Privacy policy

We keep as little personal data as possible: no tracking, no ads, no cookies beyond the login, and no stored IP addresses. This page explains what we do process, why, and your rights.

Who is responsible

Michael Bockel, Michael Bockel, Gabesstraße 23, 4030 Linz, Austria. Email: hello@prelaunchlab.dev.

Without an account

  • Preview and clip builder: files you open from your computer (capsules, videos, screenshots) are processed only in your browser. They are never uploaded.
  • Steam data: when you preview a Steam game, our server fetches its public store data from Steam. Your browser then loads the game's images and videos directly from Steam's servers (Valve Corporation, USA), which see your IP address like on any Steam page.
  • Voting through a public link: we store your vote (which variant you chose, how long you looked at each card, an optional reason). To prevent double votes and abuse we keep a one-way hash of your IP address and browser identifier, with a key that changes every day, so it can't be turned back into your IP address or linked across days. We don't store the IP address itself.

With an account

  • Email address: to log you in (with emailed login links) and to send you the emails below.
  • Login: one essential cookie keeps you logged in for up to 30 days. We store only a hash of it. Login links work once and expire after 15 minutes.
  • Your projects: names, Steam app IDs, competitor lists, and the capsules, clips and screenshots you upload. Uploaded media is shown to voters of your running tests.
  • Tests and votes: your tests, their results, and the votes you cast on other developers' tests.
  • Credits and plan: your credit history, and your plan (Free, Pro or Fest Pass) with its dates.

Emails we send: login links, "test finished" notices, and a warning before unused media is deleted. No newsletters or marketing.

Payments

Paddle (Paddle.com Market Limited, United Kingdom) sells Pro and the Fest Pass as our reseller and handles payment, taxes, invoices and refunds as an independent controller; see Paddle's privacy notice. We never see your card or bank details. Paddle tells us your Paddle customer ID and the state of your purchase, so we can switch Pro on and off.

Services we use

  • Cloudflare (Cloudflare, Inc., USA): hosting, database and file storage. Like any web host it processes IP addresses to deliver pages and fend off attacks. We also use Cloudflare Web Analytics, which counts page views without cookies and without tracking you.
  • Amazon Web Services (Amazon SES; Amazon Web Services EMEA SARL, Luxembourg; EU region): sends our emails. Resend (Resend, Inc., USA) is our fallback for sending.
  • Paddle: payments (see above).

Transfers to the USA rely on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses. The United Kingdom has an EU adequacy decision.

Legal bases

  • Providing the service you signed up for, including emails about it: Art. 6 (1) (b) GDPR.
  • Security, preventing double votes and abuse, and aggregate statistics: our legitimate interest in a working, fair service, Art. 6 (1) (f) GDPR.
  • Keeping records we're legally required to keep: Art. 6 (1) (c) GDPR.

How long we keep data

  • Account data: until you delete your account (Account page). Deleting removes your projects, media, tests and sessions at once.
  • Media of a finished test: 30 days after it ends (Pro: 12 months); the results stay.
  • Media never used in a test, on the Free plan: deleted after 60 days without activity in the project, with an email warning 7 days before.
  • Sessions: until they expire or you log out. Used or expired login links: deleted after a day.
  • Votes: as long as the test they belong to exists.
  • Records of purchases: as long as tax law requires (in Austria generally 7 years).

Your rights

You can ask for access to, correction or deletion of your data, restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to hello@prelaunchlab.dev. You can also complain to the Austrian data protection authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

Last updated 2026-10-14.