Privacy Policy

This Privacy Policy explains how GamerHood LLC, a California single-member limited liability company and the data controller for the Platform (Federal EIN: 42-2832129; California Entity No. B20260245578) ("GamerHood.GG," "we," "us," or "our"), collects, uses, discloses, and protects information when you use the GamerHood.GG platform ("the Platform"). This policy applies to all users, including parents, guardians, and children who use the Platform through parent-managed accounts. We are committed to protecting the privacy of all users, with special attention to children under 13 as required by the Children's Online Privacy Protection Act (COPPA).

When a parent or guardian creates an account, we collect: **Account Information:** Name, email address, and password or OAuth account information. We do not receive Google account passwords. **Payment Information:** Bank account or card details provided through Stripe Connect for creator payouts, and payment details for purchases. Payment information is processed and stored by Stripe — we never see or store full card numbers. **Consent Verification:** The creator's age group, a limited audit record when that group is corrected, the parent account email, consent evidence, and Stripe Identity verification status. The correction record contains the previous and new age groups, account/profile role, authenticated account reference, time, and the adult accuracy-attestation version when applicable; it does not contain a birth date. If optional text notifications are enabled later, we may also store a parent mobile number and SMS consent. Stripe—not GamerHood—collects and retains the government-ID image, identity number, selfie, and verified birth date. GamerHood stores only the Stripe session reference, status, and whether the verified identity is an adult age 18 or older. **Communications:** Emails or messages you send to us for support. **Safety Reports and Copyright Requests:** If you submit a content report or DMCA request, we collect the reported content URL and your description. Depending on the form, we may also collect your name, email address, original-work URL, required legal declarations, and electronic signature so we can investigate, respond, and keep an appropriate case record. **No Mailing List:** We do not currently operate a promotional newsletter or mailing list. If we add one, we will update this policy and provide the required subscription and opt-out controls before collecting addresses for that purpose.

**We limit the information requested from children.** A child profile can include: - A **display name** (chosen by the parent or child; not required to be a real name) - An optional **avatar image** - For a parent-authorized child sign-in, the child’s email address or the Google account identifier and basic profile information made available by Google, such as email address, name, and profile image A child sign-in is unavailable until the managing parent completes the required verification and consent steps and selects the exact managed profile to authorize. The parent may then create an email-and-password sign-in or link the child’s Google account. The child credential cannot access adult consent, approval, seller, or payout controls. Except for the parent-authorized email or Google account information used for sign-in, we do **not** ask children to provide: - Real names, email addresses, or physical addresses - Phone numbers or dates of birth - Geolocation data - Photos of the child - Any other personally identifiable information All personal information associated with a child's activity (payment details, shipping addresses from orders, etc.) is collected from the parent or adult buyer — never from the child.

We use information collected to: - Operate and maintain the Platform - Process transactions and payouts - Verify parental consent - Moderate content for safety and copyright compliance - Investigate content reports and process copyright requests - Send transactional emails (order confirmations, payout notifications) - Respond to support requests - Improve the Platform We do **not** use information to: - Serve behavioral or interest-based advertising - Build marketing profiles of children - Sell or rent personal information to third parties - Track children across websites or apps

We share information only in the following circumstances: **Service Providers:** We share necessary data with service providers who help us operate the Platform, including: - Stripe (payment processing) - Printful (order fulfillment — buyer shipping address only) - Supabase (database hosting) - Google (optional account authentication; Google supplies only the account information authorized on its consent screen) - Cloud providers (image storage and processing) - Content moderation services (uploaded images only) - Resend (transactional email delivery) - Twilio (parent-approval SMS, where configured) - Vercel (privacy-limited, aggregate analytics on approved public routes) All service providers are bound by contractual obligations to protect data and use it only for the services they provide to us. **Legal Requirements:** We may disclose information when required by law, subpoena, or legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others. **With Consent:** We may share information with your explicit consent. We do **not** sell personal information. We do not share personal information with advertisers.

**Essential Cookies:** We use strictly necessary cookies for authentication and session management. These cookies are required for the Platform to function. **Analytics:** We use privacy-respecting Vercel Web Analytics to understand aggregate usage of approved public pages. Account, authentication, consent, design-creation, dashboard, cart, checkout, API, query-string, and fragment data are excluded, and public identifiers are reduced to generic route shapes before collection. **Trending popularity:** When a product detail page opens, GamerHood records the product ID with a hash of a random, first-party 30-day browser-session cookie. This is used only to rank the Trending Now collection. We do not attach an account, child profile, IP address, referrer, query, prompt, or artwork source to this record. Repeat opens of the same product in the same session count once, known automated crawlers are ignored, raw records are restricted to service systems, and records expire after 90 days. **No Third-Party Trackers:** We do not use third-party tracking cookies, advertising pixels, or behavioral tracking on any pages accessible to children.

We implement industry-standard security measures to protect your information, including: - Encryption in transit (TLS/HTTPS) and at rest - Row-Level Security (RLS) in our database ensuring users can only access their own data - Secure authentication with bcrypt password hashing - Regular security reviews of our codebase and infrastructure - Minimal data collection and retention No system is 100% secure. If we become aware of a security breach that affects your personal information, we will notify you in accordance with applicable law.

We retain personal information only as long as necessary to provide the Platform and fulfill the purposes described in this policy. - **Account data** is retained while the account is active and for 30 days after closure - **Order data** is retained for 3 years for legal and tax compliance - **Design images** are deleted within 30 days of design deletion - **Content moderation logs** are retained for 1 year - **Parental consent records** are retained for the life of the account plus 3 years - **Trending product-detail records** are retained for no more than 90 days You may request deletion of your data at any time (see Section 10).

GamerHood is designed for parent-controlled family accounts and takes children's privacy seriously. This section describes safeguards we use to support compliance obligations; it is not a legal certification or a substitute for advice about whether a particular consent method satisfies COPPA or another law. - **Privacy-minimal age classification:** We store under 13 or 13 or older, not the creator's birth date; an unknown age cannot publish - **Verified under-13 consent:** Stripe Identity checks a government-issued ID and matching selfie; GamerHood stores only the adult-verification result and consent evidence - **Per-publication parent control:** Each under-13 publish attempt stays private to its creator preview until the parent explicitly approves a single-use request delivered by email - **Minimal child-profile data:** Child profiles use a display name and optional avatar; children are not asked to enter contact or payment information directly - **No behavioral tracking of children:** No cookies, pixels, or tracking for advertising purposes on child-facing pages - **No social features between children:** No direct messaging, comments, or communication channels - **Parental access and control:** Parents can review, modify, deactivate, or request deletion of associated data - **Independent moderation:** Parent approval cannot bypass GamerHood safety review, and safety approval cannot bypass parent approval - **Additional legal requirements:** GamerHood may require an additional process or restrict access where applicable law or provider coverage requires it

**Parents/Guardians:** - Access all information we hold about you and your child's profile - Correct inaccurate information - Delete your account and all associated data - Revoke parental consent and deactivate your child's profile - Export your data in a portable format - Opt out of non-essential communications To exercise these rights, contact us at privacy@gamerhood.gg. We will respond within 30 days. **California Residents:** You may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale of personal information (we do not sell personal information).

The Platform is currently operated from and directed at users in the United States. If you access the Platform from outside the US, your information may be transferred to and processed in the United States. By using the Platform, you consent to this transfer. When we expand internationally, we will update this policy to address applicable local privacy laws (including GDPR for EU/UK users).

We may update this Privacy Policy from time to time. We will notify parents of material changes via email and require renewed parental consent if changes affect how we handle children's information. The "Last Updated" date at the top of this page indicates when this policy was last revised.

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: **GamerHood LLC** Email: privacy@gamerhood.gg Federal EIN: 42-2832129 California Entity No. B20260245578 For COPPA-related inquiries, you may also contact the Federal Trade Commission at ftc.gov/coppa.