Privacy Policy

GameHaptic is a product of Sync Inc Ltd ("we", "us", or "our"), registered in England and Wales. Sync Inc Ltd is the data controller for all personal data processed in connection with GameHaptic.

This policy explains what data we collect, why we collect it, how it is stored, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data collected automatically by the app:

• Machine ID: A unique identifier derived from your device's hardware characteristics. This cannot be used to identify you personally and is used solely to bind your trial and licence to your device.
• Machine friendly name: Your computer's display name (e.g. "Toby's MacBook Pro"), sent once when your trial is registered. Used to identify your device in your licence record.
• Licence key: If you purchase, your licence key is stored server-side to manage activation status, transfers, and validation.
• Licence state: Your current licence status (trial active, trial expired, licensed) and days remaining are synced to our servers and cached locally for a 48-hour offline grace period.
• App version: Your current app version is sent when checking for updates.
• IP address: Your IP address is recorded in our server-side security audit log when you perform licence operations (trial registration, activation, deactivation, transfer). This is used for fraud detection and abuse prevention.

Data collected at purchase (via Stripe):

• Email address: Provided during checkout, used to deliver your licence key by email (via Resend) and stored in our licence database.
• Name: Provided during Stripe checkout, stored in our licence database alongside your email.
• Stripe session ID: A reference identifier from your payment session, stored for order reconciliation.

Data collected if you contact support:

• Email address: Retained solely to respond to your query.

• Keystrokes or key content
• Mouse movement or click coordinates
• A list of your installed applications (scanned locally for the app selector UI only)
• Which games you play or how long you play them
• Game profile data or haptic mappings (stored locally on your device only)
• Screen captures, audio, or any other sensor data
• Crash reports or diagnostic telemetry
• Analytics or behavioural tracking of any kind

• Contract performance (Article 6(1)(b)): Processing your machine ID, licence key, and licence state is necessary to provide the trial and licence you have requested - including activation, validation, deactivation, and transfer of your licence. Sending your licence key to your email address after purchase falls under this basis.
• Legitimate interests (Article 6(1)(f)): We log IP addresses and licence operation events in a security audit trail to detect fraud, prevent licence abuse, and protect our systems. We have assessed that this processing is proportionate and does not override your rights, given that no sensitive personal data is involved and the data is used solely for security purposes.
• Legitimate interests (Article 6(1)(f)) - marketing: We may use your email address to send product updates and offers to existing customers under the soft opt-in rule in the UK Privacy and Electronic Communications Regulations (PECR). You can opt out at any time.

• Register and validate your 7-day free trial
• Activate, validate, deactivate, and transfer your GameHaptic licence
• Deliver your licence key to you by email after purchase
• Enforce licence transfer limits (up to 2 per calendar month)
• Check for and deliver app updates
• Detect and prevent fraud and licence abuse via security audit logging
• Respond to support requests
• Send product updates and marketing emails, where you have consented

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

• Supabase (EU region): Our backend database and serverless functions. Stores machine IDs, licence records, audit logs, and transfer history. Data is hosted in the EU. Supabase Privacy Policy
• Stripe: Payment processing. We do not handle or store card details. Stripe receives your payment information directly and notifies us of successful purchases via a secure webhook. Stripe Privacy Policy
• Resend: Transactional email delivery. Used to send your licence key after purchase. Receives your email address and licence key for this purpose only. Resend Privacy Policy

• Trial and licence records (machine ID, machine name, licence key, customer email, name, Stripe session ID): retained for as long as necessary to support licence activation, transfers, and to prevent trial and licence abuse.
• Transfer history and security audit log (IP addresses, licence events): retained for as long as necessary for fraud prevention, abuse detection, and dispute resolution.
• Support emails: retained for as long as necessary to resolve your query and handle any follow-up.
• Local app data (licence cache, game profiles, app preferences): stored on your device and deleted when you uninstall the app or delete those files manually.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your data where we have no overriding legal obligation to retain it.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to data portability: Where processing is based on contract or consent and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests. We will cease processing unless we have compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: Licence validation (trial status, activation checks) is performed automatically based on your machine ID. This is necessary to perform your contract and does not produce legal or similarly significant effects. You may request human review of any licence decision by contacting us.

To exercise any of these rights, contact us at hello@syncincltd.com. We will respond within 30 days. We may need to verify your identity before actioning a request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data lawfully. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

For privacy-related questions or to exercise your rights, contact us at hello@syncincltd.com.

GameHaptic is supplied and operated by Sync Inc Ltd, registered in England and Wales.