Privacy Policy
CNY Game Devs (cnygamedevs.com)
Last updated: October 11, 2026
1. Who We Are
CNY Game Devs is a community website operated by Cyborg Interactive, LLC ("we," "us," "our"). For people in the European Union, Cyborg Interactive, LLC is the data controller.
Privacy contact: [email protected]
Mailing address: 1721 Black River Blvd., Suite 100, Rome, NY 13440
2. What This Covers
This policy explains what personal data we collect, why, how long we keep it, who we share it with, and what choices you have. It applies to visitors and registered members of the Site.
3. Data We Collect
3.1 Account data
When you register we collect your email address, a password (stored only as a bcrypt hash, never in plain text), your display name, the date you accepted our Terms and which version, and the date your account was created. We send a one-time confirmation link to the address to check that it is yours, and record when it was confirmed. Confirmation links are stored only as a hash and expire after 3 days.
3.2 Profile and content you choose to publish
Everything you add to your profile and post on the Site is collected because you entered it: bio, roles, skills, links to your social accounts and portfolio, a contact email, an avatar image, an optional resume file, and any projects, devlog entries, blog posts, portfolio items, and events you create. You control the visibility of each item (public, members-only, or private).
Resumes often contain sensitive personal data such as your home address and phone number. Upload one only if you want it available to the people who can see your profile.
3.3 Moderation data
Organizers record whether an account was approved or declined, when, by whom, and an optional note to you. If content is removed or reported, we keep a record of what was removed and why.
3.4 Technical data
Our servers and our hosting provider automatically log the IP address, browser type, pages requested, and timestamps of requests. We use this for security, debugging, and abuse prevention.
3.5 What we do NOT collect
- No advertising trackers, no analytics cookies, no tracking pixels
- No payment or financial information (if dues or donations are added later, this policy will be updated first)
- No precise location data
- We do not buy data about you from anyone, and we do not sell your data to anyone
4. How We Use Your Data
- Email and password: to let you log in and to contact you about your account (approval, important changes, security). Legal basis: contract.
- Profile and content: to display them on the Site according to the visibility you chose. Legal basis: contract.
- Moderation data: to run the approval queue and enforce our rules. Legal basis: legitimate interests.
- Technical data: to keep the Site running and secure. Legal basis: legitimate interests.
We do not use your data for advertising or profiling.
5. Cookies
The Site sets one session cookie when you log in so you stay logged in. It is strictly necessary for the Site to work and contains no tracking. We do not use third-party cookies. Your browser's local storage may hold display preferences; that data stays on your device.
Embedded third-party content (for example, YouTube videos on the homepage) may set its own cookies when it loads. We use YouTube's privacy-enhanced embed mode where possible.
6. Who We Share Data With
- Hosting and storage providers. The Site's database runs on infrastructure we operate. Uploaded files (avatars, images, resumes) are stored with Cloudflare R2. Traffic may pass through Cloudflare for security and delivery. These providers process data only to provide their service to us.
- Other members and the public. Content you set to "public" is visible to anyone on the internet and may be indexed by search engines. "Members-only" content is visible to approved members who are logged in.
- Organizers. Administrators can see all content, including private items, for moderation.
- Law enforcement and legal process. We will disclose data when legally required, and we will tell you unless we are prohibited from doing so.
We do not sell personal data.
7. Data Retention
- Account and profile data: until you delete your account.
- Content you post: until you delete it or your account. Deleted items may remain in backups for up to 30 days.
- Moderation records: 12 months after the related account is deleted, so we can recognize repeat problems.
- Technical and security logs: 30 days.
8. Your Rights and Choices
- Access and correction: you can view and edit your profile and content from your dashboard.
- Deletion: email [email protected] to have your account and content deleted. We will complete the request within 30 days. (A self-service delete button is planned.)
- Export: email us and we will send you a machine-readable copy of your profile and content.
- EU residents (GDPR): you also have the rights to restrict or object to processing, to data portability, and to complain to your local data protection authority.
- California residents (CCPA): you may ask what categories of data we hold and request deletion. We do not sell personal data.
9. Children
You must be at least 13 to have an account (16 in the EU). We do not knowingly collect data from younger children. If you believe a child under 13 has an account, email [email protected] and we will remove it.
10. Security
Passwords are hashed with bcrypt. All traffic to the Site uses HTTPS. File uploads go to storage over signed, short-lived URLs. Database access is limited to the application. No system is perfectly secure; if you think your account was compromised, contact us immediately.
11. International Visitors
The Site is operated from the United States. If you visit from elsewhere, your data will be transferred to and processed in the United States.
12. Changes
We will update the "Last updated" date when this policy changes and will notify registered members by email or a Site notice at least 14 days before material changes take effect.
13. Contact
1721 Black River Blvd., Suite 100, Rome, NY 13440
This Privacy Policy was last updated on October 8, 2026.