add a separate GameLink browsing-history store. Help navigation strips private search text and a cursor tied to that search.

To resume a conversation you requested after sign-in, this device may keep a navigation hint with the conversation’s opaque reference, destination label, navigation entry identifier and time, and validated account binding when available. The hint contains no message text and does not authorize access. It is checked when read and used only when no more than 24 hours old; the current account must still have access to the conversation. GameLink clears the matching hint after the destination is opened or the hint is discarded, subject to storage failures. This is not a promise that bytes are automatically deleted in the background at 24 hours; unused browser data can remain until later cleanup or you remove it.

We keep account information while needed to provide the account. Privacy & Account provides the current retention categories, export, provider-disconnect and deletion controls. You can edit supported profile fields and remove your content through available controls or ask support. Some shared context is removed or de-identified when an account is deleted. Necessary safety, request and legal records may be retained for their documented purpose, with access restricted.

The account-deletion flow has a seven-day cancellation window and requires a current sign-in for finalization; contact support if you cannot sign in. We confirm completion rather than treating a pending request as completed. Managed backups have a 30-day retention schedule, subject to maintaining a recent recoverable copy and documented legal holds. Historical recovery copies have separately recorded retirement deadlines. Before restored data can be reopened, later deletions must be reapplied. Deleted information is not restored to ordinary access simply because an older backup is used.

Deleting a GameLink account does not erase records Stripe or Link must retain for transaction, fraud-prevention or legal purposes. Payment-related support requests can be directed through billing management, your Link receipt or GameLink support. GameLink does not retain a copy of your full card details.

Registration measurement records are eligible for removal after 30 days and are removed by the next daily cleanup. Campaign metadata is removed with them. Account deletion also removes the linked measurement record; withdrawal removes attribution earlier. Reports describe retained, non-deleted accounts for a stated period and cutoff, so earlier totals can change after withdrawal, deletion or retention cleanup.

After scanning completes, an unsaved photo is available for private review and selection for up to seven days in total. Approval, refreshing and retries do not restart this period. The attempt can end earlier if you cancel it, its originating sign-in session expires or is revoked, or the account becomes ineligible through restriction or deletion. At the deadline or earlier termination, the photo becomes unavailable for review or selection and is queued for file deletion, whose completion GameLink verifies. Saved photos follow the ordinary profile-removal and account-deletion rules. Backup and necessary safety records remain subject to the retention rules above.

Server recovery receipts for News sharing requests become eligible for deletion after seven days. Private paging and search records stop authorizing access after at most ten minutes, or earlier when their sign-in session or validity ends; expired records become eligible for deletion. Cleanup runs every ten minutes and removes a bounded number of eligible records at a time, so a backlog or failure can delay physical deletion. An expired paging record does not restore access.

Removing a plan from News or reaching its display deadline ends ordinary News display but does not automatically erase its placement metadata. The account-linked reference, publication and removal times, and change information remain while the original plan record remains. Deleting the original record or the author’s account removes its linked News placement record. These records use the existing 30-day managed-backup schedule and the documented recovery, safety and legal-hold rules described above; this feature does not extend them.

Canonical community question and reply text remains until deletion under current safety rules; removing its News placement alone does not erase it. Question deletion immediately blanks its title/body and its replies and retires placement. Deleting an individual reply blanks that reply. Account deletion redacts authored text and replies on that author’s questions. Redacted canonical rows can retain account-linked identifiers, revisions and timestamps until cleanup or de-identification; they are not promised anonymous. Deleted rows and removed Saved references become eligible for bounded cleanup after 30 days, subject to holds and linked-record dependencies.

Server community/Saved request receipts become eligible for cleanup after seven days. Private community, Saved and own-content cursors stop authorizing access within ten minutes or earlier session/source validity; displayed results have an access window of no more than 25 seconds. The cleanup job runs every ten minutes in bounded batches, so backlog or failure can delay physical deletion without restoring expired access. Existing 30-day backup targets, recovery and safety/legal-hold rules remain. Restricted report-time text and revision evidence can remain separately for open cases and becomes eligible for cleanup 365 days after case closure; ordinary members cannot read that operator evidence.

Optional peer-message email consent metadata follows the account’s existing retention, backup and hold rules and is removed on account deletion. Withdrawal does not immediately erase queued or delivery evidence, backups or a provider’s records. If email delivery is separately activated, the transport necessarily receives the confirmed recipient address, generic notice, canonical conversation link and delivery/idempotency metadata; these consent controls add no stored copy of the address or message text to consent, event, delivery, attempt, receipt or diagnostic records.

Use Privacy & Account or email support to request access, a copy, correction, deletion, withdrawal of an optional choice, or review of a privacy decision. You do not need to create a new account. We verify identity proportionately and do not ask you to email your password. We respond within applicable legal deadlines and explain any permitted extension or refusal. You may email a privacy appeal identifying the original request and why you disagree; applicable regulator complaint rights remain available.

Declining optional processing does not remove your basic account access. Your privacy rights depend on applicable law; providing these controls does not claim that every state privacy statute applies to this small service.

Privacy & Account includes retained News placement metadata in its bounded account export. Temporary paging records and sharing-request recovery receipts are not included in that News export section. You can use Privacy Support for a further access request; the request, correction, deletion and appeal rights above remain available.

Privacy & Account’s verified export includes retained own community questions, replies, placement metadata and private Saved references within complete bounded limits, with explicit failure rather than a silently truncated local section. This local News section excludes temporary paging/search records and server request receipts; existing Privacy Support access, correction, deletion and appeal routes remain. Owner-only paged recovery helps manage content and is not a substitute for export. A pause of ordinary News reads and posting preserves eligible owner removal, export and own-content recovery, subject to current account and security rules. Current optional message-email permission metadata is included when that separately integrated consent service is available.

GameLink is for adults 18 and older and is not directed to children. Report suspected underage accounts to support using the relevant account identifier. We investigate and remove or restrict accounts and information as required. A declared birth date is not independent age verification.

We use server-side authorization, restricted operational access and recoverable backups. No system is perfectly secure. Incidents are assessed for containment and legally required notification. Material changes to this notice receive a dated version and a notice in the service. Previous policy and acceptance records remain preserved.