Privacy Policy

IndieCtrl is a business analytics and media-coverage platform for game developers, publishers, and their teams. This Policy explains how IndieCtrl collects, uses, stores, and shares personal information and YouTube API Data when you use the Service.

1. Who we are and scope

IndieCtrl is a product and service operated by Thousand Generation Ltd (“we,” “us,” or “our”). Thousand Generation Ltd operates the IndieCtrl website and web application (together, the “Service”) and is the data controller for personal information processed under this Policy. This Policy covers visitors, account holders, invited workspace members, and individuals whose publicly available professional information may appear in the creator-discovery features.

The Service is intended for business users aged 18 or older. Do not use the Service or provide personal information if you are under 18.

2. Information we collect

Information you provide

• Account and workspace information, such as name, email address, authentication identifiers, company or workspace name, role, and team invitations.
• Game and service configuration information, such as Steam App IDs, game titles, campaign and festival notes, search queries, settings, and other content you enter into the Service.
• Steam Partner API credentials that you provide for your own games. We use those credentials to retrieve the Steam data you authorize us to retrieve. We do not display those credentials to other workspace members.
• Support correspondence and feedback you send us.
• Billing information needed to administer a subscription. Payments are processed by Stripe; IndieCtrl does not store full payment-card numbers.

Information generated through use of the Service

• Service-use and diagnostic information, such as feature events, timestamps, browser or device information, IP address, session and authentication information, and logs used to operate, secure, and improve the Service.
• Workspace activity, including account access, exports, searches, team invitations, settings, and use of paid credits or plan limits.
• Steam analytics that you authorize us to retrieve for configured games, including sales, wishlists, refunds, pricing, country or regional aggregates, traffic, reviews, and related reporting data.

Information from public sources and platforms

The Service may collect and organize publicly available professional information about video-game creators and coverage, including public channel names, channel URLs and identifiers, profile images, public biographies, social links, public business contact details, and information about a creator’s coverage of a game. We use this information to provide creator discovery and outreach-workflow features. We do not sell personal information.

YouTube API Services and YouTube API Data

IndieCtrl uses YouTube API Services to provide media-coverage and analytics features for games that customers choose to monitor. We may collect, process, and store publicly available YouTube video and channel information to identify relevant coverage and present related analytics within the Service.

IndieCtrl does not access a customer’s private YouTube account information through these features.

Where the Service displays YouTube content, IndieCtrl identifies YouTube as the source and links users to the relevant YouTube page.

Google’s privacy practices are described in the Google Privacy Policy. YouTube’s terms are available at YouTube Terms of Service.

3. How we use information

• Provide, authenticate, maintain, secure, and support the Service and its workspace features.
• Retrieve, organize, analyze, and present the Steam, YouTube, Twitch, and other platform data that a customer has configured or is permitted to use.
• Create analytics, coverage timelines, alerts, exports, and recommendations for the customer’s workspace.
• Administer subscriptions, prevent fraud and abuse, enforce plan limits, and keep records required for accounting or legal compliance.
• Investigate incidents, protect our users and systems, and improve the reliability and usability of the Service.
• Comply with applicable law, enforce our Terms of Service, and establish, exercise, or defend legal claims.

4. Legal bases for processing

Where the GDPR or similar law applies, we process personal data to provide the Service and perform our contract with you; with your consent where required; to comply with legal obligations; and for our legitimate interests in operating a secure, effective business analytics service, provided those interests are not overridden by your rights.

5. How we share information

We share information only as needed to operate the Service, including with service providers that provide cloud hosting and database infrastructure, authentication, payment processing, email or support services, analytics or monitoring, and contracted technical support. These providers may process information only on our instructions and subject to appropriate confidentiality and security obligations.

We do not sell, rent, or disclose YouTube API Data to third parties for their own advertising, marketing, or unrelated purposes. YouTube API Data may be available to authorized members of the applicable customer workspace and processed by the service providers necessary to operate IndieCtrl. We may disclose information where required by law, to protect rights, safety, and security, or in connection with a corporate transaction. We do not sell personal information or share it for cross-context behavioral advertising.

In addition, we do not sell, rent, or trade your Customer Data - including the Steam sales, wishlist, revenue, and related analytics we retrieve on your behalf, and any API credentials you provide. Customer Data is used only to provide the Service to your workspace, and is accessible only to authorized members of that workspace and the service providers strictly necessary to operate IndieCtrl.

6. Retention and deletion

We retain account, workspace, and customer-provided data for as long as the account is active and for a limited period afterward as reasonably necessary for backup, billing, dispute resolution, security, and legal obligations. We delete or de-identify data when it is no longer needed for those purposes.

We retain YouTube API Data only for the period necessary to provide the coverage and analytics functionality, subject to applicable YouTube API Services Terms, Developer Policies, and any storage permissions granted by YouTube. We will refresh, delete, or stop displaying data that is no longer available from YouTube or where required by those policies.

You may request deletion of your account or personal data by contacting us. Deleting an account may remove access to workspace data, subject to limited retention needed for legal, billing, fraud-prevention, and backup purposes.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These include access controls, transport encryption, restricted production access, and encryption at rest for sensitive credentials, including the Steam Partner API keys you provide. No internet or storage system is completely secure, so we cannot guarantee absolute security.

8. Cookies and similar technologies

The Service may use strictly necessary cookies, local storage, and similar technologies to keep you signed in, remember preferences, protect the Service, and understand basic service use. You can control cookies through your browser settings, but disabling necessary technologies may prevent parts of the Service from working. If we introduce optional analytics or advertising cookies requiring consent, we will provide an appropriate notice and choice mechanism.

9. International transfers

IndieCtrl and its service providers may process information in countries other than where you live. Where required, we use appropriate safeguards for international transfers of personal data.

10. Your rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to a data-protection authority. We may ask for information to verify a request and will respond as required by applicable law.

11. Creator-data inquiries and opt-out

If you are a creator and believe that personal information about you is inaccurate, should be removed, or is being used unlawfully, contact us at hello@indiectrl.app with the relevant channel or profile URL and your request. We will review and respond in accordance with applicable law. Customers remain responsible for using contact information lawfully and respecting any opt-out request.

12. Changes to this Policy

We may update this Policy to reflect changes to the Service, our practices, or the law. We will post the updated version with a revised effective date and, where legally required, provide additional notice or obtain consent.

Contact us

For privacy questions, requests to exercise a privacy right, or questions about this Policy, email support@indiectrl.com. Please use the subject line “Privacy request” and include enough information for us to verify and process your request.

Registered office: Suite 1281, 5 Brayford Square, London, E1 0SG. Company registered in England and Wales. Company number: 16157200.