1. Overview & Platform Scope
This Privacy Policy applies to all services offered by IGL Playbook, including our web-based tactical canvas application, multiplayer room synchronization services, coach and roster management portal, and related APIs (collectively referred to as the “Service”).
By accessing or using IGL Playbook, you acknowledge that you have read, understood, and consented to the data collection and processing practices described herein. If you are registering an account on behalf of an esports organization, team, or gaming academy, you confirm that you have legal authority to bind that entity to this policy.
2. Information We Collect
We collect information necessary to operate, authenticate, and secure your tactical sessions:
When creating an account via email or Google OAuth, we collect your email address, chosen in-game alias or coach name, authentication user IDs, and team affiliation tags.
Vector paths, pen strokes, circle zone markers, player icon coordinates, rotation vectors, map metadata, layer visibility state, and undo/redo histories created on the tactical canvas.
Client screen resolution, WebGL renderer capabilities, browser platform hash, IP address, and hardware identifiers generated strictly to enforce concurrent seat limits and prevent credential sharing across unaffiliated devices.
Subscription plan tier, Stripe customer ID, renewal dates, and invoice statuses. We never store or process raw credit card numbers or banking secrets on our servers; all payment transactions are handled by Stripe, a certified PCI-DSS Level 1 service provider.
3. Ephemeral Voice & WebRTC Comms
IGL Playbook provides integrated real-time audio rooms to allow in-game leaders, coaches, and players to communicate during tactical reviews and live map briefings.
Voice packets are transmitted via encrypted peer-to-peer WebRTC connections with ephemeral server signaling. We do not record, transcribe, archive, or analyze live team audio. Once you leave the room or mute your session, audio packets cease to exist in memory.
4. Tactical Secrecy & Data Ownership
In competitive esports, strategic intelligence (rotations, vehicle spawn priorities, zone splits, and utility protocols) represents valuable intellectual capital.
- You own your tactical data: You and your organization maintain 100% intellectual property ownership of all custom playbook boards, strategies, annotations, and game plans created inside IGL Playbook.
- No Strat Leakage: We never share, expose, benchmark, or sell tactical diagrams to third parties, game publishers, or rival teams.
- Isolated Access Control: Only authenticated members granted device seat access by your team manager or coach may view or interact with your live room boards.
5. Hardware Fingerprint Lock & Device Seats
To maintain fair pricing tiers and prevent unauthorized credential distribution, IGL Playbook employs a proprietary Hardware Fingerprint Lock mechanism:
When a team member logs in from a device, our client generates an anonymous hardware token based on non-invasive system attributes (such as canvas GPU hash, screen parameters, and CPU thread signatures). This token is cryptographically salted and compared against your account's active device roster.
⚠️ Device fingerprints cannot be reverse-engineered to reveal personal identities, files, or browsing history. They are used exclusively for seat allocation limits (e.g., 14 active devices on Team plans, 2-5 teams on Coach plans).
6. How We Use & Process Data
We process collected data exclusively for the following lawful business purposes:
- Delivering low-latency canvas drawing synchronization and room presence across registered roster devices.
- Validating subscription tiers, billing transactions, and team seat limits.
- Protecting platform stability against malicious bot traffic, scraping, and unauthorized session hijacking.
- Sending critical account notices, such as subscription renewal alerts, security warnings, or feature maintenance schedules.
7. Data Storage, Encryption & Retention
We implement tournament-grade defensive security measures to protect your organization's data:
8. Third-Party Subprocessors
We work with trusted third-party service providers to host infrastructure and process payments:
| Provider | Purpose | Jurisdiction |
|---|---|---|
| Stripe | Payment processing, subscription billing & invoicing | USA / Global |
| Supabase / AWS | Database, persistent storage & tactical canvas cloud sync | USA / EU |
| Google Identity | Federated OAuth 2.0 authentication | USA / Global |
| LiveKit / Cloudflare | Low-latency WebSockets & WebRTC voice media distribution | Global Edge |
9. Your Rights (GDPR & CCPA/CPRA)
Depending on your location, you have statutory rights concerning your personal data:
- Right of Access & Portability: Request a copy of the account records and tactical files associated with your identity.
- Right to Rectification: Correct any inaccurate or incomplete profile information.
- Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your account, saved tactical canvases, and hardware device bindings.
- Right to Restrict Processing: Object to automated fraud detection scoring or processing of analytical metrics.
To exercise any of these rights, contact us at privacy@iglplaybook.com. Verification of account ownership is required prior to processing requests.
10. Independent Publisher Disclaimer
11. Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our security infrastructure, our team is available to assist: