Privacy
Last updated: 2026-11-06
Listen to Players is run by one person, me. This page says what data it uses, why, for how long, and how to get it deleted. I never sell data.
Who I am
Neural LB
Ruđera Boškovića 18, 42000 Varaždin, Croatia
OIB: 80765903655
lovro@neurallb.com
I'm the controller of this data under the GDPR. Write to the email above about anything on this page.
What I keep, why, and for how long
| Data | Why | How long |
|---|---|---|
| When you ask for a report: your email (lower case, without any "+tag"), whether it's a free-mail address, the game link, a hashed IP address (one-way, with a secret key; the IP itself is never saved), the campaign tag from the link that brought you, and the date of the note you saw | To make your report (you asked for it, GDPR art. 6(1)(b)). To allow one free report per visitor, and to email you once about the report, with no newsletter (my legitimate interest, art. 6(1)(f)) | 12 months |
| A free preview you ask for, and the Steam reviews behind it | To show you the preview | Until it's shown: it's deleted as your page opens it. One you never open stops opening after 1 hour and is deleted within a day. What stays is a note that you used your free preview (the game and the date, kept with your email above) |
| A free preview I made for your game and emailed you the link to, and the reviews behind it | To show you what the report finds | 30 days |
| If you create an account: your name and email from the sign-up form, which version of the Terms you accepted and when, and the reports you make in your account | To give you the plan (our contract, art. 6(1)(b)) | While your account exists. Deleted within 30 days after you ask me to close it. The Steam reviews behind a report go 14 days after you make it; the report stays |
| If you subscribe: from Paddle, your Paddle customer and subscription IDs, which plan you're on (Studio or Publisher), whether the subscription is active, and its billing dates. Never your card or bank details | To switch the plan on and off as you pay or cancel (our contract) | While your account exists |
| Page events: a visit, opening a report, "Download PDF", clicking an email link, and when a report was requested and finished. Each with its time, the report, the campaign tag, the website you came from, and the hashed IP address | To see whether the site works and which of my emails bring people (legitimate interest) | 12 months |
| If I emailed you a report first: the address your studio published (usually on your Steam page), your studio, game and where I found the address, and notes on what we wrote | To offer a relevant service to a games studio (legitimate interest) | 12 months after my first email |
| Emails with me | To answer you | 12 months after the last one, or longer if we do business and the law requires it |
Don't want my email? Reply "no" and I won't write again. I keep only your address on a do-not-contact list, so it stays that way.
A free preview you ask for opens once: the first time its page shows it, it's deleted, so a refresh or leaving the page removes it. Nothing is emailed to you. A preview I emailed you opens for anyone with its link for 30 days; the link has a long random ID and is hidden from search engines. Reports in your account open only when you're signed in. If someone asks for the same game within 24 hours, they may get a copy of the report, never your email.
Steam reviews
Reports are built from public Steam reviews, read through Valve's public API. For each review I save its text, language, recommendation, date, playtime and Steam's flags (Steam Deck, refunded, developer replied, and so on), plus Steam's review ID. I never save Steam IDs, profile names or avatars. A report shows counts and a few one-sentence quotes in English, never a name or a link (my legitimate interest in summarising public feedback for game developers). Reviews are deleted when they're no longer needed: behind a free preview you ask for, as it's shown (or within a day if it's never opened); behind a preview I emailed you, after 30 days; behind a report in your account, 14 days after it's made, while the report itself stays. A replaced sample report is deleted within 30 days.
Want your review out of a report? Email me the link and I'll remove it within 5 working days.
Cookies
| Cookie | What it does | How long |
|---|---|---|
rp_used | Set when you ask for a report: marks your free preview as used, and links back to it until it's shown. A copy is kept in your browser's storage for the form | 12 months (the browser copy until you clear it) |
rp_consent | Remembers your answer to the cookie question | 180 days |
rp_sid | Only if you click "Allow": remembers which link brought you here while you browse | Until you close your browser |
Clerk's sign-in cookies (__session, __client_uat and similar) | Only if you sign in: keep you signed in to your account | While you're signed in |
| Paddle's checkout cookies | Only if you open the checkout: set by Paddle for the payment and its fraud checks, under Paddle's privacy notice | Set by Paddle |
All but rp_sid are needed for the site to work. Change your answer any time with "Cookie settings" at the bottom of the page. A bot check (Vercel BotID) runs when you send the form. There are no ads or third-party trackers.
Who helps me run it
| Company | What for | Where |
|---|---|---|
| Vercel | Hosting, the bot check, short-lived logs with IP addresses | Frankfurt; Vercel is a US company |
| Neon | Database | Frankfurt |
| OpenAI | Reads review text to tag, group, translate and summarise it. It never gets your email or IP address. API data isn't used for training and is kept up to 30 days for abuse checks | USA |
| Clerk | Sign-up and sign-in: your name, email, password (stored hashed by Clerk) and sign-in details such as IP address and browser | USA |
| My email provider | My email | — |
Each works only on my instructions, under a data processing agreement. Transfers to the US rely on the EU–US Data Privacy Framework or the EU's Standard Contractual Clauses.
Payments: Paddle
The plan is sold by Paddle.com Market Limited (United Kingdom), our online reseller and Merchant of Record. When you open the checkout, I pass Paddle your email and your account's ID so the payment reaches your account. Paddle then collects your billing details and payment method, takes the payment, sends the invoice, handles tax and refunds, and keeps those records as the law requires. For that data Paddle is responsible itself, under its own privacy notice at paddle.com/legal/privacy.
Your rights
You can ask me for a copy of your data, or to correct it, delete it, limit or stop its use, or export what you gave me. Email lovro@neurallb.com; I answer within one month, free of charge. You can also complain to AZOP, the Croatian data protection authority (Selska cesta 136, 10000 Zagreb, azop.hr), or to the authority where you live.