Welcome to OwnPlay. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website at https://ownplay.store, use our developer portal, or download our desktop application.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.
Contents
1. Information We Collect
We collect information you provide directly to us, information collected automatically when you use our services, and information from third-party services.
Information You Provide
- ▸
Account information: username, email address, and password (stored as a secure hash — we never store your plain text password)
- ▸
Profile information: avatar image, PC hardware specifications you choose to share on reviews
- ▸
Developer information: studio name, company name, support email, website URL, bank account details for payouts
- ▸
Payment information: billing details processed by Razorpay — we do not store your card or UPI details
- ▸
Communications: messages you send to our support team
- ▸
User-generated content: game reviews, ratings, and text you submit
Information Collected Automatically
- ▸
Log data: IP address, browser type, pages visited, time spent, referring URLs
- ▸
Device information: operating system, hardware specifications (only if you choose to save PC specs)
- ▸
Usage data: games browsed, purchases made, features used
- ▸
Authentication tokens: JWT access tokens stored in your browser's localStorage
Information from Third Parties
- ▸
Razorpay: payment confirmation status and transaction IDs (not card/UPI details)
- ▸
Cloudflare: CDN access logs for media files
2. How We Use Your Information
We use the information we collect for the following purposes:
Account & Service Operations
- ▸
Create and manage your account
- ▸
Process game purchases and add games to your library
- ▸
Send email verification and password reset emails
- ▸
Authenticate your identity on login using JWT tokens
- ▸
Process developer applications and verifications
Platform Features
- ▸
Display your reviews and PC specs alongside your review content
- ▸
Show personalised game recommendations based on purchase history
- ▸
Allow developers to receive revenue payouts
- ▸
Enable the desktop application to authenticate and upload game builds
Communication
- ▸
Send transactional emails: email verification, purchase receipts, developer approval/rejection notices
- ▸
Send important service announcements
- ▸
We do NOT send marketing emails unless you explicitly opt in
Security & Legal
- ▸
Detect and prevent fraud, abuse, and unauthorised access
- ▸
Verify Razorpay payment signatures to prevent fake payment confirmations
- ▸
Comply with legal obligations
- ▸
Enforce our Terms of Service
3. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- ▸
With game developers: your username and review content are visible to developers of games you review. We do not share your email, payment details, or other personal data with developers.
- ▸
Payment processor: we share necessary transaction data with Razorpay to process payments. Razorpay has its own privacy policy.
- ▸
Cloud storage: game files and media assets are stored on Cloudflare R2. File metadata is stored in our database.
- ▸
Email service: we use Resend or Gmail SMTP to send transactional emails. Your email address is shared with these providers solely for sending emails.
- ▸
Legal requirements: we may disclose your information if required by law, court order, or to protect the rights and safety of our platform and users.
- ▸
Business transfers: in the event of a merger or acquisition, your data may be transferred as part of that transaction.
4. Data Storage & Security
Your data is stored on secure servers. We implement industry-standard security measures to protect your information.
Storage Locations
- ▸
User accounts and game data: PostgreSQL database hosted on Render (Oregon, USA)
- ▸
Game build files: Cloudflare R2 private bucket (global CDN)
- ▸
Media files (screenshots, avatars): Cloudflare R2 public bucket (global CDN)
Security Measures
- ▸
Passwords hashed using argon2id — industry-leading password hashing algorithm
- ▸
Refresh tokens stored as SHA-256 hashes — raw tokens never saved
- ▸
Upload keys stored as argon2 hashes — shown only once to developers
- ▸
All API communication over HTTPS (TLS 1.2+)
- ▸
JWT tokens with 15-minute expiry for access tokens, 7-day expiry for refresh tokens
- ▸
Razorpay payment signatures verified using HMAC-SHA256 before order fulfilment
While we implement strong security measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
6. Payments & Transactions
All payments are processed by Razorpay. We do not store your payment card details, UPI IDs, or bank account information.
- ▸
We store: transaction IDs, purchase amounts, game purchased, timestamp, and payment status
- ▸
We do not store: card numbers, CVV, UPI IDs, net banking credentials
- ▸
Game prices are calculated server-side — we never trust frontend price values for payment processing
- ▸
Payments are verified using Razorpay's HMAC-SHA256 signature before your library is updated
- ▸
Purchase records are retained permanently so your game library remains accessible
- ▸
Refund requests must be made within the applicable period — contact us at ak3311g@gmail.com
Razorpay's privacy policy governs how they handle your payment data. You can review it at razorpay.com.
7. Developer-Specific Data
If you register as a game developer on our platform, we collect and process additional information.
Developer Account Data
- ▸
Studio name and company information
- ▸
Support email address (displayed to players on your game pages)
- ▸
Website URL (optional)
- ▸
Bank account or payout details for revenue disbursement
- ▸
Upload keys (stored as argon2 hashes — raw keys are shown only once and never stored)
Game & Build Data
- ▸
Game metadata: name, description, engine, release date, pricing
- ▸
Game assets: screenshots, trailers, logo images stored on Cloudflare R2
- ▸
Build files: game executables uploaded via desktop app, stored in private R2 storage
- ▸
Build chunk hashes (SHA-256) for deduplication — not the actual file contents
- ▸
Sales and revenue analytics tied to your games
Developer accounts are manually reviewed and approved. During review, your submitted information may be examined by our team to verify legitimacy.
8. Third-Party Services
We use the following third-party services. Each has their own privacy policies which govern their data practices.
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Razorpay | Payment processing | Transaction data, billing details | razorpay.com/privacy |
| Cloudflare R2 | File storage & CDN | File metadata, access logs | cloudflare.com/privacy |
| Render | API & database hosting | All platform data stored here | render.com/privacy |
| Vercel | Frontend hosting | Page request logs, IP addresses | vercel.com/legal/privacy |
| Resend / Gmail | Transactional email | Email address, email content | resend.com/privacy |
| UptimeRobot | Uptime monitoring | Health endpoint requests only | uptimerobot.com/privacy |
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data. We will respond to all requests within 30 days.
Rights Available to All Users
- ▸
Access: request a copy of the personal data we hold about you
- ▸
Correction: request correction of inaccurate personal data
- ▸
Deletion: request deletion of your account and associated personal data (note: purchase records may be retained for legal and accounting purposes)
- ▸
Data portability: request your data in a machine-readable format
- ▸
Withdraw consent: opt out of non-essential communications at any time
How to Exercise Your Rights
- ▸
Profile settings: change your email, password, avatar, and PC specs directly from your profile page
- ▸
Account deletion: contact us at ak3311g@gmail.com with subject 'Account Deletion Request'
- ▸
Data export: contact us at ak3311g@gmail.com with subject 'Data Export Request'
For users in the European Union (GDPR), India (DPDPA), or California (CCPA), additional rights may apply. Please contact us to learn more.
10. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations.
- ▸
Active accounts: retained indefinitely while your account is active
- ▸
Deleted accounts: personal data (name, email, password) deleted within 30 days of account deletion request
- ▸
Purchase records: retained for 7 years for accounting and legal compliance — your game library may be inaccessible after account deletion
- ▸
Review content: deleted upon account deletion
- ▸
Refresh tokens: automatically expire after 7 days and are purged from our database
- ▸
Access tokens: expire after 15 minutes (never stored server-side)
- ▸
Upload keys: retained while associated with an active developer game — deleted when game is deleted
- ▸
Server logs: retained for 90 days for security and debugging purposes
- ▸
Game build files: retained until manually deleted by the developer or upon account deletion
11. Children's Privacy
OwnPlay is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not register for an account or provide any personal information.
If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us at ak3311g@gmail.com.
Users between the ages of 13 and 18 should review this policy with a parent or guardian before using our services.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
- ▸
We will update the 'Last Updated' date at the top of this page
- ▸
For significant changes, we will notify registered users via email
- ▸
Continued use of our services after changes constitutes acceptance of the updated policy
- ▸
We recommend reviewing this policy periodically
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
© 2026 OwnPlay. All rights reserved.