Privacy Policy

Last updated: September 28, 2026

1. Who we are and what this policy covers

This Privacy Policy explains how Good Game Group INC, doing business as the*gamehers ("the*gamehers", "we", "us", "our"), collects, uses, shares and protects personal information when you visit thegamehers.com, take part in our community, programs and events (such as the*gamehers Awards), or buy from us in the future (together, the "Services").

Good Game Group INC is the data controller of your personal information for purposes of the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and similar laws. Our registered address is 1111B S Governors Ave STE 25961, Dover, DE 19904, United States.

This policy is part of, and should be read together with, our Terms and Conditions. It does not cover third-party sites or services we link to, such as Discord, social media platforms or partner websites. Those services have their own privacy policies.

Summary

• We collect only what we need to run the Services, communicate with you, run our programs and, in future, process orders.
• We do not sell your personal information, and we do not use it for cross-context behavioral advertising without your consent.
• You can access, correct, delete or export your data, and opt out of marketing, at any time. See Section 8.
• Contact us at ops@gggroupinc.com or by mail (Section 11) with any privacy question.

2. Information we collect

We collect personal information in three ways: you give it to us, it is collected automatically when you use the Services, or we receive it from third parties.

Information you give us

Information collected automatically

• Device and log data: IP address, browser type, operating system, referring pages, pages viewed, time and date of visits.
• Approximate location derived from your IP address (country or city level, not precise GPS).
• Cookie and similar technology data, including analytics and affiliate-link data. See Section 5.
• Email engagement data, such as whether you opened a newsletter or clicked a link.

Information from third parties

• Community and social platforms (for example Discord, Instagram, TikTok, X, YouTube, Twitch), when you interact with our accounts or link a profile, subject to your settings on those platforms.
• People who nominate you for an award or program, who may give us your name, handle, contact details and public achievements.
• Partners and affiliates (for example, a partner may tell us that a purchase used one of our promo codes or affiliate links), usually in aggregated or de-identified form.
• Service providers such as payment processors, which confirm payment status but do not give us your full card number.

Sensitive information. We do not ask for sensitive personal data (such as health, religious beliefs, sexual orientation or government ID numbers) except where legally required, for example tax information for prize reporting. If you choose to share it in a bio or post, we process it only with your explicit consent and you may withdraw that consent at any time.

3. How we use information and our legal bases

We use personal information only for the purposes below. If you are in the European Economic Area (EEA), the UK or Switzerland, we rely on the legal basis listed for each purpose.

Where we rely on legitimate interests, we have balanced our interests against your rights, and you may object at any time (Section 8).

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that happened before.

No automated decisions. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing, including profiling. Award winners are chosen by people.

AI tools. We may use service providers, including AI-assisted tools, to help us draft content or organize submissions. They process your data only on our instructions and may not use it to train their own models.

4. How we share information

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under California law) without your consent. We share personal information only as follows:

• Service providers (processors). Companies that host and run the Services for us under written contracts that limit their use of your data, for example website hosting and CMS (such as Webflow), email and workspace tools (such as Google Workspace), newsletter platforms, analytics, shipping and fulfillment vendors, rewards and gift card platforms (such as Tremendous), and payment processors.
• Our corporate group. Good Game Group INC and its affiliated brands, including Good Game, which help operate our community and programs. They follow this policy or equivalent protections.
• Partners and sponsors. When you win a prize or join a co-branded program, we may share the minimum needed with the relevant partner, for example a shipping address with a sponsor that ships your prize. We will tell you before we share anything beyond that, and ask for consent where required.
• Publicly, with your permission. Nominee and winner profiles (name or gamertag, headshot, bio, social handles, category) are published on our site and social channels as described in the program terms. You can ask us to edit or remove your profile at any time.
• Community platforms. Content you post in our Discord server or on social media is visible to others on that platform and governed by its rules.
• Legal and safety. When required by law, court order or lawful government request, or to protect the rights, property or safety of the*gamehers, our users or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may transfer to the successor, which must honor this policy or give you notice and choice.
• With your consent or at your direction, in any other case.

We may share aggregated or de-identified information that cannot reasonably identify you, for example to report program reach to partners.

5. Cookies and similar technologies

Cookies are small files stored on your device. We and our partners use cookies, pixels and similar technologies in the categories below.

Your choices. Visitors in the EEA, UK and Switzerland see a cookie banner, and non-essential cookies stay off until you accept them. Everyone can change their choice anytime via the Cookie Settings link in the site footer, or block cookies in browser settings. Blocking some cookies may affect how the site works.

Global Privacy Control. We honor Global Privacy Control (GPC) browser signals as a valid request to opt out of the sale or sharing of personal information and targeted advertising, where required by law.

Do Not Track. There is no common standard for Do Not Track signals, so we do not respond to them; we honor GPC instead.

A current list of the cookies we use, their providers and how long they last is available in our Cookie Settings panel.

6. International data transfers

We are based in the United States, and our service providers may process data in the US, India and other countries where data protection laws may differ from those where you live.

When we transfer personal information out of the EEA, UK or Switzerland, we use a lawful transfer mechanism, such as:

• the European Commission's Standard Contractual Clauses (SCCs), with the UK International Data Transfer Addendum and Swiss amendments where relevant;
• transfers to recipients certified under the EU-U.S. Data Privacy Framework, its UK Extension, or the Swiss-U.S. Data Privacy Framework; or
• an adequacy decision covering the destination country.

We also apply supplementary safeguards, such as encryption in transit, where appropriate. You can request a copy of the relevant safeguards by contacting us (Section 11).

7. Data retention and security

We keep personal information only as long as needed for the purpose we collected it, then delete or anonymize it.

Security. We use reasonable technical and organizational measures to protect personal information, including encryption in transit (HTTPS), access controls, two-factor authentication on key accounts, and contracts that require our providers to protect data. No system is 100% secure. If a data breach affects your rights, we will notify you and the authorities as the law requires.

8. Your privacy rights

Depending on where you live, you have some or all of the rights below. We will not discriminate against you for using them, for example by denying service or charging a different price.

EEA, UK and Switzerland. Under the GDPR, UK GDPR and Swiss FADP you have the right to:

• access your personal information and get a copy;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict processing in certain cases;
• data portability, receiving your data in a structured, machine-readable format;
• object to processing based on legitimate interests, and to direct marketing at any time;
• withdraw consent at any time; and
• lodge a complaint with your local data protection authority (Section 11).

California. Under the California Consumer Privacy Act as amended by the CPRA ("CCPA"), California residents have the right to:

• know the categories and specific pieces of personal information we collect, the sources, the purposes and the categories of recipients (this policy describes them in Sections 2 to 4);
• delete personal information, subject to legal exceptions;
• correct inaccurate personal information;
• opt out of the sale or sharing of personal information (we do not sell or share it, and we honor GPC signals);
• limit use of sensitive personal information (we only use it for purposes permitted without this right); and
• not be retaliated against for exercising these rights.

In the past 12 months we collected the categories in Section 2: identifiers, customer records, commercial information (future), internet activity, approximate geolocation, audio or visual information (headshots), and inferences limited to site analytics. We disclosed them for business purposes only to the recipients in Section 4. We have not sold or shared personal information, including of consumers under 16.

Other US states. Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, may have rights to access, correct, delete and port their data, and to opt out of targeted advertising, sale and profiling. If we deny your request, you may appeal by replying to our decision or emailing us with "Appeal" in the subject line. If the appeal is denied, you may contact your state Attorney General.

Other countries. If you live elsewhere, including Canada, Brazil, India, Australia and other regions, we will honor the rights your local law grants you.

How to make a request. Email ops@gggroupinc.com or write to us at the postal address in Section 11. To protect you, we will verify your identity, usually by confirming your email address. You can use an authorized agent, who must show your written permission. We respond within one month in the EEA/UK (extendable by two months for complex requests) and within 45 days in the US (extendable by 45 days), and free of charge unless requests are clearly excessive.

Marketing emails. Click "unsubscribe" in any email to stop them. We may still send you non-marketing messages, for example about a prize you won or an order.

9. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the age of digital consent in their country, which ranges from 13 to 16 in the EEA and is 13 in the UK).

If a program, such as a student award, involves someone under 18, we collect their information only with the verifiable consent of a parent or guardian, collect the minimum needed, and publish only what the parent or guardian approves.

We do not sell or share the personal information of anyone we know is under 18, and we do not use it for targeted advertising.

If you believe we have collected information from a child without proper consent, contact us (Section 11) and we will delete it promptly.

10. Purchases and payments

If we offer products, merchandise, tickets or memberships for sale, this section applies in addition to the rest of the policy.

• What we collect: name, email, billing and shipping address, phone number, order details, and communications about your order.
• Payment cards: payments are handled by PCI DSS-compliant payment processors (such as Stripe, Shopify Payments or PayPal). We never see or store your full card number; we receive only a token, the card type, the last four digits and the expiry date.
• Why we use it: to process and ship orders, handle returns and refunds, prevent fraud, provide customer support and meet tax and accounting obligations.
• Who we share it with: payment processors, fraud-prevention services, shipping carriers and fulfillment partners, and tax advisers, only as needed.
• Marketing: we will only send marketing emails to customers who have opted in, or where the law allows us to email existing customers about similar products, with an easy way to unsubscribe.
• Accounts: if you create an account, you can view and update your details and delete your account at any time.

We will update this policy before any commerce feature goes live if it involves new types of data or new partners.

11. Changes, contact and complaints

Changes to this policy. We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, notify you by email or a notice on the site before the change takes effect.

Contact us.

Good Game Group INC, dba the*gamehers
Attn: Privacy
1111B S Governors Ave STE 25961
Dover, DE 19904
United States
Email: ops@gggroupinc.com

EEA and UK residents. We have not appointed a representative in the EU or UK. You can contact us directly using the details above, and we will respond to your request under the GDPR or UK GDPR.

Complaints. We'd like to resolve any concern directly, so please contact us first. You also have the right to complain to a supervisory authority, such as your local EU data protection authority, the UK Information Commissioner's Office (ico.org.uk) or the Swiss FDPIC.