Privacy Policy

GameFoundry is operated by Fracturelabs OÜ, a private limited company (osaühing) registered in Estonia under registry code 14651876, with its registered office at Saani tn 2/2-26, Põhja-Tallinna linnaosa, Tallinn, Harju maakond, 10149, Estonia.

Fracturelabs OÜ is the data controller responsible for the personal information described in this Policy. You can reach us using the details on our Contact page, including a dedicated privacy address.

Account information: your email address, optional display name, and a securely hashed password (or a Google sign-in identifier if you use Google).

Content you provide: prompts, projects, bug reports, comments, uploaded images and other content you create or submit.

Waitlist information: if you join our pre-launch waitlist, the email address and optional first name you provide (or that we receive from Google if you join with Google).

Usage and technical information: basic logs needed to operate, secure and debug the service.

Requests from connected AI apps: if you connect an AI app (such as Claude or ChatGPT) to GameFoundry with our connector, we receive only what that app sends when it uses a GameFoundry tool on your behalf, such as game files, titles, descriptions, prompts and settings. We use it only to carry out the action you asked for. We do not receive the rest of your conversation with the AI app. You can see and revoke connected apps at any time under Dashboard, Connected clients.

Diagnostic reports from connected AI agents: if you connect an AI agent to GameFoundry (for example over MCP), the service logs tool errors automatically, and your agent may send us short reports about problems it ran into. These contain the tool used, the error or a description of what went wrong, and the settings of the request with large content (such as game code) and anything that looks like a credential removed. We use them only to find and fix problems in GameFoundry.

Payment information: paid plans are processed by Stripe. We do not store full card numbers; Stripe handles card data under its own terms.

To provide and maintain the service, process payments, deliver AI features, communicate with you about your account, send waitlist and launch announcements you have asked for, keep the service secure, prevent abuse, and comply with legal obligations.

Where data protection law (such as the EU/UK GDPR) applies, we rely on the following legal bases:

Performance of a contract — to create your account and provide the tools, projects and paid features you sign up for.

Legitimate interests — to secure the service, prevent abuse and fraud, debug problems, and improve features, balanced against your rights.

Consent — for optional activities such as joining the waitlist and receiving announcement emails. You can withdraw consent at any time.

Legal obligation — to keep records and respond to lawful requests where the law requires it.

When you use an AI feature, the prompt or content you submit is sent to a third-party AI provider to generate a result. Depending on the feature this may be Anthropic, OpenAI or Replicate. Those providers process the data under their own terms to return a result.

GameFoundry does not train AI models of its own and does not use your content or prompts to build one. Whether a provider further uses the data it receives is governed by that provider's own terms.

We use trusted providers to run GameFoundry, including Vercel (hosting), Neon (database), Cloudflare R2 (file storage), Stripe (payments), Resend (email), and Google (optional sign-in and the font catalog). These providers process data on our behalf to deliver the service, under data processing terms.

If you join the GameFoundry waitlist on our coming-soon page, we store the email address and optional first name you give us — or that we receive from Google if you join with Google — to notify you about the launch and related announcements. This is based on your consent.

Every announcement email includes an unsubscribe link. You can opt out at any time, after which we stop emailing you and mark your waitlist entry as unsubscribed.

We use cookies that are necessary to sign you in and keep your session active. We also use the Google tag (Google Ads) to measure which of our ads lead to a sign-up or a purchase. In the EEA, the UK and Switzerland, Google advertising cookies are only set after you accept them in our cookie notice; if you decline, Google receives only cookieless signals without ad identifiers. We report a sign-up or purchase to Google as an event with an order reference and amount, never your name or email. We also keep where your first visit came from (for example an ad campaign or referring site) on your account to measure our marketing.

We keep your information for as long as your account is active and as needed to provide the service and meet legal obligations. When you delete your account, we delete the associated data, subject to limited retention where the law requires it (for example, payment records held by Stripe for tax and accounting purposes). Waitlist entries are kept until you unsubscribe or we complete the launch rollout.

Game leaderboards: when you post a score while signed in, your public handle and best score are shown on that game's leaderboard until you or the game's creator remove it, or you delete your account. If you post a score without an account, only the name you type (up to 5 characters) and the score are stored, and they are deleted automatically after about 24 hours unless you sign up to keep them.

Depending on where you live — and notably under the EU/UK GDPR — you have the right to access a copy of your data, correct inaccurate data, delete your data, restrict or object to certain processing, receive your data in a portable format, and withdraw consent where processing is based on consent.

You can access, export and delete your data directly from Account settings. For any other request, contact us using the details on our Contact page.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority. In Estonia, where we are established, that authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

We use reasonable technical and organizational measures to protect your information. No online service can be guaranteed perfectly secure, but we work to protect your data and to respond promptly to any incident, including notifying you and the relevant authorities where the law requires it.

GameFoundry is for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it.

If you are a parent or guardian and believe a child under 13 has created an account, please contact us and we will remove the account and its data. For users aged 13 to 17, we aim to collect only the information needed to provide the service.

We work to comply with the Children's Online Privacy Protection Act (COPPA) and other applicable child-privacy laws. Some countries set a higher age of digital consent under the GDPR; where that applies, a parent or guardian may need to consent on the user's behalf. See our Child Safety page for the safeguards we apply.

Your information may be processed in countries other than where you live, including the United States. Where data is transferred across borders, we rely on appropriate safeguards, such as Standard Contractual Clauses, where required by law.

We may update this Policy; we will post the updated version with a new date and, for material changes, provide reasonable notice.

Privacy questions and requests — including access, export, correction and deletion — can be sent to the privacy address on our Contact page. Our company details are set out in section 1 above.