Simpl Privacy Policy.

1. Who This Policy Covers

This Privacy Policy describes how Simpl Technologies, LLC (“Simpl,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the Simpl game server hosting and orchestration platform (the “Service”), as defined in the Simpl Terms of Service.

This Policy covers two kinds of people:

• Customers, meaning the developers and studios who create Accounts and use the Service directly.
• Players, meaning the end users of games that run on Simpl-hosted Servers. Simpl’s direct relationship is with Customers, not Players. Any information about a Player that a Customer sends to Simpl (such as a player identifier) is Customer Content, and the Customer is responsible for having its own lawful basis and privacy disclosures for that data under its own privacy policy. This Policy does not create a direct relationship between Simpl and a Customer’s Players.

2. Information We Collect

Account information. When you create an Account, we collect your email address and a securely hashed password. If you use single sign-on or another authentication method in the future, we collect whatever that method provides us.

Payment information. Payments are processed by our payment processor. We do not receive or store your full card number. We receive limited billing details from our payment processor, such as a card’s last four digits, expiration date, and card brand, to display back to you and to manage your Pro Plan fee and usage charges.

Customer Content. This includes Builds you upload, environment variable values you configure, and other data or material you transmit through the Service, as defined in the Terms of Service. Environment variable values are encrypted at rest and treated as write-only; we do not read them back to you or anyone else after they are set.

Usage and log data. We collect information about how the Service is used, including API requests, IP addresses, timestamps, Server run time, Region, and resource consumption. We collect Server logs (the console output of your running Servers) for a limited period, currently up to three days, for operational visibility and support, after which they are deleted.

Communications. If you contact support or otherwise correspond with us, we keep a record of that correspondence.

Cookies and similar technology. The dashboard uses a session cookie to keep you signed in. This cookie is required for the Service to function and is not used for advertising or cross-site tracking.

3. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service, including provisioning Servers and running Builds;
• Process payments and manage billing, including the Grace Period and Locked Account processes described in the Terms of Service;
• Monitor, secure, and troubleshoot the Service, including detecting abuse or violations of the Acceptable Use section of the Terms of Service;
• Communicate with you about your Account, changes to the Service, or these policies;
• Comply with legal obligations.

We do not use Customer Content or Account information to train machine learning models, and we do not sell your information to third parties.

4. How We Share Information

We share information with:

• Stripe, Inc., our payment processor, to process payments and manage billing.
• Fly.io, our infrastructure provider, which hosts and runs Servers.
• Oracle Cloud, which hosts our control plane and database.
• Cloudflare, which provides edge security and protects the Service from malicious traffic.
• Brevo, our email delivery service, to send account and billing notifications.

Each of these providers only receives the information needed to perform its function and is contractually restricted from using it for its own purposes. Each also has its own privacy policy and terms of service, which govern its own handling of information, and we encourage you to review them on your own time.

• Law enforcement or other parties, where required by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Simpl, our customers, or the public.
• A successor entity, if Simpl is involved in a merger, acquisition, or sale of assets, subject to the same or a materially similar privacy commitment.

We do not share Customer Content with other customers. We do not sell information to data brokers or advertisers.

5. Data Retention

We retain Account information for as long as your Account is active, and for a limited period afterward as described in the Terms of Service and as needed to comply with legal obligations, resolve disputes, and enforce our agreements.

Server logs are retained for a limited period, currently up to three days, and then deleted. Database backups are encrypted and retained on a rolling schedule for disaster recovery purposes.

6. Data Security

We use industry-standard measures to protect information, including encryption of environment variable values and database backups, and restricted access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Regardless of where you are located, you have the right to access, correct, delete, or restrict the processing of your personal information.

In the dashboard at app.simpl.gg, you can update your payment method or delete your Account. For anything else, including correcting your information or restricting how it is processed, contact us at support [at] simpl [dot] gg. We will respond to requests sent to that address in less than 30 days.

8. International Data Transfers

Simpl is based in the United States, and the Service is operated using globally trusted and secure cloud infrastructure providers. As a result, your information, including Customer Content, may be transferred to, stored, and processed in the United States or other countries outside the jurisdiction in which you or your Players are located.

By using the Service, you consent to this transfer, storage, and processing, and you acknowledge that these countries may have data protection laws that differ from those of your jurisdiction. Where required by applicable law, such transfers are made subject to appropriate legal safeguards.

9. Children’s Privacy

The Service is a business-to-business product intended for use by game developers and studios, not by children. We do not knowingly collect personal information directly from children. This section does not limit a Customer’s own obligations regarding any Players of its games, which are the Customer’s responsibility under its own privacy policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated with at least 30 days’ notice before taking effect, consistent with the notice process described in the Terms of Service.

11. Contact

Questions about this Privacy Policy can be directed to support [at] simpl [dot] gg.