Policy Statement
GameAnalytics is committed to the principle of data minimization. We retain Personal Information collected from children only for as long as is reasonably necessary to fulfill the specific purpose(s) for which it was collected. Note that personal information collected online from a child will not be retained indefinitely if the purpose for collection has ended.
1. Data Retention Schedule
The following schedule defines the retention periods for specific categories of Children's Data held by GameAnalytics.
2. Definition of "Inactive Account"
An account is considered "Inactive" if there is no active subscription, and there has been no login or meaningful interaction with the account for a continuous period of 12 months.
Notification Process:
30 days prior to the expiration of the inactivity period, GameAnalytics will notify the user (through an email to the verified Parent Email Address on file where possible). This notification will alert the user that the account and all associated Children's Data will be permanently deleted unless an opt-in action is performed.
3. Deletion Procedures
When a retention period expires, or a valid deletion request is received, GameAnalytics employs the following measures to ensure secure deletion:
3.1 Active Systems
Data in active databases and file systems is permanently deleted using secure methods (e.g., cryptographic erasure or database overwriting) that render the data unrecoverable. In specific cases, we may adopt an anonymization approach where there is a business need to retain deidentified data, stripping all direct and indirect identifiers so the data can no longer be linked to a specific child.
3.2 Backup Systems
We acknowledge that deleted data may remain recoverable for a short period due to the nature of our disaster recovery systems.
- Data in backups is put beyond use (not accessible for ordinary business operations).
- Backups are encrypted and subject to strict access controls.
- GameAnalytics employs a distributed storage architecture for event data, where data resides in primary storage systems subject to the retention periods set out in Section 1. This architecture eliminates the need for separate full backup copies of event data, reducing the risk of retained data persisting beyond its defined retention period. For player-level metadata held in our primary database, point-in-time recovery is enabled with a rolling window of 5 days. Upon deletion of a record from the live database (whether triggered by retention expiry or a verified deletion request), the deleted data will be fully purged from the point-in-time recovery archive within 5 days. No backup data is used for ordinary business operations or accessible outside of disaster recovery procedures.
3.3 Third-Party Signaling
Upon deletion of Children's Data from our systems, GameAnalytics actively signals our third-party service providers (e.g., analytics providers, ad networks) via API or manual request to delete the associated data from their systems, in accordance with our Third-Party Data Security Agreements.
4. Parental Deletion Requests
At any time, a verified parent may request the deletion of their child's personal information by contacting privacy@gameanalytics.com.
- Response Time: GameAnalytics will delete the information within 30 days of receiving a verified request.
- Revocation of Consent: If a parent revokes consent, GameAnalytics will immediately stop collecting new information and delete existing information associated with that child's account.