Your data, on your terms.
What we collect, why we collect it, and how to take it back. Last updated: June 2026.
This document is a template. It is provided as a starting point and is not legal advice. The GameXcel team should review and adapt it with qualified counsel before relying on it in production.
Who this policy applies to.
This Privacy Policy explains how GameXcel ("GameXcel", "we", "our") handles personal data when you visit our marketing site, create an account, apply to playtests, or access a studio workspace.
It applies to playtesters, studio members, and visitors. If you sign up on behalf of a studio, your studio is the controller of the project and feedback data created inside its workspace; GameXcel acts as the processor for that data.
What we store, and where it comes from.
Email, display name, optional avatar, optional country and bio, platform and device preferences, language. Provided directly by you when you sign up or edit your profile.
Applications, invites, feedback, ratings, XP, reward-point balances, and messages exchanged inside a project thread. Generated as you use the product.
Studio name, slug, logo, plan tier, project briefs, build URLs, and requirements. Provided by studio members.
IP address, browser type, device, approximate location derived from IP, and basic request logs. Collected automatically and used for security and abuse prevention.
Why we hold each piece.
- • Operate the service: authenticate you, match playtesters with relevant projects, deliver feedback to studios.
- • Communicate with you: transactional emails about applications, invites, and account events.
- • Improve the product: aggregate, de-identified analytics to understand which features are used.
- • Protect the platform: detect abuse, rate-limit suspicious traffic, and investigate security incidents.
- • Marketing: only if you explicitly opt in (for example, by joining the early-access list with the marketing checkbox).
On what grounds we process data.
Most account and project data is processed because it is necessary to provide the service you signed up for.
Security logs, fraud prevention, and aggregated product analytics are processed under our legitimate interest in operating a safe and useful platform.
Marketing emails and any optional cookies beyond what is strictly necessary are processed only with your consent, which you can withdraw at any time.
We may retain limited records to comply with tax, accounting, or law-enforcement requirements where applicable.
Who else touches your data.
We do not sell personal data. We share it only with vendors that help us run the service:
- • Lovable Cloud — application hosting and serverless runtime.
- • Supabase — managed Postgres database and authentication.
- • Lovable AI gateway — used when a studio runs the AI insights feature on its own feedback.
If a studio enables an optional integration (analytics, CRM, etc.), that provider becomes a subprocessor for that studio's workspace and is governed by the studio's own terms.
Where your data lives.
GameXcel is operated globally and personal data may be processed in jurisdictions other than the one in which you reside. Where transfers leave the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or an equivalent transfer mechanism with our subprocessors.
Contact us if you would like more detail on the current hosting region for your account or workspace.
What you can ask us to do.
Request a copy of the personal data we hold about you in a structured, machine-readable format.
Update inaccurate or incomplete information directly in your profile, or ask us to do it for you.
Ask us to delete your account and the personal data associated with it. Some records may be retained where required by law.
Object to processing based on legitimate interest, or ask us to restrict how we use specific data.
Where we rely on consent (marketing emails, optional cookies), you can withdraw it at any time without affecting the lawfulness of prior processing.
You have the right to lodge a complaint with your local data protection authority.
To exercise any right, email privacy@gamexcel.app. We will respond within a reasonable timeframe and within statutory deadlines where they apply.
Who can use GameXcel.
GameXcel is not directed at children under 16. We do not knowingly collect personal data from anyone under that age. If you believe a child has provided us personal data, contact us and we will delete it.
How long we keep data.
Account, profile and playtest activity are kept while your account is active so the product remains usable.
When you delete your account, personal data is removed within a reasonable timeframe. Limited backups and audit logs may persist for up to 30 days before being overwritten.
When this policy updates.
We may update this Privacy Policy as the product evolves. Material changes will be announced on this page with a new "last updated" date and, where appropriate, via email.
Privacy questions.
Email privacy@gamexcel.app for access, correction, deletion, or any other privacy-related request.