Privacy Policy

1. Definitions

• “Platform” refers to lmarcade’s website, applications, and services.
• “Personal Data” means any information relating to an identified or identifiable individual, as defined under GDPR Article 4(1).
• “User” means any individual who accesses or uses the Platform.
• “Data Controller” means AfterQuery, which determines the purposes and means of processing Personal Data.
• “Data Processor” means any entity that processes Personal Data on AfterQuery’s behalf.

2. Information We Collect

2.1 Information you provide.

• Identity & contact information. When you sign in with Google, we receive your name, email address, profile photo URL, and Google account identifier (UID), as provided by Google’s authentication service.
• Submissions. Any prompts or other content you submit, which we may process (including via automated classifiers) to assess safety and category and to enforce our terms.
• Communications. Messages, feedback, and support requests you send us.

2.2 Information collected automatically.

• Device information. IP address, browser type and version, operating system, and device identifiers.
• Usage data. Access times, pages viewed, links and features used, the matchups shown to you, your votes and selections, and engagement duration.
• Approximate location. Coarse location derived from your IP address and time zone.
• Analytics & session data. We use PostHog for product analytics and session replay (a reconstruction of on-page interactions such as clicks and navigation). Session replay is configured to exclude the contents of game iframes, so the games you play are not captured in replays.
• Security data. Sign-in events, rate-limiting counters (which may be keyed to your account or a hashed network identifier), and suspected-abuse signals.

We do not collect payment or financial information, and we do not intentionally collect special categories of sensitive data. Please do not submit such information through the Platform.

3. How We Use Your Information

3.1 Primary purposes.

• Verifying your identity and eligibility and maintaining your account;
• Operating the Platform, including authentication and voting;
• Computing and displaying aggregate model and harness rankings;
• Preserving voting integrity and preventing fraud, brigading, and abuse;
• Providing support and sending important service or security notices; and
• Complying with legal obligations and regulatory requirements.

3.2 Additional uses.

• Improving and optimizing the Platform and analyzing usage;
• Moderating Submissions and enforcing our Terms; and
• Generating aggregated, de-identified statistics and analytics.

4. Information Sharing and Disclosure

4.1 Service providers. We do not sell your Personal Data. We share information with trusted providers that process data on our behalf under contractual confidentiality and security obligations, including Google Firebase / Google Cloud (authentication, database, and storage), Vercel (hosting and delivery), and PostHog (analytics and session replay).

4.2 Legal requirements. We may disclose information where we believe in good faith it is necessary to comply with law or legal process, enforce our terms, prevent or investigate wrongdoing, protect the rights, property, or safety of AfterQuery, our Users, or the public, or respond to lawful requests from authorities. We may also disclose information in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

5. Data Security

We implement technical and organizational measures including access controls and authentication requirements, credential-scoped infrastructure, encryption in transit, continuous monitoring for suspicious activity, and incident-response procedures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain Personal Data for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, preserve ranking integrity, and enforce our agreements. Aggregate, de-identified data (such as rankings) may be retained indefinitely. We regularly review and delete or de-identify data that is no longer necessary.

7. Your Data Rights

7.1 Your rights. Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your Personal Data, to object to certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights; we do not “sell” or “share” Personal Data as those terms are defined under California law.

7.2 Exercising your rights. You can exercise these rights by emailing us at talent@afterquery.com, or by disconnecting the lmarcade connection from your Google account settings. We will respond within 30 days as required by law and may need to verify your identity before processing certain requests.

8. International Data Transfers

We are based in the United States and process data on infrastructure located in the United States. If you access the Platform from elsewhere, your information may be transferred to and processed in the U.S. We rely on appropriate safeguards where required, such as Standard Contractual Clauses, adequacy decisions, and data processing agreements with our providers.

9. Children’s Privacy

The Platform is not intended for individuals under 18 years of age, and we do not knowingly collect Personal Data from them. If you believe a minor has provided us Personal Data, contact us at talent@afterquery.com and we will take steps to delete it.

10. Changes to This Policy

We may update this policy periodically. We will notify you of material changes through email notifications at least 30 days before they take effect, Platform announcements, website notifications, and/or an update to the “Last updated” date above. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For questions or concerns about this Policy or our data practices, contact our Data Protection Officer at talent@afterquery.com. We strive to respond within 48 hours; for urgent privacy concerns, please mark your email “URGENT” in the subject line. You also have the right to lodge a complaint with your local data protection authority.