Privacy Policy

1. Information We Collect

GameDesk collects the following information to provide our gaming lounge management services:

• Account Information: Name, email address, phone number, and role within your organization.
• Business Data: Lounge name, table configurations, menu items, session records, orders, and payment information.
• Player Data: Player names, contact info (optional), play history, and loyalty points as entered by lounge operators.
• Device Information: Device ID, platform, app version, and browser user agent for sync and licensing purposes.
• Usage Data: Login times, feature usage patterns, and sync activity for service improvement.

2. How We Use Your Information

• Provide and maintain the GameDesk service
• Process and manage gaming sessions, orders, and payments
• Sync data between devices and our cloud servers
• Generate business reports and analytics
• Verify licenses and manage subscriptions
• Send notifications about your account and service updates
• Improve and optimize our platform

3. Data Storage & Security

Your data is stored securely using industry-standard practices:

• Cloud Database: MongoDB Atlas with encryption at rest and in transit (TLS 1.2+).
• Local Storage: IndexedDB with encrypted backups using AES-256 encryption.
• Passwords: Hashed with bcrypt (salt rounds 12). We never store plain-text passwords.
• API Communication: All API calls use HTTPS with rate limiting and JWT authentication.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

• With your explicit consent
• To comply with legal obligations or valid legal processes
• To protect the rights, property, or safety of GameDesk, our users, or the public
• With cloud infrastructure providers (MongoDB Atlas, Render, Vercel) who process data on our behalf

5. Multi-Tenant Data Isolation

GameDesk uses a multi-tenant architecture where each lounge's data is logically isolated using tenant IDs. Lounge owners can only access data belonging to their own tenant. Staff members are scoped to their assigned tenant.

6. Data Retention

• Active accounts: Data retained as long as the account is active.
• Deleted accounts: Data removed within 30 days of account deletion request.
• Session logs: Retained for up to 2 years for reporting purposes.
• Sync mutations: Automatically cleaned after successful sync (7-day retention for failed mutations).

7. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data (via the backup feature)
• Withdraw consent for data processing

8. Offline Data

GameDesk stores data locally on your device (IndexedDB) for offline functionality. This data is synced with our servers when an internet connection is available. Local data can be cleared by logging out or uninstalling the application.

9. Cookies

The application uses HTTP-only cookies for session management. We do not use third-party tracking cookies.

10. Contact

For privacy concerns or data requests, contact us at:

hello@bcoasters.xyz