Privacy, GDPR, EU data hosting and data deletion

🇪🇺Where data lives

Conversations, players and settings are stored in Cloudflare D1 and photos in Cloudflare R2, both under Cloudflare's EU jurisdiction. Photos are served through signed links that expire. Secrets (bot tokens, AI keys, store credentials) are encrypted at rest and never returned by the API.

📋What the SDK collects

Messages and photos the player chooses to send, the identity you provide, device details and diagnostic context. Never: advertising identifiers, location, contacts or hardware identifiers.

🗑️Deleting data

1. The player: a "Delete my support data" button calling Inngame.DeleteData() (Unity), deleteMyData() (iOS) or Inngame.deleteData() (web) erases them, their conversations and photos.
2. Your team: on the player's page, Export data (JSON, for access requests) or Delete player.
3. Automatically: delete closed conversations after 30 days to 2 years (Moderation tab).

Deleting an app or the organization deletes everything it holds.

📜GDPR roles

For your players' data, you are the controller and Inngame is your processor (article 28). Our terms include the data processing agreement, and the list of subprocessors is in the Privacy & data docs, with what to declare in the App Store and Google Play forms.