Privacy Policy

GAMEVERSE is a unique service connecting gamers within an environment offering numerous features (hereinafter: "Service"). This policy applies to the websites, applications, events, and other services developed by GAMEVERSE. Its purpose is to inform you about the means we use to collect your personal data, strictly respecting your rights. In this regard, we inform you that we comply with the French Data Protection Act No. 78-17 of January 6, 1978, as amended, and Regulation (EU) 2016/679 of April 27, 2016 (hereinafter: "GDPR").

The company GAMEVERSE, S.A.S. with a share capital of 10,000 euros, having its registered office at 81 B rue Etienne Richerand, 69003 LYON, registered with the Lyon Trade and Companies Register under number 920 951 142, is responsible for processing personal data under the following conditions.

Collection and Purpose of Processing Your Personal Data

As part of your subscription to the Service launch mailing list and the Newsletter, the personal data collected is as follows: email address.

For the Service launch mailing list, the purpose of this collection is to inform you of the effective launch of the Service and to give you priority access to our private beta program.

For the Newsletter, the purpose of this collection is to send you our latest news, information about our Services, and any promotional offers via email.

This data is retained until you request to unsubscribe from our Newsletter.

You can also subscribe to the Newsletter from your account. The processing is then based on your consent, which you can withdraw at any time with the unsubscribe link in each Newsletter; your choice is recorded as described in "Acceptance of the Terms and Your Choices".

Creation of a Personal Account

As part of creating a personal account, the only mandatory piece of data is your email address, together with a password of which we keep nothing but a cryptographic hash. If you turn on two-factor authentication, we also keep the secret associated with it. You can also create your account or sign in with a Steam, Riot Games, Epic Games, Battle.net or Discord account, as described below. Every other piece of information described below is optional, and you can change or remove it at any time.

The purpose of collecting your data is as follows: creating a personalized user profile to allow you to use the Service; interacting with other users; contacting us and accessing Service support; sending you our latest news, information about our services, and any promotional offers via email; and keeping you informed of Service updates.

The Service is free. We collect no payment data.

This data is retained until you request to close your personal account.

Acceptance of the Terms and Your Choices

When you create your account, and later whenever we ask you to accept a new version of our Terms of Service, we record the version of the Terms you accepted and when, the version of this Privacy Policy that was presented to you, the language in which these texts were shown to you, and how you accepted them: when creating your account, with which sign-up method, or when signing in, through which of our applications. When you subscribe to the Newsletter or unsubscribe from it from your account, we record your choice, its date and the version of the wording you were shown. Each of these events is added to a history kept with your account.

The purpose is to be able to prove what you accepted or agreed to and when, and to know when to inform you of a new version or to ask you to accept it. This processing is based on our legitimate interest in being able to prove the terms that bind us and, for the Newsletter, on our legal obligation to be able to demonstrate your consent (Article 7(1) of the GDPR).

This data is retained for as long as your account exists and is deleted with it. It is included in the copy of your data that you can download from the application settings.

Player Profile

Your profile gathers the information you choose to fill in: pseudonym, avatar, description, spoken languages, usual playing hours, gaming objectives, whether you want to use voice chat with your teammates, and playstyle. You decide how visible each of these is.

Alongside it sit elements produced by your use of the Service: level and experience points, badges and titles earned, number of matches played and won, and behaviour indicators computed from the reports we receive. Those indicators exist to keep toxic behaviour out and to improve the quality of the matches we suggest.

The purpose of this collection is to present you to other players, to feed the matchmaking algorithm and to personalise your experience.

This data is retained until you close your account.

Connecting a Gaming Platform

The Service lets you link your Steam, Riot Games, Epic Games, Battle.net and Discord accounts, and use them to sign in. Linking is optional and happens at the publisher through the OpenID Connect protocol: your platform password is never sent to us.

Once the link is established, the data retained is the following: your account identifier on the platform, the access and refresh tokens issued by the publisher, the list of games you own with their playtime and last session, and your public game statistics such as rank, characters or agents played, win rate and performance averages. For Steam and Epic Games, we also read your friends list on that platform, to show you which of your friends already use GameVerse. For Discord, we receive your Discord identifier, username, avatar and email address; your Discord identifier is also used to give you your role on the GameVerse Discord server.

The purpose is to let you sign in with that account, to show your library and your level on your profile, and to help you find players and friends to play with.

You can disconnect a platform at any time from your account. Disconnecting deletes the corresponding tokens along with the data synced from that platform.

Messaging, Friends and the Community Space

The messages you exchange are retained so that they can be shown back to you across your devices: their content, the attachments you add to them, reactions, and the times at which they were sent and edited. The same applies to the posts and comments you write in the community space.

We also retain your friend list, the friend requests you send and receive, and the list of users you have blocked together with the reason you may have given.

This content is retained until you delete it or close your account. It can be consulted by our moderation team for the sole purpose of handling a report.

Voice Calls

Voice calls run through our own servers, hosted by OVHcloud. Your voice is encrypted between your device and our server, which forwards it in real time to the other participants without ever decoding the audio. Calls are never recorded, and no audio is stored. When noise suppression is turned on, it runs on your device. The application only uses your microphone during a call.

What we keep is a record of the call in the conversation: who called, who was invited, when the call started and ended, and how it ended (answered, missed, declined or cancelled). That record is retained like the conversation's messages.

Reports and Moderation

When you report a message, a post or a player, we record the report and keep a frozen copy of the reported content, including its attachments, as evidence, so that it survives even if its author edits or deletes it. Our moderators use reports to decide on sanctions: removal of content, exclusion, temporary suspension or permanent ban. A permanent ban also prevents the gaming platform accounts linked to the banned account from being linked to the Service again.

The evidence is kept while the report is open. Once the report is closed, it is kept for 6 months if action was taken, or for 30 days if the report was dismissed. It is then anonymised: the report remains only for statistics (type, reason, outcome and dates), with nothing left that identifies anyone.

Notifications

If you allow notifications on your phone, we record the notification token that Apple (Apple Push Notification service) or Google (Firebase Cloud Messaging) issues for your device, and our notifications are delivered to you through their service. A notification says who did what, for example "Tartan sent you a message": it never contains the text of your messages. The token is deleted when you sign out of the application on that device or close your account.

Mobile and Desktop Application

The application carries no advertising and embeds no advertising tracking tool. It accesses neither your location, nor your contacts, nor your files, beyond the documents you explicitly choose to send.

Diagnostics

To detect and fix malfunctions, the application sends us technical diagnostics: the errors and warnings it raises, the duration of its requests to our servers (performance traces), and information about each session of use (when it starts and ends, the application version, the type of device and operating system, and the screen displayed). Each report is linked to a random identifier created when the application is installed and, once you are signed in, to your account identifier. Before anything is stored, email addresses, IP addresses and access tokens that may appear in the reports are removed.

This processing is based on our legitimate interest in keeping the Service working and secure. The diagnostics are stored on our own infrastructure, hosted by OVHcloud, and are neither shared with third parties nor used for advertising. The logs are kept for 30 days and the performance traces for 14 days.

You can object at any time with the "Share diagnostics" switch in the application settings: the application then stops sending them. The same switch also turns off the usage statistics described below.

Our servers also record the technical errors encountered while the Service runs, which may include your account identifier, in order to diagnose their cause. Those records are kept for 30 days.

Product Usage Statistics

To understand how the application is used and improve it, it also sends us usage statistics. They record:

when the application is opened, comes back to the foreground or goes to the background, to count sessions and measure their length;
the screens displayed, identified by their name (for example "messages" or "community") and never by their address, which can contain a player name;
the use of the main features: signing in, finishing the welcome steps for new players, linking a gaming platform (and which one), searching for a match and finding one (and for which game), adding a friend, sending a message (private or group), starting a voice call, publishing a post in the community space, and the celebration animations displayed.

Each event comes with its date and time, the application version, the type of system (web, Linux, Windows, macOS, iOS or Android), the display language, a random identifier created by the application, and a session identifier renewed after 30 minutes of inactivity.

These statistics never contain your account identifier, your player name, your email address, your IP address, the content of your messages or searches, the address of the pages you visit, or the diagnostics identifier. The random identifier is distinct from the diagnostics identifier and is never linked to your account: our server keeps only the elements listed above and discards the rest of the request before storing the event. The statistics are only used to produce aggregate figures (number of active players, how often they come back, use of each feature). They are not combined with any other data we hold and are never used to make a decision about you.

This processing is based on our legitimate interest in measuring the audience of our application and improving it, within the conditions under which the CNIL (the French data protection authority) exempts audience measurement from consent. The identifier is renewed at least every 13 months, and each event is deleted automatically 25 months after it was recorded. The statistics are stored in a database on our own infrastructure, hosted by OVHcloud in France, and are included in our backups, which are kept for 30 days. Only the members of the GameVerse team who run the Service can view them, through our internal monitoring tool. They are neither shared with third parties nor used for advertising.

You can object at any time with the same "Share diagnostics" switch in the application settings: the application then stops sending both diagnostics and statistics, and deletes the identifier. The choice applies to the device on which you make it. Because these statistics are not linked to your account, we cannot find them from your identity: they are therefore not covered by an access request or by the deletion of your account, and are erased on their own at the end of their retention period.

GIFs and Videos from Other Services

When you search for a GIF, the application sends your search terms directly to Tenor, a Google service, which also receives your device's IP address. Videos from YouTube, Twitch or Medal shown in the community space or on a game page are only loaded from those services when you press play; YouTube videos in the community space use YouTube's privacy-enhanced mode. Those services then process your data under their own privacy policies.

Contact Form

As part of the contact form, the personal data collected includes: name, first name, email, phone number, address. The mandatory nature of this data collection is indicated, where applicable, by an asterisk.

The purpose of collecting your data depends on your selection in the dropdown menu:

Processing a query about a service or order
Handling an issue related to after-sales service or quality
Other (including partnerships)

This data is only retained for the time necessary to process your request submitted via the contact form, subject to any legal retention obligations.

Our Website: Cookies and Google Tools

Our website, gameverse.app, uses Google Tag Manager to load tools from Google, and only if you accept them in the cookie banner shown on your first visit. If you refuse or close the banner, nothing is loaded from Google and no cookie is placed for these purposes.

If you accept, the following tools are loaded:

Google Analytics 4, to measure the site's audience: the pages you view, where your visit comes from, your type of device and browser, and an approximate location derived from your IP address. It places the _ga and _ga_* cookies.
Google Ads, to measure the results of our advertising campaigns and to show our ads again to people who have visited the site (remarketing). It records whether you arrived through one of our ads and whether you sent the find-players form, and places the _gcl_au cookie on our site as well as cookies on Google's own domains.

This processing is based on your consent. Your choice, whether you accept or refuse, is stored in your browser for 6 months, after which we ask you again. You can withdraw your consent at any time through the "Cookie settings" link at the bottom of every page of the site: the Google tools then stop loading and the Google cookies placed on our domain are deleted. Withdrawing your consent does not affect what was done before.

Google Analytics keeps the measurement data for up to 14 months. In your browser, the _ga and _ga_* cookies expire at most 13 months after your first visit, in line with CNIL guidance, and the _gcl_au cookie lasts 90 days, unless you delete them or withdraw your consent.

These data are received by Google (Google Ireland Limited and Google LLC), which may transfer them to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection.

Recipients of Your Data

The data you provide is intended for:

Our customer service and complaints department, which receives all data;
Other users when you voluntarily share information about yourself;
Our service providers and partners who may help us develop, operate, and improve the Service.

When you link a platform account, the publishers concerned, namely Valve for Steam, Riot Games, Epic Games, Blizzard Entertainment for Battle.net and Discord, receive only the information needed to authenticate you and to retrieve your game data. What they then do with it falls under their own privacy policy.

Other services receive data only when you use the feature that relies on them: Apple and Google deliver notifications to your phone; Google, through Tenor, receives your GIF searches; YouTube, Twitch and Medal receive the request for a video you choose to play.

Our emails go through two providers. Brevo, a French company, receives the details you enter in our contact form and the email address of the people who subscribe to our newsletter or launch mailing list, in order to handle your message and to manage the subscriptions. Google, through Google Workspace and Gmail, sends the emails about your account, such as verification and recovery codes and the link to cancel an account deletion, and therefore receives your email address and the content of those messages; Google may transfer this data outside the European Union, under the conditions described in "Our Website: Cookies and Google Tools".

On our website, and only if you accept cookies, Google receives the audience and advertising measurement data described in "Our Website: Cookies and Google Tools", and may transfer it outside the European Union.

Your data is hosted by:

OVHcloud
OVH SAS, 2 rue Kellermann
59100 ROUBAIX (FRANCE)

Your Rights

You have the following rights concerning your data:

Right of access: You can ask us what data we hold about you.
Right to correction and erasure: You can request that we correct or erase your data.
Right to object: You can object to certain types of processing.
Right to data portability: You can ask us to transfer your data (identification and order data only) in an electronic format.

However, it should be noted that exercising these rights is not absolute and may be limited for legitimate (customer disputes) or legal reasons. To exercise the aforementioned rights:

Rights of Access, Correction, Erasure, and Portability

If you have a customer account, you can perform most of these operations directly by logging into your account. You can also send your requests by email to contact@gameverse.app and/or by mail to:

GAMEVERSE
81 B rue Etienne Richerand
69003 LYON

Deleting Your Account

You can delete your account at any time from the application, in Settings. Doing so closes it immediately: every session is revoked and you cannot sign back in.

Deleting your own account opens a 30 day period during which you can change your mind: we send a confirmation email with a link that cancels the deletion, and our support team can also cancel it for you on request. If nothing is done, every service that holds data about you erases or anonymises it once the 30 days are over. Your profile, your platform connections and the game libraries synced from them, your friend list, and the posts and comments you wrote in the community space are deleted outright. What you exchanged with other players is handled differently, as explained below, because it also belongs to the people you exchanged it with. When we delete an account ourselves, for a serious violation of our rules for instance, the same erasure runs immediately, with no waiting period.

A few things cannot simply be deleted, because they also belong to someone else or exist to protect the community:

Content shared with other people. The text of a message you sent stays visible to its recipients, but its sender is shown as a deleted account and can no longer be traced back to you.
Evidence under an open report. If a moderation report concerning you is still open when your account is erased, the evidence it relies on is kept, with every identifier replaced, until the report is closed; it is then anonymised like any other closed report.
Records of a platform ban. If a gaming platform account you had connected was banned from the Service, we keep a pseudonymised record of that ban (the platform account identifier is replaced by a keyed cryptographic hash), tied to the platform account rather than to you, for up to 730 days, so that platform account cannot be used to create a new profile and evade the ban.
The fact that your account existed. We keep the identifier your account used, on its own, with nothing else attached to it, so our systems can recognise a deleted account and never recreate it, including after one of our databases is restored from a backup.

Separately, a copy of your data can remain for a limited time in the technical safeguards the Service runs on: backups of our infrastructure are kept for 30 days, and the technical logs and performance traces our infrastructure produces are kept for 30 and 14 days respectively.

We also build pseudonymised exports of matchmaking activity, with your identifier replaced by a keyed one-way cryptographic hash, to train the algorithm that suggests teammates. These exports are kept for 180 days.

Right to Object

For newsletters: Click on the unsubscribe link in the confirmation email or in the newsletters you receive.
For any other request: Send your requests by email to contact@gameverse.app and/or by mail to:

GAMEVERSE
81 B rue Etienne Richerand
69003 LYON

For all these requests and for security purposes, you may be asked to identify yourself or provide a valid ID.

In Case of Dispute

If you are not satisfied with a response to one of these rights, or in case of a dispute regarding the use of your data, you can address your requests to the CNIL (https://www.cnil.fr/fr/plaintes).

Privacy Policy

Privacy Policy

Ready to find your squad?