Legal

Privacy Policy

Last updated August 21, 2026

Playtest.ai (“Playtest.ai”, “we”, “us”) turns game playtest sessions into deduplicated, evidence-backed issues for game studios. This policy explains what we collect from the studios who use the platform and the playtesters they invite, how we use it, who we share it with, and the choices you have.

1. Who this policy covers

We serve two kinds of people: studio users — the developers and QA teams who create projects and review results — and playtesters — the people a studio invites to play a build and share their experience. Some sections below apply to one group more than the other; we call that out where it matters.

2. Information we collect

Account information (studio users)

When you create or join a studio we collect your name, email address, and authentication identifiers. Authentication is handled by our sign-in provider (Clerk); if you sign in with Google, we receive your basic Google profile (name, email address, and profile picture) solely to create and secure your account.

Playtest session data (playtesters)

When you accept an invitation and run a playtest through the Playtest Runner, and only after you grant the specific permissions shown to you, we may capture:

  • A recording of the game window (gameplay video).
  • Your camera (self-view) video, if you enable it.
  • Your microphone audio / think-aloud commentary, if you enable it.
  • Keyboard, mouse, and controller input events, if you enable it.
  • Moment markers you create, plus post-session questionnaire and follow-up answers.
  • Technical context: operating system, hardware, display, and gameplay telemetry and logs.

You are shown exactly which of these will be captured and must consent before a session begins. You can decline any optional stream, or stop at any time.

Derived data

We generate transcripts of session audio, extract observations from sessions, and group similar observations into issues. These are derived from the data above.

Usage data

We collect standard technical logs (such as IP address, browser type, and timestamps) needed to operate and secure the service.

You grant us a worldwide, royalty-free license to host, store, process, analyze, and use the information described above for the purposes below and for any other lawful business purpose.

  • To operate the platform: run playtests, process recordings, and deliver analysis and issues to the studio that invited you.
  • To authenticate users and keep accounts secure.
  • To generate transcripts and AI-assisted analysis of playtest sessions.
  • To maintain, debug, secure, operate, improve, and develop our products, services, and models, including through analytics and research.
  • To communicate with you about the service.
  • For other purposes disclosed to you or with your consent, and as otherwise permitted by law.

We do not sell personal information as defined by applicable law, and we do not use it for third-party advertising. Where we use aggregated or de-identified data, we may do so without restriction.

4. Google user data

If you sign in with Google, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We access only your basic profile (name, email, profile picture) to authenticate you, we do not share it with third parties except as needed to provide the sign-in and account features, and we do not use it for advertising.

5. AI processing and service providers

We rely on a small set of vetted sub-processors to run the platform. They process data on our behalf under contract and only as needed to provide their function:

  • OpenAI — transcription and analysis of session audio.
  • Vercel — application hosting and private storage of recordings and build files.
  • Convex — the application database and backend.
  • Clerk — authentication and account management.

A studio may also configure transcription to run through a private/local provider instead of the cloud.

6. How we share information

  • With the studio that invited you. Your playtest session data and derived analysis are made available to the studio running that playtest.
  • With service providers and sub-processors who help us operate, improve, and develop the service.
  • With our affiliates and, in a business transfer such as a merger, acquisition, financing, or sale of assets, with the parties involved.
  • For legal reasons, if we believe it is required or appropriate to comply with law, enforce our terms, or protect rights, safety, and the integrity of the service.
  • With your consent, or as otherwise disclosed at the time of collection.

7. Separating identity from analysis

We keep personally identifying playtester contact data (such as your email) separate from the analytical dataset. Analytical records reference a pseudonymous tester identifier, and access to the underlying identity is restricted to studio administrators. Access to sensitive material — raw recordings, participant media, and exports — is logged.

8. Retention and deletion

We retain data for as long as we determine is necessary for our business and legal purposes. Studio administrators can delete sessions and projects, which removes the associated recordings and derived artifacts. Playtesters may request deletion of their personal data and recordings by contacting us or the studio that invited them, and we will honor valid requests as required by applicable law. Erasing a playtester’s identity does not require deleting the studio’s issue evidence, which remains pseudonymous, and we may retain backups, aggregated, or de-identified data.

9. Security

Recordings and build files are held in private storage and served only through short-lived, access-controlled links. We use industry-standard measures to protect data, though no method of transmission or storage is 100% secure.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing (for example under the GDPR or CCPA/CPRA). To exercise these rights, contact us using the details below. We will not discriminate against you for exercising them.

11. International transfers

We may process and store data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

12. Children

The service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will provide additional notice.

14. Contact us

Questions or requests about this policy or your data? Email hello@playtest.ai.