Privacy policy

What we store

• The studio's contact email address.
• The station's name.
• The game keys the studio uploads to its station.
• Redemption records: which key was handed to which redeeming account.

How keys are protected

Game keys are encrypted at rest using AWS KMS envelope encryption: each key is sealed with its own data key, wrapped by a master key that never leaves AWS. A key is decrypted once, at redemption.

Station databases are backed up nightly. Backups contain the keys in the same encrypted form and are kept on the server (up to 14 days) and in access-restricted off-site object storage (up to 90 days), after which they are deleted. Backups exist to help recover from failures; they are not a guarantee of data retention — studios should keep their own copy of their keys.

Sharing

We do not sell or share this data, with two exceptions: payment processing (handled by Stripe, which receives your billing details) and disclosures required by law.

Deletion

To request deletion of your data, email support@gamelicense.org.