Privacy Policy

This Privacy Policy explains what information Userplay collects, how we use it, who we share it with, how long we keep it, and what choices you have.

It applies to:

1. Studio members who use the Userplay web application.
2. Players (also called testers) who participate in playtests created by studios using Userplay.
3. Visitors to the Userplay marketing site.

If you are a player, the section For Players explains who controls your data and what choices you have, alongside Information We Collect and Your Rights.

For our commitments as a data processor on your behalf, see the Data Processing Addendum.

1. Who We Are#

Userplay is operated by the legal entity behind userplay.io. For privacy questions or to exercise your rights, contact privacy@userplay.io.

2. Information We Collect#

From Studio Members#

When you create an account or use Userplay as a studio member, we collect:

• Account information — name, work email, hashed password (when password auth is used), and workspace details you configure.
• Billing details when you subscribe to a paid plan.
• Playtest configuration you create, including objectives, prompts, capture toggles, and tester invite lists.
• Activity logs of administrative and content actions you take in the application.
• Support communications you send through our support channels.

From Playtests#

When your team runs a playtest, Userplay captures — on your instructions and with the player’s consent — the following:

• Screen recordings, microphone audio, and system audio (where the player consents). Userplay does not capture webcam video.
• Optional in-game telemetry through a Userplay telemetry agent, when both the studio and the player opt in. The agent captures only post-gameplay content and never captures credentials, tokens, cookies, or browsing history.
• Basic device, browser, and locale metadata required for playback. Approximate location is derived from the player’s locale and timezone only — Userplay does not store IP-based geolocation in this metadata.

Userplay does not capture any data from players during active gameplay through a telemetry agent. The screen recorder, which the player explicitly starts and stops, is the only live capture path.

From Players#

When you participate in playtests as a player, you also use the Userplay player application and account. We collect, as described in For Players:

• Account information — your email and the identity from your chosen sign-in method (Google, Steam, Discord, passkey, password, or magic link).
• Player profile — details you provide such as age range, gender, country, player type, and your genre and platform preferences.
• Steam library (only if you link Steam) — the games you own and wishlist on Steam, with your playtime for them, refreshed periodically while Steam stays connected. Studios you playtest for can see your playtime for their own games. Disconnecting Steam deletes the library we synced.
• Product usage — pseudonymous analytics and masked session replays of how you use the player application (inputs and text are masked), used to operate and improve the application.
• Survey and feedback responses you choose to submit.

From Site Visitors#

When you visit userplay.io, we collect pseudonymous web analytics — page views, referrers, device class, and performance metrics — to operate and improve the site.

What We Do Not Collect#

• Player credentials, tokens, or cookies for the games being tested.
• Browsing history outside the playtest.
• Personal data of individuals under the age of majority — see Section 9 (Children).
• Personal data unrelated to operating the Service.

A full breakdown of data categories, sources, purposes, and retention is in Data Processed.

3. How We Use Information#

We use information to:

1. Provide the Userplay service to studios and players.
2. Process and store playtest session recordings.
3. Authenticate users and enforce access controls.
4. Bill subscribing customers.
5. Provide customer support and respond to inquiries.
6. Operate, monitor, and secure the Service.
7. Improve product quality using aggregate and de-identified data.
8. Comply with legal obligations.

We do not sell personal information. We do not use personal information for advertising.

4. For Players#

If you participate in a playtest, two parties handle your data in two different roles:

• The studio is the controller of your session recording. It decides the playtest, gives you notice, and is responsible for having a lawful basis for the recording and for how the recording is used afterward. For anything specific to a playtest — including deletion of a recording — your first point of contact is the studio that invited you.
• Userplay is the controller of your player account and profile. This covers your account and sign-in identity, your player profile and preferences, any Steam enrichment, your use of the player application, and the product analytics and masked session replays we collect to operate and improve the application.

Before any recording begins, Userplay shows you a clear consent screen describing what will be captured, by which studio, and under what retention policy. Recording only starts when you start it, and you can stop at any time.

Studios have controls to minimize what is captured:

• Microphone capture is off by default; Userplay does not capture webcam video.
• Sensitive screen regions can be masked or blurred.
• In-game telemetry agents require explicit double opt-in (studio and player).

Your choices. You can view and edit your player profile and delete your account in the player application. You can decline or stop recording, and withdraw consent where we rely on it (for example, microphone capture). For requests about data Userplay controls, or for a recording you cannot resolve with the studio, contact privacy@userplay.io. Your other rights are described in Your Rights, and retention of your account and profile is covered in Retention.

5. Sharing#

We share information only with:

1. Subprocessors that help us host, deliver, and operate Userplay. The current list — including data location and retention — is in Subprocessors. Active subprocessors include Render (hosting), PlanetScale (database), Vercel (frontend), Cloudflare (storage, CDN/edge), Mux (video), PostHog (product analytics, session replay, and error monitoring), Dodo Payments (billing), and Resend (transactional email).
2. Service providers for billing, transactional email, and support, under appropriate contractual protections.
3. Authorities and third parties when required by law, to enforce our agreements, protect rights and safety, or in connection with a corporate transaction (merger, acquisition, or asset sale) — in which case we will provide affected customers reasonable notice where legally permitted.

We do not sell personal information. We do not share recordings with third parties except subprocessors operating on our behalf under written agreements that prohibit use for model training.

6. International Transfers#

Userplay hosts production data in the United States. If you access Userplay from outside the United States, information may be transferred to and stored in the US. Where applicable law requires a legal mechanism for international transfers (for example, for EEA or UK data subjects), Userplay relies on Standard Contractual Clauses or equivalent mechanisms as incorporated into the Data Processing Addendum.

7. Retention#

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Default retention windows:

For details on deletion procedures, see Data Handling.

8. Security#

Userplay uses administrative, technical, and organizational safeguards designed to protect information, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
• Role-based access control, multi-factor authentication, and the principle of least privilege.
• Tamper-evident audit logging.
• Documented incident response procedures.
• A small engineering team with quarterly access reviews.

No method of transmission or storage is completely secure. In the event of a confirmed breach involving your data, we will notify affected customers within 72 hours of confirmation.

9. Children#

Userplay is not intended for individuals under the age of majority in their jurisdiction, and we do not knowingly collect their personal information. Studios must not invite anyone below the applicable age into a playtest without verifiable parental or guardian consent and their own independent legal basis. If you believe we have inadvertently collected information from a minor, contact privacy@userplay.io.

10. Your Rights#

Depending on where you live, you may have the right to:

1. Access the personal information we hold about you.
2. Correct inaccurate information.
3. Delete your information (subject to retention required by law or legitimate business purposes).
4. Object to or restrict certain processing.
5. Receive a portable copy of your information.
6. Opt out of the “sale” or “sharing” of personal information — Userplay does not sell or share personal information for cross-context behavioral advertising.
7. Withdraw consent where we rely on consent (for example, player microphone capture).

Studio members can exercise most rights directly in the workspace application, and players can view and edit their profile and delete their account in the player application. For other requests, contact privacy@userplay.io. We will respond within the timeframes required by applicable law (typically 30–45 days).

Userplay does not discriminate against individuals for exercising privacy rights.

Regional Notes#

• California (CCPA/CPRA). California residents have the rights listed above, including the right to limit use of sensitive personal information. We do not sell personal information. Categories of personal information collected, sources, purposes, and recipients are described above and in Data Processed.
• European Economic Area and United Kingdom. Our legal bases for processing include performance of a contract, legitimate interests (operating and securing the Service, aggregate product improvement), and consent where required (for example, player microphone capture). For data we process on your behalf, the Data Processing Addendum applies and you are the controller.
• Other jurisdictions. Where local law confers additional rights, we honor them.

11. Cookies and Similar Technologies#

Userplay uses a small number of cookies and local-storage entries that are necessary to operate the application — for authentication, session management, and preference storage. The application also uses our product analytics and session replay provider (PostHog), which sets cookies or local-storage entries to measure usage and record masked replays of the interface; inputs and text are masked. We do not use third-party advertising cookies on the application or the marketing site, and we do not sell or share personal information for advertising.

12. Changes to This Policy#

We may update this Privacy Policy from time to time. Material changes will be communicated to workspace owners by email and reflected at the top of this page with a new “Last updated” date. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact#

• Privacy and data subject requests: privacy@userplay.io
• Security incidents and reports: security@userplay.io
• General support: support@userplay.io