GameGrid
Rent

Privacy Policy

1. Who This Policy Covers

This Privacy Policy describes how GameGrid ("GameGrid," "we," "us") collects, uses, and protects information when you use the platform at wdcgamegrid.com (the "Service"). This policy should be read together with our Terms of Service.

2. Information We Collect

2.1. Account information. Your email address, username, and password (stored as a salted cryptographic hash by our identity provider, Keycloak, never in plaintext) when you register.

2.2. Billing information. Our payment processor, Stripe, collects and stores your payment card details directly; GameGrid does not store your full card number. We retain a reference to your Stripe customer/subscription records, your transaction history, and your account credit balance.

2.3. Service data. Information generated by your use of the Service: your game server's configuration and settings, world/save-file data, uploaded files (including mods), console/log output, and connection metadata (IP address, ports).

2.4. Support data. The content of support tickets you submit, including any files you attach. This also includes information submitted through public forms such as studio inquiries, creator applications, and affiliate signups.

2.5. Usage and technical data. Standard technical data such as your IP address, browser/device information, and log-in timestamps, collected for security, fraud-prevention, and service-operation purposes. Server logs are retained for 30 days.

2.6. We do not knowingly collect more data than is necessary to provide the Service, process payment, provide support, and meet our legal obligations.

3. How We Use Your Information

We use the information described above to: (a) create and manage your account; (b) provision, operate, and bill for the Service; (c) provide customer support, including AI-assisted support features (Section 5); (d) detect and prevent fraud, abuse, and security incidents; (e) communicate with you about your account, billing, service changes, and (where you have not opted out and where permitted by law) product updates; and (f) comply with our legal obligations.

We do not use your personal information to send marketing emails unless you have explicitly opted in. We do not sell your personal information to third parties.

4. Sensitive Data Protections

4.1. Certain fields we consider especially sensitive - including payment-related identifiers, credit/balance figures, and secret-valued server settings (e.g., API keys or passwords embedded in a game's configuration) - are protected with field-level encryption at rest, in addition to standard database access controls.

4.2. Secret-valued fields are masked (shown redacted, e.g., as asterisks) in our own administrative and support interfaces by default; a human support agent does not see your secret values in plaintext during ordinary support interactions.

5. AI-Assisted Features

5.1. If you use our AI-assisted support chatbot or accept an AI-suggested help article, your question/request is processed to generate a response. A response an AI system drafts as a direct reply to you from our support team is always reviewed by a human staff member before being sent - no AI-generated message reaches you as an official support response without that human review step.

5.2. Content from resolved support tickets may be used, after a redaction process that removes personally identifying and sensitive information, to build and improve a knowledge base and support-assistant corpus. This redacted, de-identified corpus is kept structurally separate from any corpus a customer-facing assistant can access versus one only our own support staff can access, so that information intended only for internal use is not exposed to a customer-facing AI feature.

5.3. If you request AI-assisted analysis of your own server files or logs for diagnostic purposes, that analysis is performed only with your explicit request for that specific instance - your files are not sent for AI analysis without your action initiating it.

6. Who We Share Information With

We share information only as follows:

  • Stripe (our payment processor) - to process payments, manage subscriptions, and handle refunds/disputes. See Stripe's Privacy Policy.
  • Keycloak (our identity provider) - operated as part of our own infrastructure, not a data-sharing arrangement with an independent third party. Manages your login/authentication.
  • Wasabi (our backup storage provider) - stores automated and manual server backups in S3-compatible cloud storage.
  • Resend (our email delivery provider) - sends the account, billing, server, and support emails we send you. It receives your email address, your name where we have it, and the content of each email.
  • OpenAI (our AI model provider) - processes the content of support requests, questions to our AI-assisted support chatbot, and server logs or files you ask us to analyze, to generate suggested help articles, draft replies, and diagnostic answers (Section 5).
  • Discord - only if you connect a Discord server or add a Discord webhook to your game server. We send the server events, chat messages, and command results you choose to that Discord server.
  • Nexus Mods, CurseForge, Modrinth, Thunderstore, and Hangar (PaperMC) (mod marketplaces) - when you search for, install, or update mods, we query these services with the game, mod identifiers, and search terms. We do not send them your account information.
  • Steam/SteamCMD - used for game server file distribution and mod installation, including Steam Workshop content.
  • YouTube (Google) - only if you take part in our content creator program. We look up public statistics for the videos you submit.
  • Law enforcement or regulators - only where required by valid legal process, or where necessary to protect the rights, property, or safety of GameGrid, our customers, or the public.

We do not share your Service data (server configuration, save files, uploaded content) with any third party except as necessary to provide the Service (e.g., our infrastructure/hosting providers) or as described above.

7. Data Retention

7.1. We retain your account and Service data for as long as your account is active. If you cancel or your subscription lapses, your server data is retained for a 30-day grace period before permanent deletion, unless you request earlier deletion.

7.2. We retain certain records (such as billing/transaction history) for longer than the general retention window where required for legal, tax, fraud-prevention, or accounting purposes. Server logs are retained for 30 days then automatically purged. Support tickets are retained for 2 years for reference and quality assurance.

8. Your Rights and Choices

8.1. You may access, update, or request deletion of your account information at any time through your account settings or by contacting us at admin@wdcgamegrid.com.

8.2. Depending on your jurisdiction, you may have additional rights (e.g., the right to data portability, the right to object to certain processing, or rights under the EU/UK GDPR or California's CCPA/CPRA). To exercise any of these rights, contact us at admin@wdcgamegrid.com.

9. Security

We use industry-standard technical and organizational measures to protect your information, including:

  • Field-level encryption at rest for credentials we store for you, including secret-valued server settings (such as admin or RCON passwords) and webhook signing secrets
  • HTTPS/TLS encryption for all web traffic
  • Role-based access controls on all administrative functions
  • Audit logging of access to sensitive administrative functions, including a tamper-evident audit trail for actions taken on your account by our staff (such as an approved support-impersonation session)
  • Passwords hashed by Keycloak using industry-standard algorithms
  • Payment data handled exclusively by Stripe (PCI-DSS compliant)

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age without appropriate parental consent. If we learn we have collected such information without appropriate consent, we will take steps to delete it.

11. International Users

GameGrid is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States. By using the Service, you consent to such transfer.

12. Cookies

Our use of cookies is described in our Cookie Policy. We use essential cookies, and a first-party referral cookie that is set only when you follow a content creator's referral link. We do not use advertising cookies or third-party tracking cookies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email of any material change, and continued use of paid services after a material change requires your acceptance of the updated policy.

14. Contact

Questions about this Privacy Policy, or requests regarding your personal information, may be directed to:

*Last updated: September 2026*