Privacy Policy

1. Data controller

GameJamCrew is a community platform for Game Jam squad matching. The processing of your personal data is carried out by the site editor. For any question relating to this policy, you can contact us via the contact details indicated in the Legal notices.

2. Data we collect

We collect only the data necessary for the proper functioning of the platform:

• Account and sign-in: Authentication is handled by Supabase. You may sign in with Discord or Google OAuth, or with a magic link sent to your email. Depending on the provider, we may receive an account identifier, display name, avatar URL, and email address.
• Public profile: Information you choose to add (for example username, bio, skills, default role and engine, languages, portfolio link, Discord username, experience level, and jam-related preferences) to be discoverable by other jammers.
• Gamification: Progress data stored on your profile such as experience points, level, unlocked titles and badges, and related statistics used only to reward engagement on the platform.
• Teams and recruiting: Content you publish when creating or managing a team (name, game concept, roles sought, description, engine, language, Discord invite link when provided, jam association, dates).
• Join requests and invitations: When you apply to a team or receive or send an invitation, we store the request type, status, targeted role, and any message you attach, plus identifiers needed to connect the request to your account and the team.
• Team chat: Messages you post in a team's chat are stored so members can see the conversation history for that team.
• Availability posts: Optional listings when you advertise yourself as available for a jam, including role, engine, and similar fields you submit; these listings can expire automatically.
• In-app notifications: We store notification records (type, message, link, read state) so you can see updates about applications, invitations, team activity, and similar events in the product.
• Optional browser push: If you enable push notifications, we store subscription data (endpoint and encryption keys) required for your browser to receive alerts. You can disable this at any time from your device or browser settings and we stop using that subscription once removed.
• Transactional email: We send service-related emails (for example sign-in links, smart match alerts, application and invitation updates, team changes, and periodic alerts for new team chat messages subject to rate limits) to the address associated with your account. Sending is done through our email provider; we do not use these emails for advertising.
• Imported jam metadata: When someone submits an Itch.io jam URL, our servers fetch the public jam page to extract non-sensitive catalog information (such as title, link, dates, and imagery) so jams can be selected in the product. This does not include your Itch account credentials.
• Supporter matching (optional): If you support the project through Buy Me a Coffee and use the same email as your GameJamCrew account, their systems may share that email with us via webhook so we can grant optional supporter badges. We only use it to match your existing account, not for marketing.

3. Data retention and minimization

In line with the principle of data minimization (GDPR), team and availability announcements expire automatically after a defined period. Inactive data is not kept indefinitely. You can delete your profile and associated data at any time from your dashboard. Pending join requests you withdraw may be deleted; historical team membership and messages may remain visible to former teammates according to product behavior until teams or content are removed by owners or by automated cleanup.

4. Cookies

We use cookies strictly necessary for the operation of the service: Supabase session cookies to keep you logged in. These cookies do not require your prior consent under the GDPR, as they are essential for the service to function. We do not use Google Analytics, advertising pixels, or any third-party tracking cookies.

5. Subprocessors and sharing

We rely on trusted infrastructure and service providers to run GameJamCrew. They process data on our instructions only: Supabase (authentication and database), Vercel (hosting), Resend (transactional email), and when you use them, Discord or Google (OAuth login). Public jam pages may be retrieved from Itch.io when importing a jam. We do not sell personal data. Other users can see information you publish on the platform (profiles, teams, availability) according to the product's visibility rules.

6. Your rights

In accordance with the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. You can also lodge a complaint with a supervisory authority (e.g. CNIL in France). To exercise these rights, contact us via the details in the Legal notices.

7. Data security

Data is hosted and processed by Supabase and Vercel, providers that comply with industry security standards. We implement reasonable measures to protect your data from unauthorized access, alteration, or disclosure.