Privacy Policy

GameBuildMarket ("GameBuildMarket," "we," "us," or "the platform") is operated by Grant Corporation, a California corporation, 1012 East Ave J Ste 16, Lancaster, CA 93535.

This policy explains what personal information we collect when you use https://gamebuildmarket.com, why we collect it, how long we keep it, and the choices you have. Privacy and data-rights requests can be sent to [email protected].

Account

• Email address, display name, and a hashed password.
• A record that you confirmed you are 18 or older and accepted the Terms of Service and this Privacy Policy, with the date and the version you accepted.
• Whether you have confirmed your email address (we send a confirmation link at signup).
• Seller application details if you apply to sell (including the bio you submit, your acceptance of the Seller Agreement, and later a seller status such as pending, verified, rejected, or suspended).
• Session information needed to keep you signed in (a session cookie).
• If you are a seller, the Solana wallet address you save for payouts, and a record of wallet changes (including a pending change and when it takes effect).

We do not ask for a date of birth. You must still be 18 or older to have an account (see "Children and age").

Orders and disputes

• What you bought or sold, amounts, payment method (currently USDC or USDT on the Solana network), order status, license tier chosen, and messages in a dispute.
• File fingerprints (SHA-256) of delivered files, and a record of what was delivered and when.
• An order activity log: when files are delivered, viewed, or downloaded (or a download is interrupted), together with the IP address and browser (user-agent) string of the device that did it. This log cannot be edited by buyers or sellers. Only GameBuildMarket staff can see the IP address and browser string; buyers and sellers see the events and times only.

Files you upload

• Files sellers upload as deliverables, images, or previews, plus a SHA-256 fingerprint of each file.
• Optional YouTube video IDs that you attach to a listing (we store only the video ID, not a full URL).
• Malware-scan results for uploaded files (whether a file was clean, flagged, or could not be scanned). Scanning is done on our own servers.

Payments

GameBuildMarket currently accepts crypto payments only (USDC or USDT on Solana). We do not take or store card numbers. If you pay or get paid in crypto, we store:

• the wallet address you paid from;
• a seller's payout wallet address;
• the transaction signature (and related on-chain identifiers we need to match a payment to an order); and
• amounts, asset (USDC or USDT), network, and invoice status.

Blockchains are public. Wallet addresses and transaction signatures can be seen by anyone, permanently, and we cannot remove them from the Solana network. We never hold or ask for your wallet's private keys.

Card payments (Stripe) exist in the product as a switch that is currently off. We will update this policy before card payments are turned on. If they are turned on, card numbers would be handled by Stripe, not stored by us.

Analytics

If you opt in (see "Cookies and analytics"), Google Analytics 4 (GA4) collects usage data about how the site is used, such as pages viewed, approximate location derived by Google, device and browser information, and referral source. The GA4 script and its cookies load only after you opt in.

Communications

• Transactional emails we send you from Grant Corporation's own mail server (for example, an email-confirmation or password-reset link, an order update, or a payout-wallet change notice), and emails to staff about events such as a new seller application.
• Messages you send in an order dispute, and any report, DMCA notice, or counter-notice you submit. For DMCA notices submitted through our online form we also record the IP address and browser string of the submission.

Sanctions and safety screening

To follow the law and to operate the marketplace, we may screen account information (such as name or display name and email) and wallet addresses against sanctions and watch lists, including the U.S. Treasury OFAC Specially Designated Nationals and Blocked Persons list and similar lists. We may keep a record of the fact that a screen was run, the list used, the date, and the result.

Information we do not collect today

We do not currently collect government ID, tax forms (such as W-9 or W-8), date of birth, or payment-card numbers. If that changes, we will update this policy first.

We use personal information to:

• create and operate your account, listings, and orders;
• hold payments in escrow, deliver files, pay sellers, and issue refunds;
• prevent fraud, abuse, malware, and prohibited listings;
• review disputes and copyright or rights claims;
• screen for sanctions and other legal restrictions, and freeze or withhold a payout when the law requires it or when we reasonably suspect fraud;
• send transactional email (for example, an email confirmation, password reset, order update, or wallet-change notice);
• understand how the site is used, only if you opt in to analytics;
• respond to your requests to access, export, or delete data; and
• comply with law, including recordkeeping, tax, and law-enforcement requests.

We do not send marketing email, and we do not use your content to train public generative-AI models.

• Strictly necessary cookies. A session cookie keeps you signed in and protects some form submissions. These are required for the site to work and do not depend on analytics consent.
• Analytics cookies. Google Analytics 4 cookies and the GA4 script load only after you opt in through the cookie banner. They do not load by default. Your choice is saved in your browser's local storage.

How to opt in and how to withdraw. You can accept or reject analytics cookies when you first visit, and you can change your mind at any time with the Cookie settings link in the footer of every page, or open cookie settings now. Withdrawing consent stops further analytics collection from that browser and removes the Google Analytics cookies we can reach; it does not retroactively erase data Google already collected, though you may also use Google's own opt-out tools.

Global Privacy Control (GPC). We honor a valid Global Privacy Control signal as a request to opt out of "sale" or "sharing" of personal information (as those terms are used under California law) and as a rejection of analytics cookies. If a GPC signal is present, analytics cookies and the GA4 script will not load, even if you previously opted in from that browser.

We do not sell your personal information for money.

Under the California Consumer Privacy Act, as amended by the CPRA, "sharing" can include making personal information available to a third party for cross-context behavioral advertising. Our use of Google Analytics 4, if you opt in, may be treated as a "share" under that definition. You can opt out of that sharing by:

• rejecting analytics cookies, or withdrawing consent later;
• sending a GPC signal, which we honor as described above; or
• emailing [email protected] with the subject line "Do not sell or share my personal information."

We will not discriminate against you for exercising these rights.

We do not have actual knowledge that we sell or share personal information of people under 16, because the platform is for people 18 and over.

We do not sell personal information. We share it only as needed to run the platform, as follows.

• Grant Corporation staff and authorized contractors — operate and moderate the platform, review disputes, and handle support and legal requests.
• A Solana network node provider — reads and sends blockchain transactions. It sees transaction data on the public network, not your GameBuildMarket account login. The specific provider may change.
• Google (Google Analytics 4) — usage analytics, only if you opt in. Google's use of this data is also governed by Google's own policies.
• Cloudflare — traffic proxy and security for gamebuildmarket.com.
• Our hosting and mail infrastructure — the site and database are hosted on Grant Corporation's own servers. Outgoing email is sent through Grant Corporation's own mail server. No third-party email delivery service is used.
• Stripe — not used for customer payments today (card payments are off). If card payments are turned on, Stripe would process those payments and we would update this policy first.
• Professional advisers and authorities — accountants, insurers, or lawyers bound to confidentiality, and government or law-enforcement agencies when the law requires it, or when we believe in good faith that disclosure is necessary to protect rights, safety, or the platform.

Other users can see the public parts of your profile and listings (display name, listings, public reviews). Buyers and sellers on an order can see what they need to complete that order. If you file a DMCA notice or counter-notice, we may share it with the other party as the law contemplates. Wallet addresses and transactions you broadcast on Solana are public by design.

If we ever transfer the business, personal information may be transferred as part of that transaction, subject to this policy or a successor policy.

We keep information only as long as we need it for the purposes above, including disputes, tax, sanctions, and legal obligations.

• Account profile (email, display name, hashed password, seller bio) — for the life of the account, then deleted or irreversibly de-identified after a verified deletion request, except for the records below.
• Orders, invoices, escrow, payouts, refunds, and fee records — after the order is closed, for as long as tax, accounting, and legal obligations require.
• Order activity logs (including IP address and user-agent) — after the order is closed for as long as needed to handle disputes and chargebacks, or longer if a dispute, claim, or investigation is open.
• Uploaded listing files — while the listing is live and for as long as buyers of earlier orders may need them; malware-flagged files may be retained longer as needed for security.
• Dispute messages, reports, and DMCA notices or counter-notices — after the matter is closed, for as long as needed to operate the repeat-infringer policy and to meet legal obligations.
• Analytics data (GA4) — per your consent and Google's retention setting, and no further collection after you withdraw consent or send a GPC signal.

Some records tied to completed payments, tax, or legal holds may have to be kept even after you ask us to delete your account. On-chain data cannot be deleted.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• receive a copy (a data export) in a portable format;
• correct inaccurate information;
• ask us to delete your account and personal information, subject to the retention limits above;
• opt out of "sale" or "sharing" as described in the California section; and
• appeal a refusal, or complain to a regulator.

How to request. Email [email protected] from the email address on your account, with the subject "Privacy request," and tell us whether you want access, export, correction, or deletion. We may need to verify that the request comes from the account holder. We will not charge a fee for a reasonable request.

Response time. We will confirm we have received your request and will respond within 45 days. If we need more time (up to a further 45 days under California law), we will tell you why.

If we cannot delete everything (for example, payment records we must keep, or data on the Solana blockchain), we will say what we kept and why.

GameBuildMarket is for people 18 or older (or the age of majority where you live, if higher), and everyone confirms this with a checkbox when they create an account. We do not knowingly collect personal information from children under 13, and we do not direct the service at children. If we learn that we have collected personal information from a child under 13, we will delete it as soon as reasonably possible and close the account. If you believe a child under 13 has created an account, contact us at [email protected].

We use reasonable technical and organizational measures appropriate to a small marketplace that holds accounts, files, and escrowed crypto, including hashed passwords, session cookies with security attributes, access limited to staff who need it, malware scanning of uploads, and keeping escrow signing keys off the public web process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We never ask for your wallet's private keys. You are responsible for protecting your password and your own wallet.

Grant Corporation is based in California, and we process personal information in the United States. If you use GameBuildMarket from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data-protection rules than your country.

We may update this policy as the platform or the law changes. The updated policy will be posted here with a new "last updated" date. If we make a material change, we will also provide a more prominent notice (for example, an email to the address on your account or a notice when you next sign in).

Questions about this policy, or requests to access, export, correct, or delete your data, can be sent to:

Grant Corporation
Attn: Privacy
1012 East Ave J Ste 16
Lancaster, CA 93535
Email: [email protected]

For anything else, see Help.