Privacy Policy
What we collect, what we deliberately do not collect, who else touches it, and how to make us delete it.
Draft pending legal review. This describes how GeeGii actually handles data today, but it has not been reviewed by a lawyer, and the orange items need decisions only the operator can make.
The short version. We store your Discord ID, your display name and avatar, your game progress, and a record of your purchases. We never see your card details. Multiplayer content — photos, guesses, messages — goes directly between players and never reaches our servers, so we hold no copy of it. We do not sell your data, and there is no advertising or third-party tracking on GeeGii today.
1What we collect
From your Discord sign-in
- Your Discord user ID — this is the identifier your GeeGii account is keyed on.
- Your Discord username and avatar image URL, used to show who you are.
We request the minimum Discord scope needed to identify you. We do not receive your Discord password, your email address, your friends list, or your messages.
That you give us
- A display name and avatar customisation, if you set one.
- Room and guild names you create, which other players can see.
From playing
- Game progress — runs, scores, characters, currencies, unlocks and daily activity.
- Multiplayer session data — which room you are in and which players are connected, so rooms can be listed and joined.
From purchases
- A ledger of D Coin movements: amounts, what was bought, and the payment provider's transaction reference.
- We keep this because it is the record that proves your balance and lets us answer a disputed charge.
Technical
- Standard server request logs, including IP address, browser user-agent and timestamps, generated by our hosting provider for security and reliability.
2What we never collect
- Card numbers or payment credentials. These are entered on the payment provider's own page. They never touch GeeGii's systems.
- Your Discord password. Sign-in happens on Discord.
- The content you share in multiplayer — see section 4.
- Advertising or cross-site tracking data. There are no ad networks, no analytics trackers, and no social pixels on GeeGii. [If rewarded ads are added later, this section and section 5 must be updated before launch, and child-directed treatment applied.]
3Why we use it
For users in the UK and EEA, the legal bases under UK/EU GDPR are:
- Performance of a contract — running your account, saving progress, connecting you to multiplayer rooms, and delivering and recording purchases.
- Legitimate interests — keeping the service secure, preventing fraud and cheating, and diagnosing faults.
- Legal obligation — keeping transaction records for tax and accounting, and responding to lawful requests.
- Consent — where we ask for it explicitly, which you can withdraw at any time.
We do not use your data for automated decisions with legal effects, and we do not profile you for advertising.
4Peer-to-peer multiplayer
GeeGii's multiplayer uses WebRTC, a direct connection between players' devices. Photos, guesses, chat-style game messages and gameplay packets travel from your device to the other players' devices, not through us.
What this means for your privacy: we never receive or store that content, so it cannot be leaked from our servers, disclosed by us, or handed over in response to a request — we simply do not have it.
What this means for your safety: we equally cannot scan, filter or moderate it, and we cannot recover it later to investigate a complaint. Share only what you are willing to show the people in the room.
To make the direct connection work, our servers do handle:
- the room directory — room names, which players are present, and host controls;
- connection brokering and temporary relay (TURN) credentials, used to establish the link when a direct one cannot be made. Relay servers pass encrypted traffic through without our being able to read its contents.
5Who else processes it
- Cloudflare — hosting, edge network, application logic and the database holding your account, progress and ledger.
- Discord — identity provider for sign-in. Discord's own privacy policy governs your Discord account.
- Stripe — payment processing on our behalf. Stripe receives the data needed to take payment, including your payment details, which we never see. We receive back only a transaction reference and the fact of payment.
Web fonts are served from geegii.com, not a third-party CDN, so loading a page does not disclose your IP address to a font host.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
6Cookies and local storage
GeeGii uses browser storage only for things the service needs to work:
- a session token so you stay signed in;
- local preferences and cached game state so a game can resume.
There are no advertising or analytics cookies, which is why you are not asked to accept a cookie banner. [If analytics or ads are added, a consent mechanism will be required in the EEA and UK.]
7How long we keep it
- Account and progress — while your account exists, and deleted when you delete it.
- Sign-in sessions — a signed-in device is remembered for up to 30 days, then the record expires on its own. Deleting your account signs out every device immediately.
- Purchase ledger — the records themselves are kept indefinitely and are never deleted. They are what proves a balance and answers a disputed charge, and tax and accounting law requires us to keep them. What does not last forever is the link to you. Seven years after a transaction, we remove the Discord account ID from that record, replacing it with a random value that is not derived from it and cannot be reversed — so the record can no longer be traced back to you, by us or by anyone who obtains the data. The amount, what was bought, the date and the payment provider's reference all remain. To be precise about what this is and is not: nothing is deleted, and this is not a promise that your purchase history disappears — it is a limit on how long we are able to say whose it was. Seven years is how long we may need to identify the customer behind a transaction, for a tax audit, a chargeback dispute or a fraud investigation. GeeGii's first sale was in July 2026, so no record has yet reached that age. [Seven years is our own conservative choice, not professional advice: the statutory minimum for the jurisdictions GeeGii sells into has not been confirmed with an accountant. It can be shortened later; data anonymised too early cannot be recovered.]
- Checkout attempts — a checkout you started but never completed is deleted after 90 days. A completed purchase is kept with the ledger above.
- Server logs — kept for a short period for security and diagnostics, then rotated out.
- Multiplayer session data — the room you are in, the name you chose for it and who is connected are held only while the room is live and for a couple of minutes after, then expire automatically. What you send to other players is never stored by us — it goes device to device, so there is nothing on our side to retain.
8Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent. Residents of the EEA and UK have these under GDPR; residents of California and several other US states have comparable rights, including the right not to be discriminated against for exercising them.
To exercise any of these, contact support@geegii.com. We will respond within the period the law requires — one month under GDPR. You also have the right to complain to your data protection authority.
9Deleting your account
Email support@geegii.com from an account we can verify, or use the in-product deletion option where available. We will delete your profile, progress and display name.
Three things survive deletion: purchase records we must keep for tax and accounting; any content other players already received peer-to-peer, which is on their devices and outside our control; and any suspension on your account. Deleting your data does not lift a suspension — signing in again with the same Discord account will still be refused, because a suspension that vanished with its subject's account would make deletion a way to start over.
Deleting your account forfeits any unspent D Coin. The balance is taken to zero as part of the deletion and does not come back if you sign in again with the same Discord account. We do this by writing an entry to the purchase ledger that takes the balance to zero, rather than by erasing what you bought — the records themselves are kept for the reasons in section 7. We cannot refund an unspent balance as money, because D Coin is not redeemable for cash — see the Terms, section 6.
10Children and families
GeeGii is for players aged 13 and over, and is not directed at children under 13. We do not knowingly collect personal information from them. If we learn that we have, we will delete the account and its data.
In the EEA and UK, the age of digital consent is between 13 and 16 depending on the country. Below that age, a parent or guardian must consent to and supervise the child's use of GeeGii.
Parents and guardians: to see what we hold about your child, correct it, or have it deleted, contact support@geegii.com. Two things worth knowing before you allow a child to play:
- GeeGii sells a virtual currency for real money. If a child can reach a saved payment method, they can spend it. Device-level purchase controls are the effective protection here.
- Multiplayer lets players exchange images and names directly, and that exchange cannot be filtered or monitored by us. Play with people you know.
[Decision needed: if GeeGii is ever marketed to under-13s, or a specific game is child-directed, COPPA requires verifiable parental consent and a separate children's notice. The current position is a 13+ service.]
11Where your data is held
GeeGii runs on Cloudflare's global network, so data may be processed in countries outside your own, including the United States. Where data leaves the UK or EEA, our providers rely on recognised safeguards such as the European Commission's Standard Contractual Clauses.
[Confirm the transfer mechanism your providers rely on and name it precisely.]
12Security
Traffic is encrypted in transit. Sign-in uses Discord's OAuth rather than a password we store. Balances are held server-side and can only be changed by verified, signature-checked payment notifications — a player's browser cannot create currency. Payment credentials never enter our systems.
No online service is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority where the law requires it.
13Changes
We will update this policy as GeeGii changes — for example if advertising or new processors are introduced. Material changes will be announced on the site before they take effect, and the "last updated" date above will change.
14Contact
Privacy questions, data requests and complaints: support@geegii.com.
GeeGii Games, 2425 Saint Catherines Street, Vancouver, BC V5T 3Y1, Canada [If GeeGii Games has EEA or UK users without an establishment there, an Article 27 representative may be required.]