Privacy Policy
This is a working draft describing, in plain language, what Lowkey Networks ("Lowkey", "we") actually collects and how it is actually used today. It is a placeholder scaffolding the account-creation flow while an attorney-approved version is prepared, and it is not a final or attorney-approved policy. [PLACEHOLDER: legal entity name and contact details to be supplied by counsel.]
1. Information you provide
- Account details: email address, password (stored as a salted hash, never in plain text), display name, avatar, locale, and timezone.
- Optional Steam account link: SteamID64, persona name, Steam avatar and profile URL, and your Steam-reported game/playtime list, if you choose to connect Steam.
- Content you submit: support tickets and attachments, marketplace listings and uploaded files, server names/descriptions, and similar account content.
2. Information collected automatically
- Session data: IP address, browser/user-agent string, and timestamps, recorded when you sign in and for security/audit logging of account actions.
- Game server console output and admin actions, for servers you provision or manage through the platform.
- If you install the Lowkey adapter on a game server: player session data keyed by SteamID64 (connect/disconnect times, ping), in-game economy and moderation events, and, on servers where chat logging is active, the text of in-game chat messages. This is collected from players connecting to that server, not from your Lowkey account directly. [PLACEHOLDER: the database has a reserved, currently-unused field for a player's country; if that is populated in the future, this section needs to disclose it as location data before that ships.]
3. How we use this information
We use this information to operate your account and hosted servers, process marketplace and billing transactions, respond to support requests, maintain security and audit logs, and improve the platform. We do not use in-game chat content or telemetry to build advertising profiles.
4. Who we share information with
We share information with the following third parties, and only as needed to provide the platform:
- Stripe — for billing subscriptions and marketplace payments, including Stripe Connect for creator payouts. Stripe receives payment and payout details directly; we do not store your raw card number.
- Steam/Valve — if you link your Steam account, we exchange the minimum data needed to sync your profile and game-ownership information.
We do not sell personal information. [PLACEHOLDER: counsel to confirm any additional CCPA/GDPR-style disclosures required for these categories.]
5. Data retention
[PLACEHOLDER: this platform does not currently enforce fixed retention periods for session logs, audit logs, console output, or adapter telemetry/chat logs — data of these kinds is retained until the owner defines and implements a retention schedule. Counsel and the owner should set specific retention periods here before this draft is finalized.] Marketplace order and payout records are kept for so long as needed for accounting and legal-compliance purposes.
6. Security
We use measures including password hashing, encryption of certain stored credentials, and access controls to protect account data. In-game chat and telemetry data are stored as received and are not end-to-end encrypted. No method of storage or transmission is completely secure, and we do not guarantee that data will never be disclosed as a result of a security incident.
7. Your choices
[PLACEHOLDER: this platform does not currently provide a self-service data export or account-deletion tool. Until one exists, describe here how a user can request access to, correction of, or deletion of their data, and who at the company handles that request.]
8. Marketplace file scanning
Uploaded marketplace files go through an automated check for known suspicious code patterns before being listed. This is not a comprehensive malware or antivirus scan, and we do not represent that any listed file has been verified as safe or free of malicious content.
9. Legal process and safety
[PLACEHOLDER: counsel to draft how Lowkey responds to lawful requests from law enforcement or in legal process, including any data-preservation practice, and how users are notified where legally permitted.]
10. Children's privacy
The platform is not directed to children under 13, and account creation requires confirming you are at least 13 years old. [PLACEHOLDER: counsel to confirm whether additional COPPA-specific commitments are needed.]
11. Changes to this policy
We may update this policy as the product changes and as an attorney-approved version replaces this draft. Material changes will be reflected by a new "Draft updated" date above.
12. Contact
[PLACEHOLDER: contact address/email for privacy requests, to be supplied by the owner.]