1. Who we are
LobbyLab (the website at lobbylab.gg, the LobbyLab apps for iOS and Android, and the LobbyLab Multiplayer API and developer tools, together the "Service") is operated by CardGrader LLC ("we", "us" or "our"). CardGrader LLC is the controller of the personal information described in this policy.
This policy explains what information we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It applies with our Terms of Service. If you have a question, write to us through the Help and support page or at [email protected].
The short version: we collect what we need to run your account, build and host your games, run rooms and keep people safe. We do not sell your personal information, we do not show ads, and we do not use advertising or tracking tools. Do not put personal information in game prompts.
2. Information we collect
Information you give us
| What | Details |
|---|---|
| Account details | When you sign in with Apple or Google, we receive a unique account identifier and your email address (Apple may give us a private relay address instead). We do not receive your name or profile photo from them. When you sign in with an email code, we receive your email address. |
| Profile | Your display name, handle and avatar (you pick a preset avatar and a color; you cannot upload photos). |
| Age | We ask what year you were born. Your device turns that into an age range (such as 13 to 15) and sends only the range; we do not store your birth year. If your device's operating system offers an age range signal, we may use it too. |
| Consents and settings | Which versions of our Terms and Community Guidelines you accepted and when, your notification choices, and your privacy settings (such as who can send you friend requests or invites, whether others can find you by handle, and whether you appear offline). |
| Prompts and games | The descriptions and instructions you type to build or change a game, and the games built from them, including titles, descriptions, code, versions and screenshots. |
| Names in rooms | The name you use when you play without an account. |
| Social activity | Friend requests, friends, blocks, friend links, room invites you send and receive, and the ratings and favorites you give games. |
| Reports and appeals | When you report a game or a player, or appeal a decision, we collect what you tell us and what the report is about. |
| Support messages | When you contact us, we collect your message, the topic, the email address you give us (if any) and basic context such as the screen you were on, your app version and your platform. |
| Purchases | When you buy a plan or credits, Apple or Google handles the payment. We receive a confirmation of what you bought, when, its price and store transaction identifiers, never your card details. |
Information collected automatically
| What | Details |
|---|---|
| Device and installation identifiers | A random identifier created on your device when you first use LobbyLab (an installation id in the apps, a random id in your browser's local storage on the web). It helps us keep your rooms, favorites and settings on that device and prevent abuse. |
| Sign-in sessions | For each signed-in device: the kind of client (web, iOS or Android), the installation id, when the session was created and last used, and a keyed hash of the IP address used to sign in. We use the hash to detect abuse; we do not store the IP address itself with your account. |
| Push notification tokens | If you allow notifications: the push token for your device from Firebase Cloud Messaging, whether notifications are allowed, your app version and language, and a log of the notifications we sent (their type and whether they were delivered). |
| Room and game activity | The rooms you create or join, the seats you take, what happens in the game (its state and your moves), who you played with, and when. |
| Presence | While you are signed in and the app or site is open, we know that you are online and which game you are in, so friends can join you. Presence is held in memory only and is not stored. |
| Usage counts | Which pages and features are used, where visits come from (the referring website's name and any campaign tags in the link, never the full address), and whether you use a browser or the installed web app. We count these with a pseudonymous visitor id made by a keyed hash of your device's random id, never with your IP address, account, name or email. If your browser sends a Do Not Track or Global Privacy Control signal, we do not use its random id at all and count only a daily visit that cannot be linked to other days. |
| Crash reports | If the app crashes, Firebase Crashlytics collects a crash report: what went wrong in the code, the device model, operating system and app versions, and the time. We do not attach your account or name to crash reports, and we remove secrets from error messages first. |
| Technical data | Your IP address, browser or device type and similar information reach our servers and our hosting provider when you connect. We use them to deliver the Service, to limit abuse (for example daily build limits and rate limits, which hold IP addresses in memory only) and to keep it secure. |
Information from other sources
- Apple and Google, when you sign in with them (see above), and when you buy through their stores (purchase confirmations, renewals, cancellations and refunds).
- Our purchase processing provider, RevenueCat, which confirms store purchases for us.
- Other players, when they invite you, send you a friend request, block you or report you or your game.
Information we do not collect
We do not collect your precise location, contacts, photos, microphone or camera, browsing history on other sites, or advertising identifiers. LobbyLab has no free text chat or private messages between players, and games on LobbyLab are not allowed to ask players for personal information.
3. How we use information
We use the information above to:
- provide the Service: create and secure your account, sign you in, build, host and run games, run rooms and matchmaking, fill empty seats with AI players, show your profile to other players, and deliver friends, invites, presence and notifications;
- keep LobbyLab safe: check prompts, games and names against our rules, give games an age rating, apply age-based settings, handle reports, blocks and appeals, prevent fraud, cheating, spam and abuse of free credits, and enforce our Terms;
- handle purchases: confirm what you bought, keep your credit balance and plan, and return credits when a build fails;
- support you: answer your questions and requests, and send messages you need, such as sign-in codes and account deletion notices;
- understand and improve LobbyLab: measure which features are used, fix bugs and crashes, and improve how games are built and checked, using counts, crash reports, failed builds and feedback;
- meet legal obligations: keep financial records, respond to lawful requests, and report child sexual abuse material to the National Center for Missing and Exploited Children as the law requires.
We do not use your information for targeted advertising, and we do not sell it. We do not use your information to make decisions about you that have legal or similarly significant effects based only on automated processing. Automated checks can limit or remove content or accounts under our Terms; you can ask a person to review any such decision (see section 8 of the Terms).
4. AI processing
LobbyLab uses artificial intelligence to build games and to help keep the Service safe. To do that:
- when you build or change a game, we send your prompt to our AI service providers, and for a change, also the game's title, description, code and earlier prompt;
- prompts, game titles and text shown in games, names and handles, and the details of reports and appeals may be checked by our AI service providers to apply our Community Guidelines and to rate games by age.
Our AI service providers process this information on our behalf to provide these services to us. Do not include personal information about yourself or anyone else in prompts or games. AI players that fill empty seats in a room follow each game's own rules and do not send your information to an AI service provider.
5. How we share information
With other players. Your display name, handle and avatar are visible to other players. Other players in a room see your name, avatar and play. Your friends can see when you are online and which game you are in, unless you appear offline. Public games show their creator's handle, and anyone can see and play them. Games you keep public when you delete your account stay without your name.
With service providers who process information for us under contracts that limit how they may use it:
| Service provider | What they do for us |
|---|---|
| Cloudflare | Hosting network, content delivery and security. Every request to lobbylab.gg and games.lobbylab.gg passes through Cloudflare. |
| AI service providers | Building and changing games, and checking content for safety (section 4). |
| Google (Firebase Cloud Messaging) | Delivering push notifications to Android and iOS devices (iOS through Apple's push service). |
| Google (Firebase Crashlytics) | Collecting app crash reports. |
| Apple and Google | Sign in with Apple and Google sign-in, and in-app purchases through the App Store and Google Play. |
| RevenueCat | Confirming and managing in-app purchases and subscriptions. |
| Brevo | Sending email, such as sign-in codes and account notices. |
For legal reasons and safety. We may share information if we believe in good faith that it is needed to comply with the law or a valid legal process, to protect the safety of any person, to prevent fraud or abuse, or to protect the rights and property of CardGrader LLC, our players or the public. We report apparent child sexual abuse material to the National Center for Missing and Exploited Children, which works with law enforcement.
In a business change. If LobbyLab is moved to another company that we control (for example a company created to run LobbyLab), or is part of a merger, acquisition or sale of assets, your information may be transferred as part of it, and this policy will continue to apply to it unless you are told otherwise.
With your permission. We share information in other ways when you ask us to or agree to it.
No sale, no targeted advertising. We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined in California law. We have not done so in the past 12 months. There are no third-party ads or advertising trackers in LobbyLab.
6. Cookies and similar technologies
We use only what LobbyLab needs to work. We do not use advertising or third-party analytics cookies.
- Sign-in cookie: when you sign in on the website, a secure, HttpOnly cookie keeps you signed in for up to 30 days.
- Local storage on your device: the website stores a random browser id, your name for rooms, your seats in rooms you joined (for 24 hours), your recently played games, a build you started (including its prompt, until the build finishes) and display preferences. The apps store similar information, plus your sign-in session, in your device's secure storage and app settings. You can clear this data in your browser or by deleting the app.
- Security: Cloudflare may set a strictly necessary cookie to protect the site from bots.
- Google sign-in: if you choose Google sign-in on the website, Google's sign-in script loads on that page and Google's own privacy policy applies to it.
Because we do not track you across other websites, we treat Do Not Track and Global Privacy Control signals as described in section 2 and do not otherwise change anything when we receive them.
7. How long we keep information
We keep information only as long as we need it for the purposes above, then delete or anonymize it:
| Information | How long we keep it |
|---|---|
| Account, profile, settings, consents and age range | While your account exists. After deletion, your handle stays reserved for 30 days so no one can take it over right away. |
| Sign-in sessions (with the hashed IP address) | Until you sign out or the session expires (30 days without use on the web, 90 days in the apps), then 30 more days. |
| Email sign-in codes | Up to 24 hours. |
| Friend requests | Up to 30 days while pending, then 30 days after they are answered or expire. |
| Recent players | Shown for 30 days, deleted after 90 days. |
| Friend links and room invites | Friend links work for 7 days and are deleted 30 days later; invites are deleted 30 days after they are sent. |
| Blocks | Until you unblock the player or either account is deleted. |
| Push tokens and the notification log | Tokens until you turn notifications off, sign out or delete your account (tokens of devices unused for 270 days are deleted); the log for 30 days. |
| Rooms and game sessions, including names used in them | Up to 30 days after the room ends. |
| Games and their prompts | While the game is on LobbyLab. Detailed build logs are kept for up to 30 days. |
| Ratings and favorites | While your account exists. |
| Reports, appeals and enforcement records | Up to 1 year after the case is closed, longer when needed for a legal claim or when the law requires it (for example for reports to the National Center for Missing and Exploited Children). |
| Prompt safety checks | The prompt text for up to 90 days; a fingerprint of the prompt and the result for up to 90 days to stop repeated abuse. |
| Support messages | Up to 2 years after your request is closed. |
| Purchase and credit records | 7 years, for tax and accounting. |
| Usage counts (pseudonymous) | Up to 400 days. |
| Crash reports | Up to 90 days, in Firebase Crashlytics. |
| Email delivery records | Messages waiting to be sent are encrypted and deleted within 24 hours of delivery; our email provider keeps its delivery logs under its own policy. |
| Server logs | Up to 30 days. They record events and errors, not your IP address. |
| Backups | Up to 30 days. |
When you delete your account, we wait 7 days (in case you change your mind), then delete your account, profile, sign-in methods and sessions, consents, friends, requests, blocks, invites, recent players, devices and push tokens, and the games you built with that account together with their prompts, unless you chose to keep your public games playable without your name. We revoke Sign in with Apple when you ask to delete. We keep only what the table above says we keep after deletion: purchase and credit records (for 7 years), reports and enforcement records about the account (for up to 1 year), reports you filed (without your name) and a record that the account existed and was deleted. If you built games before you had an account, ask us through the Help and support page and we will delete them.
8. Your choices and rights
Choices everyone has:
- See and change your profile in the app, under You, Edit profile.
- Control notifications in the app's Settings or in your device settings.
- Control who can reach you: in Settings you can choose who can send friend requests and invites, whether others can find you by handle, appear offline, and block players.
- Delete your account in the app (You, Settings, Delete account) or as described on Delete your account.
- Ask for a copy of your data, or ask us to correct or delete information, through the Help and support page (choose "Privacy or legal") or at [email protected].
We will verify your request, usually by asking you to sign in or to write from the email address on your account, and answer within 30 days (45 days where California law allows, and we will tell you if we need more time). We will not treat you differently for using your rights.
If you live in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct, delete or receive a portable copy of your personal information, to restrict or object to how we use it, and to withdraw consent at any time where we rely on consent. You can also complain to your local data protection authority. Our legal bases are:
- contract: to provide the Service you asked for (your account, games, rooms, friends, invites and purchases);
- legitimate interests: to keep LobbyLab safe and secure, prevent abuse, moderate content, measure and improve the Service with pseudonymous counts and crash reports, and support you, where those interests are not overridden by your rights;
- consent: to send push notifications, and where the law requires consent for anything else;
- legal obligation: to keep financial records, respond to lawful requests and report child sexual abuse material.
If you live in California or another US state with a privacy law, you have the right to know what personal information we collect, use and disclose, to access it, to correct it, to delete it, and to opt out of its sale, of sharing for targeted advertising, and of profiling for significant decisions. We do not sell or share personal information for targeted advertising and we do not do such profiling, so there is nothing to opt out of. You can use an authorized agent; we will ask for proof that the agent is authorized. If we deny your request, you can appeal by replying to our answer, and if we deny the appeal you can contact your state attorney general.
In the terms of California law, in the past 12 months we have collected: identifiers (such as account ids, installation ids and email addresses); customer records (such as purchase records); commercial information (such as plans and credits bought); internet or other electronic network activity (such as how you use the Service and crash reports); inferences limited to your age range; and account login information (your sign-in sessions, which we protect as sensitive). We collected them from the sources in section 2, for the purposes in section 3, and disclosed them for business purposes to the categories of service providers in section 5. We do not use sensitive personal information to infer characteristics about you.
9. Children
LobbyLab is not directed to children under 13, and you must be at least 13 to create an account. We ask for your age when you sign up. If you tell us you are under 13, we delete the new account right away, and that device cannot try again for 30 days. You can still join a game from a link as a guest, which needs no account.
If we learn that we have collected personal information from a child under 13 without the consent of a parent or guardian, we delete it as quickly as possible. Parents and guardians who believe their child has given us information can ask us to delete it through the Help and support page or at [email protected].
Players aged 13 to 17 get stronger default protections: only people they have played with can send them friend requests, others cannot find them by handle, and invites come only from friends. For players under 16 these settings are locked, and notifications hide names and game titles by default. Our Child Safety Standards explain how we protect young people from abuse.
10. Security
We protect information with measures that fit its sensitivity, including encryption in transit on every connection, encrypted storage for sign-in secrets and for emails waiting to be sent, one-time codes and IP addresses stored only as keyed hashes, short-lived access tokens, access controls for our team, and encrypted backups. No system is perfectly secure, so we cannot guarantee security. If a data breach affects you, we will tell you and the authorities as the law requires.
11. Where information is processed
LobbyLab is operated from the United States, and our servers and most of our service providers process information in the United States. Cloudflare delivers the Service through data centers around the world. If you use LobbyLab from outside the United States, your information is transferred to the United States, where privacy laws may differ from those in your country. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and the UK's International Data Transfer Addendum.
12. Developers and the Multiplayer API
If you use the LobbyLab Multiplayer API or developer tools, we process your developer account details and API usage under this policy. For the data your game sends about your own players (such as the player ids you assign and your game state), we act on your behalf as your service provider, and your own privacy notice applies to your players. Section 15 of the Terms explains your responsibilities.
13. Changes to this policy
We may update this policy as LobbyLab changes. We will change the date at the top, and if a change is significant we will tell you in the app, on the website or by email before it takes effect.
14. Contact us
To ask a question or make a privacy request, use the form on the Help and support page (also in the app under You, Help and feedback), or email [email protected] with the subject "Privacy". CardGrader LLC operates LobbyLab and is responsible for your information.