Privacy Policy

Your data

What we collect, why, who we share it with, and the choices you have. In plain English.

1. Who we are

Gamavas (gamavas.fun) is a product of Alubasa Labs LTD, a company registered in Nigeria. We decide how and why your personal data is used, which makes us the “data controller” for it.

This policy explains what we collect when you use Gamavas, why, who we share it with and the choices you have. Questions or requests: privacy@gamavas.fun.

2. What we collect

Your account. Your name, email address and password (stored only as a secure hash we can't read). If you sign in with Google or GitHub, we receive your name, email address and profile picture from them, but never your password for those services.

Your profile. Your handle, display name, bio and avatar. These are public: anyone can see them at gamavas.fun/your_handle, along with your level, badges and published games.

Games you submit. The details, cover image and trailer video you give us, plus your name or studio, location, X handle and support link, which appear on your public listing. The contact email you add is private: only the Gamavas team sees it.

What you do on Gamavas. The games you play, like and wishlist, your XP, streaks and badges.

Device and log data. Your IP address and browser details when you sign in or use the site. We use them to keep you signed in, to stop abuse (such as limiting repeated sign-in attempts) and to keep the service secure.

Usage analytics. Which pages you visit, which buttons you use, and errors you run into, along with your browser and device type. This shows us what works and what's broken.

Messages you send us. If you email us, we keep the conversation so we can help.

3. How we use it

  • To run Gamavas: your account, profile, submissions, XP and badges. This is needed to provide the service you signed up for.
  • To review games before they go live, and to email you about your submissions.
  • To send account emails: confirming your email address, password resets and updates on your games. These are part of the service, so they don't depend on your news preference.
  • To send Gamavas news (new features, featured games, game jams), only if you say yes. You can change your mind anytime in Settings or with the unsubscribe link in every news email.
  • To keep Gamavas safe: preventing spam, fraud and abuse, and enforcing our Terms of Use. We have a legitimate interest in this.
  • To improve Gamavas using analytics. We have a legitimate interest in this.
  • To meet legal obligations, for example responding to valid requests from authorities.

Drafting listings with AI. When you use “Generate my listing”, we read the game page you link to and pass its text, along with any notes you write, to an AI model that drafts the listing. You review and edit the draft before submitting. We don't use your data to train AI models.

We don't sell your personal data, and we don't show you third-party ads.

4. Who we share it with

We share personal data only with service providers that help us run Gamavas, under agreements that limit what they can do with it:

  • Cloudflare: hosting, security, storage for game media, and the AI model that drafts listings.
  • Neon: our database, hosted in the United States.
  • Resend: sending our emails.
  • PostHog: usage analytics and error reports, hosted in the European Union.
  • Firecrawl: reading the game pages you ask us to draft a listing from.
  • Google and GitHub: only if you choose to sign in with them.

We may also share data if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (in which case this policy keeps applying to your data).

5. Data outside Nigeria

Some of our providers store or process data outside Nigeria, mainly in the United States and the European Union. When that happens, we rely on the safeguards allowed by the Nigeria Data Protection Act 2023 and, for players in the EU and UK, the GDPR, such as contractual protections with each provider.

6. Cookies and local storage

We use a small number of cookies and similar browser storage:

  • Essential: keeping you signed in and securing your session. Gamavas doesn't work without these.
  • Analytics: recognising repeat visits so our usage analytics make sense.
  • Convenience: remembering things on your device, such as a game submission you haven't finished or your sound settings.

You can clear or block cookies in your browser settings. Blocking essential cookies will sign you out.

7. How long we keep it

We keep your account, profile and activity for as long as you have an account. If you ask us to delete your account, we delete or anonymise your personal data within 30 days, except where we must keep something for legal reasons, to resolve disputes or to prevent abuse.

Published games may remain listed after you leave if you ask us to keep them; otherwise we remove them with your account. Security logs and rate-limit records are kept only for a short time.

8. Your rights

Under the Nigeria Data Protection Act 2023 and, where it applies, the GDPR, you can ask us to:

  • give you a copy of your personal data;
  • correct data that's wrong or incomplete;
  • delete your data or your account;
  • stop or limit how we use your data, or object to it;
  • send your data to you or another service in a portable format;
  • withdraw consent you gave, such as for news emails, at any time.

You can edit your profile and email preferences yourself in Settings. For anything else, email privacy@gamavas.fun from the address on your account. We reply within 30 days.

If you're unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC), or to the data protection authority where you live.

9. Children

You must be at least 13 to create a Gamavas account. If you're under 18, you need permission from a parent or guardian to create one. Anyone can browse and play games without an account.

If we learn that someone under 13 has an account, or that someone under 18 signed up without a parent or guardian's permission, we'll delete the account. Parents and guardians can contact us at privacy@gamavas.fun.

10. Security

We protect your data with encryption in transit, hashed passwords, limits on sign-in attempts and access controls for our team. No service is perfectly secure, so use a strong password you don't use anywhere else. If we discover a breach that affects you, we will tell you and the authorities as the law requires.

11. Changes to this policy

We'll update this policy when Gamavas changes, and change the date at the top. If a change matters, we'll tell you by email or on the site before it takes effect.

12. Contact

Alubasa Labs LTD, the company behind Gamavas: privacy@gamavas.fun.