Privacy Policy

This policy applies to the GrillMe website, accounts, subscriptions, and browser games made available through the service (together, the “Service”). GrillMe is the controller of the personal information it processes for the Service.

For privacy questions or requests, email privacy@grillme.today. Please do not send passwords, payment-card numbers, or other sensitive credentials by email.

• Account information: username, display name, email address, email-verification status, optional profile image, account identifiers, encrypted or hashed authentication credentials, linked login provider details, and account creation or update dates.
• Authentication and device information: session identifiers, session expiration, IP address, browser or device user agent, security and verification tokens, and records of sign-in, password reset, email change, and account-deletion activity.
• Subscription and transaction information: Stripe customer and subscription identifiers, product and price identifiers, subscription status, trial and renewal dates, cancellation details, and related audit records. Stripe collects and processes payment-card and billing details; we do not store complete payment-card numbers.
• Game and preference information: a randomly generated browser visitor identifier, selected provider and game codes, language, premium-access status, ad-free status, and, when you are signed in, your stable customer identifier and username. The visitor identifier allows a game service to associate progress with your browser and, after you sign in, import that anonymous progress into your account. Favorite and recently played game codes are stored in your browser as described below.
• Operational information: request and event timestamps, request identifiers, requested paths, error details, and account, customer, subscription, or provider identifiers used to diagnose and secure the Service.

We receive this information from you, your browser or device, Google if you choose Google sign-in, Stripe when you start or manage a subscription, and the game services you access through GrillMe. Required account information is needed to create and secure an account. Required billing information is needed to purchase a subscription; without it, those features cannot be provided.

• To create accounts, authenticate users, provide games, remember preferences, and deliver subscriptions. Where applicable, we process this information to perform our contract with you or to take steps you request before entering one.
• To operate, troubleshoot, protect, and improve the Service; prevent abuse or fraud; and maintain reliable audit records. We rely on our legitimate interests in running a safe and effective service where those interests are not overridden by your rights.
• To process payments, manage cancellations, answer disputes, keep accounting records, and meet tax, legal, regulatory, and law-enforcement obligations.
• To send transactional messages such as email verification, password reset, email change, account deletion, subscription, and security notices.
• Where the law requires consent, we will ask for it before the relevant processing, and you may withdraw it at any time without affecting earlier lawful processing.

We do not use solely automated decision-making that produces legal or similarly significant effects. Automated checks may determine session validity, premium access, or whether a game is enabled.

GrillMe uses an essential, HTTP-only session cookie named auth.customer to keep signed-in users authenticated. Temporary security cookies may also be used during authentication, including Google sign-in. These technologies are necessary to provide and protect the requested account features.

Your browser’s local storage keeps a randomly generated visitor identifier, the game codes you mark as favorites, and up to six recently played game codes. Favorites and recent-game information stays on that browser and is not sent to GrillMe’s server as part of those features. The visitor identifier is included in each signed game session, including after sign-in, so the game service can preserve or import progress. You can replace it by clearing site data in your browser, although doing so may make earlier anonymous game progress unavailable. Blocking essential cookies may prevent account features from working.

As of the effective date above, GrillMe does not use analytics or advertising cookies and does not use browser storage for cross-site behavioral advertising.

• Stripe: to create and manage customers, checkout sessions, payments, subscriptions, refunds, disputes, and billing support. Stripe’s handling is described in its Privacy Policy.
• Google: if you choose Google sign-in, to authenticate you and receive the account details covered by the permissions shown to you. Google describes its practices in the Google Privacy Policy.
• Game services: when you launch a game, we send the configured game service a signed payload containing the provider and game codes, a timestamp, and your browser visitor identifier. For signed-out visitors, the user field is empty. When signed in, the payload also contains your customer ID, username, language, premium status, and ad-free status. This lets the service validate the session, provide the selected game, suppress advertising when your plan includes that benefit, and associate anonymous progress with your account.
• Service providers: vendors that support hosting, databases, email delivery, logging, security, customer support, and other infrastructure, subject to appropriate contractual and confidentiality obligations.
• Legal and organizational disclosures: where reasonably necessary to comply with law, protect users or the Service, establish or defend legal claims, or complete a merger, financing, acquisition, reorganization, or sale of assets subject to appropriate safeguards.

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising.

GrillMe and its providers may process information in countries other than the one where you live. Where applicable law requires it, we use an adequacy decision, standard contractual clauses, or another approved transfer mechanism and apply supplementary safeguards appropriate to the transfer. Contact us to ask for more information about the safeguards relevant to your information.

We keep personal information only for as long as needed for the purposes described in this policy. The period depends on the type of record, account or subscription status, security needs, dispute and chargeback windows, and tax, accounting, and other legal requirements.

• Account data is generally kept while your account remains active.
• Sessions and verification records expire according to their configured validity periods and may remain briefly until routine cleanup.
• Browser-stored favorites and recent games remain until you remove them or clear the browser’s site data.
• Subscription, security, fraud-prevention, and audit records may be kept after account closure when reasonably necessary for legal obligations or legitimate business needs.

You may request verified deletion from the Security page. Deletion removes the authentication identity and anonymizes the application profile. A stable internal customer ID, a one-way hash of the email address, and necessary billing or deletion audit records may remain for compliance, fraud prevention, and record integrity. Information in backups is removed as those backups are overwritten in the ordinary cycle, unless preservation is legally required.

Depending on where you live, you may have the right to request access to or a copy of your information; correct inaccurate information; delete information; restrict or object to processing; receive portable data; and withdraw consent. You may also object to processing based on legitimate interests and lodge a complaint with your local data protection authority. These rights may be subject to lawful exceptions.

You can update account details from the Account page and request deletion from the Security page. For other requests, email us from the address associated with your account. We may need to verify your identity and will respond within the period required by applicable law. Authorized agents may submit a request where local law permits, but we may require proof of authority and identity.

If the California Consumer Privacy Act applies to GrillMe and you, California residents may request to know, access, correct, or delete covered personal information and may not be discriminated against for exercising those rights. California law also provides rights to opt out of sale or sharing and to limit certain uses of sensitive personal information.

During the 12 months before this policy’s effective date, the Service may have collected identifiers and account details; internet or electronic activity; commercial and subscription information; and account-login credentials. We collect these categories from the sources, use them for the purposes, and disclose them to the recipients described in Sections 2, 3, and 5. We do not sell these categories or share them for cross-context behavioral advertising. We use account credentials only to provide and secure the Service and do not use sensitive personal information to infer characteristics about you. Because we do not sell or share personal information as those terms are defined by California law, GrillMe does not currently offer a “Do Not Sell or Share” link.

The Service is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from a child under 13 without the authorization required by law. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and delete it. Users must also meet any higher minimum age or parental-consent requirement that applies where they live.

We use administrative, technical, and organizational safeguards designed to protect personal information, including restricted server-side credentials, signed game-session payloads, HTTP-only session cookies, access controls, and verification for sensitive account actions. No system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your account or information has been compromised.

We may update this policy when the Service, our providers, or legal requirements change. We will post the revised version here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when required by law.

Questions or requests may be sent to privacy@grillme.today.