$ cat privacy.md
Privacy Policy
last updated August 23, 2026
indie.game is operated by ESY LLC. The board collects very little: what you publish on purpose, what Stripe needs to take a payment, and an anonymised count of clicks. This page says exactly what that means.
What we collect
- Listing information you submit: the game's title, description, link, cover art, genre, and the optional build story (tool, model, hours, cost, prompts). All of it is published on the board — that is the point of submitting it.
- Contact information: the email address attached to your listing or account, used to reach you about your listing, payment, or review.
- Payment information: handled by Stripe. We receive a confirmation, the amount, and a payment identifier so we can credit the right listing. We never receive or store your full card number.
- Play clicks: when someone clicks through to a game, we record the game, the date, and a salted one-way hash of the visitor's IP address. The hash exists only to count each visitor once per game per day. Raw IP addresses are never stored, and the hash cannot be reversed into an address.
- Standard server logs kept by our hosting provider for security and reliability.
What we do not collect
- No advertising trackers, no cross-site tracking pixels, and no sale or sharing of personal information with data brokers.
- No behavioural profile of visitors. We count clicks per game, not people across games.
- No account is required to browse the board or play a listed game.
How we use it
- To publish the board, run the ranking, and show honest play counts.
- To process payments, credit bids to the correct listing, and handle refunds and disputes.
- To review submissions for playability and safety, and to contact you about your listing.
- To detect abuse — click inflation, fraudulent payments, malicious links — and to keep the board working.
Who processes it
- Stripe — payment processing. Subject to Stripe's own privacy policy.
- Supabase — database, authentication, and storage.
- Vercel — hosting and delivery.
- These providers process data on our behalf so the service can run. We do not sell personal information to anyone.
Public by design
- A listing is public: its title, link, cover art, build story, rank, committed total, and click count are visible to everyone, including search engines.
- Your email address is not published. Nor is anything you send us privately.
- Do not put anything in a listing field that you would not want on a public web page.
Retention and your rights
- Listing and payment records are kept while the board exists, because the board is a permanent public record of what was committed — and because payment records must be retained for tax and accounting purposes.
- Hashed click records are kept in aggregate as part of a game's play count.
- You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your contact details and unpublish a listing. Email zev@esy.com and we will respond within thirty days.
- Removing a listing does not refund bids already paid, and does not erase payment records we are required to keep.
Children
- indie.game is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has submitted information to us, contact us and we will remove it.
Changes
- We may update this policy as the product changes; the last-updated date above always reflects the current version. Questions go to zev@esy.com.
// questions
Payment, refund, privacy, copyright, and legal enquiries go to zev@esy.com. A human answers.