Privacy Policy

01Who we are

Splitscreen is operated by Sterango LLC, a Texas limited liability company, which is the data controller for the information described here. This policy covers splitscreen.gg, the logged-in application and the voice rooms. It sits alongside our Terms & Conditions.

Questions, requests and complaints: support@splitscreen.gg, subject line Privacy.

02What we collect

Everything we hold, why we hold it, and how long. Nothing on this list is optional-but-secretly-required, and nothing is collected that is not in it.

We do not collect precise location. “Region” is something you type, at whatever precision you choose, and you can hide it.

03Where it comes from

• From you — nearly all of it. Signing up, onboarding, your profile, your messages.
• From your browser — IP address and user-agent, sent automatically with every request, as they are to every website.
• From a service you chose to link — Steam returns an ID that proves you own the account; a music service returns the artists you listen to most. We ask for the narrowest scope that makes the feature work, and nothing more.
• From other members — if someone reports or blocks you, that report is about you and we hold it.

We do not buy data about you, and we do not receive it from data brokers, advertising networks or social platforms.

04Why we use it

To run your account and the three rooms; to match you with people; to deliver messages and voice; to enforce the 18+ rule; to detect, investigate and act on abuse, fraud and rule-breaking; to keep the service secure and working; to answer your emails; and to meet legal obligations.

Where the UK or EU GDPR applies to you, our legal bases are: contract, for everything needed to give you the service you signed up for; legitimate interests, for safety, moderation, security, abuse prevention and keeping the product working, having weighed those interests against your rights; consent, for optional things you switch on — linking an outside account, turning Dating on, uploading a photograph — which you may withdraw at any time by switching them off; and legal obligation, where a law requires us to keep or produce something.

We do not make decisions about you by automated means that produce legal or similarly significant effects. Matching sorts a list; it does not decide anything about your rights. A moderation decision that removes an account is reviewed by a person.

05Sensitive information

Some of what Splitscreen holds is treated as sensitive by law — your date of birth, your gender, and, if you use Dating, who you are looking to meet, which can reveal sexual orientation.

We collect it only because the feature you turned on cannot work without it, and we ask for it at the point you turn that feature on. Dating is off unless you switch it on. If you never use Dating, we never ask who you are looking to meet. Turning Dating off stops it being used, and clearing those fields removes them.

We do not use sensitive information for advertising, we do not sell it, and we do not share it with anyone outside the processors listed in section 11.

06What other members see

The point of a profile is to be seen, so it is worth being exact about the line.

Other members can see

• Your gamertag and display name, your accent colour and avatar.
• Your games and ranks, your platforms, the hours you play, your time zone and microphone preference.
• Your bio and your prompt answers.
• Your region, unless you have hidden it.
• Your badges, and roughly when you were last seen.
• In Dating: your photographs, your age (as a number, not a date), your gender, and your top artists if you have switched them on.
• Anything you write into a squad, a community or a message.

Other members never see

• Your email address.
• Your date of birth. Dating shows an age, not a birthday.
• Your IP address, your device, or where you are signed in.
• Who you swiped past, or which way.
• That you blocked them, or that you reported them.
• Your account standing or any moderation history.

Photographs are served through a route that checks who is asking, from a private disk with no public link into it. A photograph URL guessed by someone who should not see it returns nothing.

07Your privacy controls

These are in the product, not in an email to us:

• Incognito, from the rail — takes you off the boards and out of the deck while it is on.
• Hide region — keeps your region out of your profile while still using it to match.
• Dating on or off — off by default. Off means your profile is not in the deck at all.
• Show my top artists — off takes them off your cards and out of matching, not just out of sight.
• Photographs — add, reorder and delete individually. Deleting removes the file, not just the reference.
• Linked accounts — unlink at any time; the connection record is deleted.
• Block — immediate, and it works in both directions.
• Delete your account — on the account page, behind your password.

08Cookies

We use cookies for one purpose: keeping you logged in and keeping the site safe to use. There is no cookie banner because there is nothing to consent to — we set no advertising, profiling or analytics cookies.

• Session cookie — identifies your logged-in session. Without it you cannot stay signed in.
• CSRF token — proves a form was submitted from our own pages, and not by another site acting as you.
• Remember me — only if you ask for it, so you are not logged out when you close the tab.
• Our network provider may set its own cookie to route requests and filter attack traffic. It is not used to track you between sites.

Blocking the first two will stop you being able to log in. Your theme choice is stored on your account, not in a cookie.

We honour Global Privacy Control where it applies. In practice there is nothing for it to switch off — we do not sell or share personal data for advertising in the first place.

09Voice rooms

Voice is carried in real time by a third-party media service that routes audio between the people in a room. We do not record it, store it, transcribe it or listen to it, and there is no archive of it to hand to anyone.

What we hold is the plumbing: which member is connected to which room, a session identifier, whether they are muted, and when we last heard from them. That is cleared when the session ends.

The trade is worth stating plainly. Not recording protects your privacy, and it also means a complaint about what somebody said in voice cannot be settled by playing it back — see section 8 of the Terms. Anyone else in the room can hear you, and nothing we do prevents them recording at their end.

10Facial liveness

It is described here because the code exists and we may switch it back on. If we do, this is how it works, and this paragraph is the notice:

• It is optional, and it is never a condition of getting in. It earns a badge. The date-of-birth check is what governs the rooms.
• A frame from your camera is sent to a service on our own machine, held in memory for one inference, and discarded.
• No face image, template, embedding or biometric identifier is ever stored. There is no upload directory, no face database and nothing to delete afterwards, because nothing is written down. What is recorded is the result: passed, and when.
• The frame is not sent to any third party, and it is never used to identify you, to train a model, or for anything but that one answer.

If we turn it on, existing accounts will be asked before a camera is opened, and declining costs you nothing but the badge.

11Who we share with

A short list, and it is the whole list.

• Other members, as described in section 6.
• Our hosting and network providers, who run the servers this site is on and the network in front of it, and who necessarily handle traffic including IP addresses in order to deliver and protect it.
• The voice media service, which carries live audio between people in a room and receives the session identifiers needed to route it.
• A service you chose to link — where linking necessarily tells that service you are connecting, under their own privacy policy.
• Email delivery, for the transactional mail we send you, such as a password reset.
• Law enforcement, regulators or lawyers, where we are legally required to, or where we believe in good faith it is necessary to prevent serious harm, investigate a crime against a member, or establish or defend a legal claim. Child sexual abuse material is reported to the authorities, always.
• A buyer, if the business is sold, merged or restructured — in which case this policy follows your data, and we will tell you before anything changes.

Providers act on our instructions under contract, are given only what they need, and may not use your data for their own purposes.

12What we never do

• We do not sell your personal data, and we never have.
• We do not share it for cross-context behavioural advertising, or for targeted advertising of any kind.
• We do not run analytics, heatmaps, session recording or advertising pixels. There is no Google, Meta or ad-network code on this site.
• We do not load fonts, scripts or images from anyone else’s server. Everything the page needs comes from ours, which is why loading it tells no one anything.
• We do not read your messages for advertising or profiling. A moderator reads a specific conversation only when it is reported, and only enough of it to act.
• We do not use your content to train machine-learning models.
• We do not ask for your legal name, and we do not want it.

13Security

Passwords are stored as one-way hashes, never as text. Third-party tokens are encrypted at rest. Photographs sit on a private disk with no public path into them and are served only through a check against the viewer. The whole site is served over HTTPS, and the age check runs on the server, where a page cannot be edited past it.

No system is perfectly secure, and we will not pretend otherwise. Use a password you do not use anywhere else. If we discover a breach affecting your personal data, we will notify you and the relevant regulator where the law requires it, without undue delay.

Found a vulnerability? Please tell us at support@splitscreen.gg before telling anyone else. We will not pursue anyone who reports a genuine issue in good faith and does not access, alter or exfiltrate other people’s data.

14Keeping, deleting and removal

We keep personal data only as long as we need it for the purposes in this policy, then delete it.

14.1  Deleting your own account

You can delete your account yourself, from the account page, confirmed with your password. It is immediate and it cannot be undone. Your profile, bio, prompts, games, photographs, linked connections, verifications, swipes, matches, squad and community memberships and voice records go with it.

14.2  When we remove your account

14.3  What outlives an account

Two things survive, and both are deliberate:

• Safety reports and their outcomes. A report about you is also a record belonging to the person who made it, and abuse that vanishes when its author deletes their account is abuse nobody can act on. We keep the report with a short label rather than a live link to the deleted account.
• The moderation log. Actions our staff take are recorded so they can be audited later, including who did it and why. Removing that record on request would defeat the only check we have on our own moderators.

Both are kept to what is necessary, are not used for anything else, and are held for no longer than needed to run safety and resolve disputes — ordinarily up to two years, longer only where a legal claim or an obligation requires it.

14.4  Backups and messages

Deleted data may persist in encrypted backups for a short period before those are overwritten in the ordinary cycle. A message you have already sent remains visible to the person you sent it to until they delete it or their account, in the same way a sent text does.

14.5  Dormant accounts

We may remove an account that has not been signed into for a long period, after emailing the address on it first.

15Your rights

Wherever you are, you can ask us to give you a copy of your data, correct it, delete it, or explain what we hold. Write to support@splitscreen.gg with the subject Privacy. We answer within 30 days, or 45 where a US state law allows an extension and we tell you why.

We will verify a request against the account it concerns — usually by requiring it from the registered email address — because handing someone’s dating profile to whoever asks for it would be its own privacy failure. Exercising a right never costs money and never costs you the service.

If the UK or EU GDPR applies to you

You have the rights of access, rectification, erasure, restriction, objection (including to processing based on legitimate interests), and data portability, and the right to withdraw consent at any time without affecting what was done before you withdrew it. You may complain to your national supervisory authority; in the UK that is the Information Commissioner’s Office. We would rather you told us first.

If you are in Texas, California, or another US state with a privacy law

You have the right to confirm whether we process your personal data and to access it, to correct it, to delete it, to obtain a portable copy, and to appeal a decision of ours. There is nothing to opt out of for the sale of personal data, targeted advertising or profiling, because we do none of them — see section 12. Texas residents have these rights under the Texas Data Privacy and Security Act, and California residents under the CCPA as amended, including the right not to be discriminated against for exercising them.

Appeals

If we refuse a request, we will tell you why. You may appeal by replying to that email with Appeal in the subject; we will respond within 60 days, and if we refuse again we will tell you how to complain to your state Attorney General or supervisory authority.

16Where your data lives

Splitscreen is operated from the United States and your data is stored there. Our network provider operates globally, so traffic may be routed through equipment nearer to you before reaching us.

If you are in the UK, the EEA or another region with transfer restrictions, using the service involves transferring your data to the United States. Where the law requires a safeguard for that transfer, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum with the providers concerned.

17Children

Splitscreen is strictly 18+ and is not directed at children. We do not knowingly collect personal data from anyone under 18. If we learn or reasonably believe an account belongs to someone under 18, we remove it and delete the data.

If you are a parent or guardian and you believe your child has an account here, write to support@splitscreen.gg with the subject Underage. We will act on it before anything else in the queue.

18Changes to this policy

We will update this page when what we do changes, and change the date at the top. If a change materially affects your rights or how we use your data, we will give notice through the service or by email before it takes effect.

We will not start selling your data, running ad trackers, or using your content to train models by quietly editing this page. Those would be material changes, and you would be told.

19Contact

Sterango LLC — Splitscreen
support@splitscreen.gg

Subject line Privacy for a data request, Appeal to appeal a refusal, Underage for anything involving a minor, Security for a vulnerability.