Privacy Policy

Home Privacy Policy

CRYTIVO PRIVACY POLICY

Last Updated: October 20, 2026

Crytivo Inc. (“Crytivo,” “we,” “us,” or “our”) is a United States-based video game developer, publisher, and operator of the Crytivo Store, an online storefront offering games and related digital content from Crytivo and independent third-party developers and publishers. This Privacy Policy describes the collection, use, storage, disclosure, and other processing of personal information in connection with Crytivo-operated websites, the Crytivo Store, accounts, transactions, communications, and applicable game-related services.

1. Who We Are and What This Policy Covers

Crytivo operates crytivo.com, the Crytivo Store, and certain related account, purchasing, customer support, and game services. Crytivo is responsible for the personal information it processes in connection with these services to the extent required by applicable law. Where Crytivo determines the purposes and means of such processing, it acts as the data controller under applicable data protection laws.

This Privacy Policy covers personal information processed by Crytivo in connection with its own websites, storefront, customer accounts, purchases, communications, and services. This includes purchase and transaction information processed by Crytivo when customers purchase games from independent third-party developers or publishers through the Crytivo Store.

Independent Third-Party Games

The Crytivo Store offers games developed or published by independent third parties that are not owned or controlled by Crytivo. These developers and publishers may independently collect and process personal information through their games, including through gameplay features, online services, analytics, advertising, multiplayer systems, anti-cheat technologies, or other integrations.

The inclusion, sale, or distribution of a third-party game through the Crytivo Store does not, by itself, make Crytivo the controller of personal information collected or processed independently by that game's developer, publisher, or service providers.

Crytivo does not automatically receive, access, or control personal information collected directly by independent third-party games. This Privacy Policy does not govern those independent processing activities. Such independent processing is subject to the third parties’ own privacy notices and legal responsibilities.

Where Crytivo separately participates in determining the purposes and means of a particular processing activity, or processes personal information in connection with a game or service, its responsibilities are determined by its actual role and applicable law.

Third-party storefronts, payment providers, platforms, and external integrations, including Steam, PlayStation, Xbox, Nintendo, Discord, and Xsolla, may also process personal information under their own applicable privacy notices and legal responsibilities.

2. Personal Information We Collect

2.1. Account and profile information

When you create or use a Crytivo account, we may store your account identifier, username or display name, email address, first and last name if supplied, registration and login information, account-verification or active/inactive status, language and display preferences, newsletter setting, and related account preferences. The Store stores one-way salted password hashes for authentication rather than readable account passwords.

2.2. Purchases, orders, rewards, and transaction records

We may store your order and purchase history, products or game editions purchased, amounts and currency, transaction dates, order statuses, discount and promotion information, redemption or gift records, game keys or digital entitlements, and Crytivo Coins or other Store rewards and balances where applicable.

Our current Store payment integration uses Xsolla. Xsolla handles payment details as part of checkout. Crytivo does not intentionally store complete payment-card numbers or card security codes in its Store account records. We receive and retain information needed to match payments to orders, fulfill purchases, address payment questions, prevent fraud, administer entitlements, and meet accounting or legal requirements. Depending on the transaction, this can include transaction identifiers, amounts, currencies, payment statuses, payment method information, billing country or postal code, and associated customer or order identifiers.

Historical Store records may contain transaction information originally received from payment providers previously used by Crytivo, including Stripe and PayPal. Some older records may include payer names or email addresses, provider reference numbers, payment-card brand, masked card details such as the last four digits or expiry information, and provider-generated card or transaction identifiers. Their presence in historical records does not mean those providers are currently offered as Store payment options.

2.3. Technical and security information

When you access our websites or accounts, we may collect and retain IP addresses, login and security records, browser or device-related information, basic request logs, and information about errors or suspicious activity to maintain site functionality, troubleshoot issues, prevent unauthorized access, and protect our services. The information actually collected depends on the systems operating at the time. Cookies and similar technologies are described in Section 7.

2.4. Communications, optional integrations, and community information

If you contact us, request help, make a data request, join a promotion, or communicate through a supported community feature, we may keep your contact details and the contents and history of the relevant correspondence or submission. If a forum, message, comment, or other community feature is available, information you choose to post publicly may be visible to other users.

Our newsletter is optional. We may keep your subscription choice, contact information, and records needed to honor opt-outs. If you choose to connect a Discord account or another supported third-party account, we may receive the limited account identifiers and connection information needed for that feature, as authorized by you and the platform.

2.5. Games, platform accounts, and EULA acceptance records

For certain games or services, where implemented, we may receive limited platform or Crytivo account identifiers and information needed to verify an entitlement, provide supported online functions, resolve a support request, maintain account security, or comply with a game-specific notice. Collection of gameplay analytics, anti-cheat signals, or similar technical information depends on the features actually deployed for the particular Game and will be addressed through appropriate game-specific disclosures where required.

Where a Game or distribution platform uses an agreement-acceptance system that shares records with Crytivo, we may record the game or service, platform, relevant account identifier, EULA version and language, acceptance or rejection status, acceptance method, date and time, and a document hash or other record of the version presented. We use these records to administer licenses, establish which terms applied, prevent fraud, and handle legal or contractual disputes. Platforms may keep records that they do not provide to Crytivo.

3. How We Obtain Personal Information

We receive information (a) directly from you when you register, place an order, choose settings, connect an account, send a message, or make a request; (b) automatically through our websites and account or security systems; and (c) from payment providers, storefronts, account-connection services, and other providers where they return information needed to provide a feature or complete a transaction. We do not assume that third-party platforms share all the information they hold about you.

4. Why We Use Information and Our Legal Bases

We use personal information for the following purposes, with the relevant legal bases where the EU or UK GDPR or a similar law applies:

To create and maintain accounts, authenticate sign-ins, deliver purchases, manage entitlements, fulfill requested services, and answer transaction or support requests — generally to perform our contract with you or take requested steps before entering one.
To prevent fraud, keep accounts and services secure, investigate unauthorized activity, maintain appropriate operational records, and establish or defend legal rights — generally our legitimate interests in operating and protecting Crytivo and its users, where those interests are not overridden by your rights.
To keep records and respond to legally required accounting, taxation, regulatory, and law-enforcement requests — compliance with legal obligations where applicable.
To send optional newsletters or use nonessential tracking technologies — consent where required, or another lawful basis when the particular law permits it.
To identify which game EULA or similar agreement was presented or validly accepted and to document contractual rights — contract administration and, where appropriate, our legitimate interests in keeping reliable evidence.

Information marked as necessary for an account or transaction may be required to provide that service. Other information, such as newsletter subscriptions and optional account connections, is voluntary. Where a purpose requires consent or an additional notice, we will seek it when required.

5. Payment Processing and Third-Party Storefronts

Xsolla provides the current payment checkout used by the Crytivo Store. Depending on the purchase and checkout arrangement, Xsolla may process payment and customer information under its own privacy notice and payment terms. See the Xsolla Privacy Policy. Crytivo generally receives order confirmations and transaction information rather than the complete card details entered at checkout.

If you buy a Crytivo game through Steam, PlayStation Store, Microsoft Store/Xbox, Nintendo eShop, or another third-party retailer, the retailer ordinarily handles its own checkout and payment data. Crytivo may receive limited purchase, account, key, entitlement, or support information only where the platform or user provides it. The relevant retailer’s own privacy notice and transaction terms govern its independent activities.

Records relating to older Store purchases may continue to identify payment providers used in the past, even though the present Store uses Xsolla.

6. Newsletters, Communications, and Connected Accounts

You can choose whether to receive promotional newsletters through your Crytivo account settings or applicable subscription forms. Newsletter sign-up is optional, and you can unsubscribe using the link in an email or applicable settings. We may use an email-delivery or newsletter provider, including Mailchimp where in use, to manage delivery and subscription preferences. Essential service communications about purchases, security, or your account are separate from promotional messages.

Connecting Discord or another supported external account is optional. When you initiate a connection, the provider may share an identifier or account information needed to enable the feature. Removing a connection may not remove records that must be kept for another lawful purpose. The third party’s own privacy notice applies to its services.

7. Cookies and Similar Technologies

7.1. Cookies Used by Crytivo

Crytivo-operated websites and the Crytivo Store use cookies and similar technologies for website operation, authentication, session management, preferences, security, and shopping functionality. Certain technologies are necessary to provide requested website and Store features. Blocking them may affect account access, checkout, or other functionality.

7.2. Google Analytics

Crytivo uses Google Analytics to measure website traffic, usage patterns, and performance. Depending on the configuration, Google Analytics may process page views, referral information, browser or device details, approximate location, online identifiers, and interactions with website features. Google may process information collected through its analytics technologies under its applicable terms and privacy practices.

Further information is available in the Google Privacy Policy and through the Google Analytics Opt-out Browser Add-on.

7.3. Cookie Controls and Third Parties

Browser settings may allow cookies to be restricted or deleted. The use of nonessential analytics or similar technologies is subject to applicable consent or objection requirements. Browser-level controls and third-party opt-out tools may not address every form of tracking.

Games, platforms, and websites operated independently by third parties may use their own cookies or similar technologies. Crytivo does not automatically determine or control those separate activities merely because an independent game or service is offered through, or linked from, the Crytivo Store.

8. When We Share Information

We share personal information only as needed for the purposes described in this Policy and when permitted by applicable law. Depending on the relevant service, recipients may include:

Xsolla and other payment-related providers involved in a particular transaction, dispute, or historical record;
providers that host, operate, maintain, protect, or support Crytivo websites, accounts, communications, and Store services;
email and newsletter service providers where you choose to receive messages;
third-party account or platform providers when you choose to connect an account or a platform feature requires the exchange;
independent game developers, publishers, or licensors, but only when Crytivo actually provides limited information needed to fulfill an order or entitlement, provide agreed game support, or administer a product or service for which the recipient is responsible;
advisers, auditors, insurers, courts, regulators, or authorities when necessary for legal compliance, a legitimate dispute, or the protection of rights; and
a party involved in a lawful reorganization, merger, or sale of relevant assets, subject to applicable confidentiality and privacy obligations.

Listing a third-party game on the Crytivo Store does not, by itself, mean that we share identifiable purchaser information with that game’s developer or publisher. Where information is shared, the purpose and scope depend on the relevant service or transaction. We do not grant service providers unrestricted permission to use personal information for unrelated purposes. Independent third parties, including platform operators, payment providers, and game developers, may have their own lawful processing responsibilities and privacy notices.

9. International Processing and Transfers

Crytivo Inc. is based in the United States. Personal information processed in connection with Crytivo services may be stored or processed in the United States and in other countries where Crytivo or its service providers operate. Data protection laws in those countries may differ from the laws of the user's country of residence.

International transfers are subject to applicable legal requirements. Where a particular transfer requires an approved transfer mechanism or additional safeguards, those requirements govern the transfer. Information required by law regarding safeguards applicable to a specific transfer may be requested through the contact in Section 16.

10. How Long We Keep Information

We keep personal information for the time reasonably needed to provide the relevant service and for additional periods justified by legal obligations, fraud prevention, fulfillment, chargebacks, disputes, or legal claims. Retention depends on the type of record and its purpose:

Account details: while needed to maintain your account and, after closure, for any limited period supported by security, dispute, or legal requirements.
Purchases, entitlements, and payment records: for fulfillment and access to digital goods and for applicable tax, accounting, financial, transaction-dispute, and recordkeeping requirements.
Security and technical records: for the period needed to investigate problems, maintain account or service security, or respond to incidents.
Newsletter records: while you remain subscribed, and limited records necessary to honor an unsubscribe request.
Agreement-acceptance records, where created: while relevant to the applicable license or agreement, plus an appropriate period for claims or legal obligations.

When information is no longer needed, we delete or de-identify it as appropriate and feasible, subject to applicable law and legitimate recordkeeping requirements. Account closure does not necessarily mean every purchase, payment, or legal record is deleted immediately.

11. Privacy Rights and Requests

Where applicable privacy law provides individual rights concerning personal information, those rights may include access, correction, deletion, portability, restriction of processing, and withdrawal of consent. Their availability and scope depend on the applicable law, the processing involved, and any statutory exceptions. Crytivo may verify the identity and authority of a requester and may retain information where necessary for lawful purposes, including transaction records, security, fraud prevention, and legal obligations.

Where applicable, individuals have the right to object to processing based on legitimate interests and to processing for direct marketing. Withdrawal of consent does not affect processing that was lawful before withdrawal. Requests relating to Crytivo's processing may be submitted using the contact information in Section 16.

Where EU or UK data protection law applies, the right to lodge a complaint with a competent data protection supervisory authority remains available. Any additional mandatory rights or protections under applicable law remain unaffected.

12. Children and Minors

Crytivo-operated account registration and online features are generally intended for users aged 13 and older. Children under 13 must not register a Crytivo Account or independently use Crytivo-operated Online Services unless an identified feature is offered with the required parental authorization and appropriate safeguards. Individual Games developed, published, or sold by Crytivo may have their own age ratings and platform-managed parental controls; an age restriction in our account terms does not, by itself, determine whether a particular Game or service is directed to children under privacy law. Where we learn that personal information was collected from a child in circumstances requiring additional protections, parental permission, or deletion, we will take steps required by applicable law. Individual game ratings, platform parental controls, and minimum ages for specific features may vary.

13. Security

We use security measures intended to protect personal information against unauthorized access, loss, alteration, or disclosure. For website accounts, passwords are stored as salted one-way hashes rather than in readable form. Access to account and transaction records is limited according to the legitimate needs of operating and supporting the service. No method of electronic storage or transmission can be guaranteed completely secure.

14. Third-Party Websites and Services

Our websites, games, emails, and community pages may link to services operated by third parties. We do not control the separate collection or use of information by independent services. Those third parties maintain separate privacy notices and are responsible for their independent processing as required by law. This includes payment checkouts, third-party storefronts, account-connection providers, and other services you choose to use.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, providers, or legal obligations. We will post the updated version with a revised Last Updated date. When required, we will provide additional notice or choices concerning material changes.