Welcome to OwnPlay. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website at https://ownplay.store, use our developer portal, or download our desktop application.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.
Contents
We collect information you provide directly to us, information collected automatically when you use our services, and information from third-party services.
Account information: username, email address, and password (stored as a secure hash — we never store your plain text password)
Profile information: avatar image, PC hardware specifications you choose to share on reviews
Developer information: studio name, company name, support email, website URL, bank account details for payouts
Payment information: billing details processed by Razorpay — we do not store your card or UPI details
Communications: messages you send to our support team
User-generated content: game reviews, ratings, and text you submit
Log data: IP address, browser type, pages visited, time spent, referring URLs
Device information: operating system, hardware specifications (only if you choose to save PC specs)
Usage data: games browsed, purchases made, features used
Authentication tokens: JWT access tokens stored in your browser's localStorage
Razorpay: payment confirmation status and transaction IDs (not card/UPI details)
Cloudflare: CDN access logs for media files
We use the information we collect for the following purposes:
Create and manage your account
Process game purchases and add games to your library
Send email verification and password reset emails
Authenticate your identity on login using JWT tokens
Process developer applications and verifications
Display your reviews and PC specs alongside your review content
Show personalised game recommendations based on purchase history
Allow developers to receive revenue payouts
Enable the desktop application to authenticate and upload game builds
Send transactional emails: email verification, purchase receipts, developer approval/rejection notices
Send important service announcements
We do NOT send marketing emails unless you explicitly opt in
Detect and prevent fraud, abuse, and unauthorised access
Verify Razorpay payment signatures to prevent fake payment confirmations
Comply with legal obligations
Enforce our Terms of Service
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
With game developers: your username and review content are visible to developers of games you review. We do not share your email, payment details, or other personal data with developers.
Payment processor: we share necessary transaction data with Razorpay to process payments. Razorpay has its own privacy policy.
Cloud storage: game files and media assets are stored on Cloudflare R2. File metadata is stored in our database.
Email service: we use Resend or Gmail SMTP to send transactional emails. Your email address is shared with these providers solely for sending emails.
Legal requirements: we may disclose your information if required by law, court order, or to protect the rights and safety of our platform and users.
Business transfers: in the event of a merger or acquisition, your data may be transferred as part of that transaction.
Your data is stored on secure servers. We implement industry-standard security measures to protect your information.
User accounts and game data: PostgreSQL database hosted on Render (Oregon, USA)
Game build files: Cloudflare R2 private bucket (global CDN)
Media files (screenshots, avatars): Cloudflare R2 public bucket (global CDN)
Passwords hashed using argon2id — industry-leading password hashing algorithm
Refresh tokens stored as SHA-256 hashes — raw tokens never saved
Upload keys stored as argon2 hashes — shown only once to developers
All API communication over HTTPS (TLS 1.2+)
JWT tokens with 15-minute expiry for access tokens, 7-day expiry for refresh tokens
Razorpay payment signatures verified using HMAC-SHA256 before order fulfilment
While we implement strong security measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
All payments are processed by Razorpay. We do not store your payment card details, UPI IDs, or bank account information.
We store: transaction IDs, purchase amounts, game purchased, timestamp, and payment status
We do not store: card numbers, CVV, UPI IDs, net banking credentials
Game prices are calculated server-side — we never trust frontend price values for payment processing
Payments are verified using Razorpay's HMAC-SHA256 signature before your library is updated
Purchase records are retained permanently so your game library remains accessible
Refund requests must be made within the applicable period — contact us at ak3311g@gmail.com
Razorpay's privacy policy governs how they handle your payment data. You can review it at razorpay.com.
If you register as a game developer on our platform, we collect and process additional information.
Studio name and company information
Support email address (displayed to players on your game pages)
Website URL (optional)
Bank account or payout details for revenue disbursement
Upload keys (stored as argon2 hashes — raw keys are shown only once and never stored)
Game metadata: name, description, engine, release date, pricing
Game assets: screenshots, trailers, logo images stored on Cloudflare R2
Build files: game executables uploaded via desktop app, stored in private R2 storage
Build chunk hashes (SHA-256) for deduplication — not the actual file contents
Sales and revenue analytics tied to your games
Developer accounts are manually reviewed and approved. During review, your submitted information may be examined by our team to verify legitimacy.
We use the following third-party services. Each has their own privacy policies which govern their data practices.
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Razorpay | Payment processing | Transaction data, billing details | razorpay.com/privacy |
| Cloudflare R2 | File storage & CDN | File metadata, access logs | cloudflare.com/privacy |
| Render | API & database hosting | All platform data stored here | render.com/privacy |
| Vercel | Frontend hosting | Page request logs, IP addresses | vercel.com/legal/privacy |
| Resend / Gmail | Transactional email | Email address, email content | resend.com/privacy |
| UptimeRobot | Uptime monitoring | Health endpoint requests only | uptimerobot.com/privacy |
Depending on your location, you may have the following rights regarding your personal data. We will respond to all requests within 30 days.
Access: request a copy of the personal data we hold about you
Correction: request correction of inaccurate personal data
Deletion: request deletion of your account and associated personal data (note: purchase records may be retained for legal and accounting purposes)
Data portability: request your data in a machine-readable format
Withdraw consent: opt out of non-essential communications at any time
Profile settings: change your email, password, avatar, and PC specs directly from your profile page
Account deletion: contact us at ak3311g@gmail.com with subject 'Account Deletion Request'
Data export: contact us at ak3311g@gmail.com with subject 'Data Export Request'
For users in the European Union (GDPR), India (DPDPA), or California (CCPA), additional rights may apply. Please contact us to learn more.
We retain your information for as long as necessary to provide our services and comply with legal obligations.
Active accounts: retained indefinitely while your account is active
Deleted accounts: personal data (name, email, password) deleted within 30 days of account deletion request
Purchase records: retained for 7 years for accounting and legal compliance — your game library may be inaccessible after account deletion
Review content: deleted upon account deletion
Refresh tokens: automatically expire after 7 days and are purged from our database
Access tokens: expire after 15 minutes (never stored server-side)
Upload keys: retained while associated with an active developer game — deleted when game is deleted
Server logs: retained for 90 days for security and debugging purposes
Game build files: retained until manually deleted by the developer or upon account deletion
OwnPlay is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not register for an account or provide any personal information.
If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us at ak3311g@gmail.com.
Users between the ages of 13 and 18 should review this policy with a parent or guardian before using our services.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
We will update the 'Last Updated' date at the top of this page
For significant changes, we will notify registered users via email
Continued use of our services after changes constitutes acceptance of the updated policy
We recommend reviewing this policy periodically
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
© 2026 OwnPlay. All rights reserved.