Privacy Policy

Who we are

TestBundle operates this site. Privacy requests go to support@testbundle.com. The rules for using the product are in the Terms of Service.

Information you give us

An account stores a display name, email address, role (tester, studio, or admin), an optional bio, and a password. Passwords are stored as a salted hash. Before the first login we email a short-lived confirmation pin and store only a hash of that pin until it expires or you enter it.

Studios add a public game title, description, and play link, plus tester instructions and a survey that only enrolled testers see. Testers add which bundles they join and the answers they file. Studios rate those answers. A tester's average rating can be shown on the site.

Payments go through Stripe when it is configured. Card numbers, bank account numbers, and identity documents are collected by Stripe on Stripe's pages or in Stripe's card form. TestBundle keeps a Stripe customer or Connect account id, the card brand and last four digits, and whether the method is verified. We do not store full card numbers or full bank account numbers.

If a local demo processor is turned on, a payout check may ask for a legal name, date of birth, and the last four digits of a tax id so we can confirm the person is 18 and the demo bank looks valid. We do not save the date of birth, the tax id, or the full account number. We save the bank name and last four digits.

Information collected automatically

We read the IP address on login and email-pin attempts and keep it in memory long enough to rate-limit those actions. We do not build a permanent browsing history from IP addresses. The host that runs the site may keep ordinary server logs (time, path, and status).

How we use it

We use this information to create accounts, run bundles, deliver surveys, show ratings, charge studios when a bundle unlocks, and pay testers who finish. We email the confirmation pin and replies you ask for. We also use it to rate-limit sign-in, enforce bans, and keep a ledger of charges and cash-outs.

If you are in the EEA or the UK, we do this to perform the contract with you (the account and the marketplace), for our legitimate interest in keeping the site secure, and where a payment provider must check identity before a payout.

Who else sees it

The studio that owns a game sees the survey answers filed for that game. Tester rating averages can be shown to other people using the site. Operators of the marketplace can see account and ledger records to run support, billing, and bans.

Stripe processes studio cards and tester payouts under Stripe's privacy policy. Confirmation email is sent through the mail provider configured for the site (Resend or MailSlurp). We also share information when the law requires it, or to investigate fraud against the marketplace. We do not sell personal information.

How long we keep it

Account and ledger records stay while the account is open and for as long as we need them for payouts, disputes, and bookkeeping. Email pins expire within minutes. Rate-limit counters live in memory and fall off within about an hour. Email support@testbundle.com to ask us to close an account. We may keep a short record of a ban, or of a payment that already settled, where we have to.

Security and age

The session cookie is httpOnly. Card and bank details are handled by Stripe when Stripe is configured. TestBundle is for people 18 and older. A cash-out check rejects a date of birth under 18.

Your requests

You can ask to see, correct, or delete the personal information we hold, or to object to a use that is based on legitimate interest. Email support@testbundle.com from the address on the account. You can also complain to a data-protection authority where you live. Rights that a local law says we cannot take away still apply.

Our providers may process information in the United States and in other countries where they operate.

Changes

We will post updates on this page and change the effective date. The support page is the way to reach a person.