Privacy Policy
Learn how Tokebi Metrics collects, uses, and protects your data when you use our game analytics platform.
Privacy at a Glance
- • We only collect the data you explicitly send us through our analytics API
- • Your game data belongs to you - we never sell or share it with third parties
- • We use HTTPS encryption to protect data in transit
- • We don't track you with cookies or collect personal device information
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address (for account creation and communication)
- Encrypted password (we never store passwords in plain text)
- Account preferences and settings
Game Analytics Data
We only collect the data you explicitly send us:
- Custom events you define and send from your games
- Event data and metadata you choose to include
- Timestamps when events are received
- Any custom properties you add to events
Important: You have complete control over what data is sent. We only receive what you programmatically send through our API.
What We Don't Collect
- IP addresses or location data
- Device information or browser details
- Cookies or tracking pixels
- Any data not explicitly sent by your game
- Personal information about your game players
2. How We Use Your Information
Service Delivery
Process your events, generate analytics dashboards, and maintain your account
Security & Fraud Prevention
Protect your account and prevent unauthorized API access
Communication
Send important service updates, beta program information, and support responses
Service Improvement
Analyze platform usage to improve our service (using aggregated, non-personal data)
3. Data Storage & Security
Where Your Data is Stored
We use Supabase (built on PostgreSQL) for data storage:
- Servers located in secure data centers with SOC 2 Type II compliance
- Data encrypted in transit using HTTPS (TLS 1.2+)
- Data encrypted at rest (AES-256)
- Regular automated backups with point-in-time recovery
- Access controls and audit logging for all database operations
Security Measures
Current Security
- • HTTPS encryption in transit
- • API key authentication
- • Encrypted password storage
Coming Soon
- • Multi-factor authentication
- • Enhanced access controls
- • Additional security audits
4. Data Sharing & Third Parties
We Never Sell Your Data
Your game data is yours. We will never sell, rent, or share your analytics data with third parties for marketing purposes.
Limited Data Sharing
We only share data in these specific circumstances:
- Service Providers: Trusted partners who help us operate the service (hosting, email delivery, support)
- Legal Requirements: When required by law, court order, or to protect our rights
- Business Transfer: In the event of a merger or acquisition (with 30-day advance notice)
- Your Consent: With your explicit permission for specific purposes
Current Third-Party Services
Supabase
Database hosting and authentication
EmailJS
Contact form and email delivery
5. Your Rights & Controls
You have rights over your data. Here's what's currently available:
Access Your Data
View all your analytics data through your dashboard
Update Information
Update your account details and preferences anytime
Data Export (Coming Soon)
Export your data in standard formats (JSON, CSV)
Account Deletion (Coming Soon)
Self-service account and data deletion
How to Exercise Your Rights
For data export, account deletion, or other privacy requests, reach out to our support team:
We typically respond within 24-48 hours
6. Cookies & Tracking
No Cookies, No Tracking
We don't use cookies, tracking pixels, or any third-party analytics tools. Your session is managed through secure authentication tokens only.
Authentication Only
We only use secure authentication tokens to keep you logged in. No behavioral tracking or advertising cookies.
Privacy-First Approach: We don't use Google Analytics, Facebook Pixel, or any other tracking tools that monitor your behavior or share data with third parties.
7. Data Retention
Active Accounts
- • Account data: Retained while account is active
- • Analytics data: Retained during free beta (no limits)
- • API keys: Valid until regenerated or revoked
Account Deletion
- • Contact support for account deletion
- • All data deleted within 30 days of request
- • Backups purged within 90 days
Inactive Accounts
Accounts inactive for 2+ years will receive deletion warnings before permanent removal.
8. International Users
Tokebi operates globally and follows privacy-first principles that align with major privacy regulations including GDPR (EU), CCPA (California), and PIPEDA (Canada).
GDPR (EU)
We respect EU privacy rights and data protection requirements.
CCPA (California)
California residents have additional rights under the Consumer Privacy Act.
Global Standards
We apply high privacy standards to all users worldwide.
9. Changes to This Policy
We may update this privacy policy occasionally to reflect changes in our practices or for legal compliance.
How We'll Notify You
- • Email notification for significant changes
- • Updated "Last modified" date at the top of this page
- • 30-day advance notice for material changes
Questions About Your Privacy?
We're here to help. If you have any questions about this privacy policy or how we handle your data, don't hesitate to reach out.
We typically respond within 24-48 hours