VespiTech Ltd Customer Privacy Policy

Game Oracle is a product owned by VespiTech Ltd. This privacy notice tells you what to expect us to do with your personal information.

Contact Details

Email

support@game-oracle.com

What information we collect, use, and why

Depending on the type of account, we collect or use the following information to provide services and goods, including delivery:

Both Free and Paid Accounts

  • Names and contact details
  • Account information
  • Information relating to compliments or complaints

Paid Accounts Only

  • Addresses
  • Purchase or account history
  • Payment details (including card or bank information for transfers and direct debits)

Depending on the type of account, we collect or use the following information for the operation of customer accounts and guarantees:

Both Free and Paid Accounts

  • Names and contact details
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences

Paid Accounts Only

  • Addresses
  • Payment details (including card or bank information for transfers and direct debits)
  • Purchase history

For both free and paid accounts, we collect or use the following information for service updates or marketing purposes:

  • Names and contact details
  • Marketing preferences
  • Purchase or viewing history
  • Website and app user journey information
  • Records of consent, where appropriate

Your searches and Concept Compass projects

Your searches and Concept Compass projects are private to your account and never shared with other users. Concept descriptions are processed by our AI provider solely to generate your reports.

We store your Concept Compass projects (including any reference images you upload) and, if you choose to save it, your Data Explorer search history with your account so that you can return to them.

Lawful bases

Our lawful bases for collecting or using personal information to provide services and goods are:

  • Consent
  • Contract

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

  • Consent
  • Contract

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Consent

Where we get personal information from

  • People directly
  • Google OAuth
  • Github OAuth

How long we keep information

Active Accounts:

When an account holder logs into their account more than once every 12 months or has an active paid subscription, we consider their account to be active. We retain personal data as long as an individual holds an active account with us. This includes account-related information such as contact details, preferences, and transaction history.

Data is securely stored and regularly updated during the account’s active status.

Account Deletion Requests:

When an account deletion request is received, we promptly delete all associated personal data.

Individuals can delete their account via their account settings.

Individuals can contact Stripe to request the deletion of their information for all transactions and the associated Link account used to manage those transactions. As a result Stripe will cancel any active subscriptions to Game Oracle.

Inactive Accounts:

After 12 months of no log-in activity and no subscription purchases, an account is deemed inactive and we will review the data.

Account holders will be notified 1 month before their account is due to become inactive so that they may log in and/or purchase a subscription to keep their account active.

Inactive accounts may be subject to data anonymization or deletion, depending on legal requirements and business needs.

Legal Basis

Our data retention practices align with applicable laws and regulations, including data protection and privacy legislation.

Accountability

Our data protection officer oversees compliance with this retention schedule.

Regular audits ensure adherence to our policies.

Questions or Requests

For any questions or account-related requests, individuals can contact us using the e-mail at the top of this privacy policy.

Google User Data

Game Oracle offers "Sign in with Google" as an optional authentication method, implemented via Firebase Authentication. When you choose this option, we request access to the following Google user data via standard OAuth scopes only:

  • Your Google account email address
  • Your basic Google profile information (name and profile picture)

We do not request or access any other Google data, including your Gmail, Google Drive, Google Calendar, or Google Contacts. We do not request any sensitive or restricted OAuth scopes.

This Google user data is used solely to:

  • Create and authenticate your Game Oracle account
  • Pre-fill your name within the app
  • Provide account recovery and login support

Google user data obtained through this process is stored securely by our authentication processor, Firebase (a Google Cloud service), and is never sold, rented, or shared with any third party, and is never used for advertising or for training generative AI/ML models. Access is limited to the Game Oracle systems and personnel that require it to operate the authentication feature described above.

If you delete your Game Oracle account, or disconnect your Google sign-in, this Google user data is permanently deleted from our systems within 30 days, except where retention is required by law.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share information with

Data processors

Stripe and Link

These data processors do the following activities for us: They process and manage subscription payments and hold customer payment details. Stripe is Game Oracle’s Merchant of Record.

Google Firebase

This data processor does the following activities for us: They process and store log-in and account information.

Google (Gemini API)

This data processor does the following activities for us: They process the concept descriptions you enter in Concept Compass, solely to generate your reports.

Amazon Simple Email Service (Amazon SES)

We manage e-mail addresses, marketing permissions and service e-mails internally, using our own e-mail system. This data processor does the following activities for us: They deliver the service and marketing e-mails that our e-mail system sends.

Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.

Your data protection rights

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information.
  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.
  • Your right to withdraw consent - When we use consent as our lawful basis you have the right to withdraw your consent.

You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO's address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

Cookie Policy

We use cookies to improve your experience on our site, analyze site usage, and assist in our marketing efforts. By clicking "Accept all" you agree to the storing of cookies on your device. You can manage your cookie preferences at any time by clicking "Cookie Preferences" in the footer.

You may review and change expressed choices at any time by resurfacing the Cookie Preference panel via the link provided in the footer of the Site.

Types of Cookies Used

  • Strictly Necessary: These cookies are essential for the proper functioning of the website and cannot be disabled.
  • Performance and Analytics:These cookies collect information about how you use our website. All of the data is anonymized and cannot be used to identify you.
    • _ga: The main cookie used by Google Analytics, enables the service to distinguish one visitor from another and lasts for 2 years.
    • _gid: Commonly referred to as a session cookie because of its short lifespan (typically 24 hours) and its focus on tracking user behaviour within a single day or session. While it does help distinguish users, its primary function is tied to session-level tracking rather than long-term user identification.
    • _ph: PostHog cookie, used to track issues with our app, user behavior, and to improve the user experience.
  • Targeting and Advertising: These cookies may be set through our site by our advertising partners. They may be used by those companies to help us understand the effectiveness of our advertising, serve you advertising about our services when you browse the internet, and they may build a profile of your interests and show you relevant advertisements on other sites. If you do not allow these cookies, you will experience less targeted advertising.

Last Updated

28th Sep 2026