Privacy Policy

The controller under the EU General Data Protection Regulation (GDPR) for this website and the CreatorScout service is:

Öner/Wrona GbR
Lange Malterse 46
44795 Bochum, Germany
Email: support@gooder.games

Full operator details are in the Impressum. You can also reach us through the contact form.

CreatorScout uses YouTube API Services to find YouTube creators who cover games similar to yours. By using CreatorScout you agree to be bound by the YouTube Terms of Service, and the Google Privacy Policy applies to the data YouTube processes.

We read only public data through the YouTube Data API:

• Public channel data: channel name, handle, profile image, channel URL, subscriber count, declared language and the public channel description.
• Public video data: titles, publish dates, view counts and the video category of recent uploads, which we use to check which games a channel has covered and when it was last active.
• Public business email addresses that a creator has published in their own channel description, usually for sponsorship enquiries. We show the address exactly as published, one channel at a time.

CreatorScout does not ask you to sign in with Google and does not access your YouTube or Google account. If you have ever granted any application access to your Google account, you can review and revoke that access at any time on Google's security settings page.

We do not upload, download, modify or play YouTube content, and we do not sell YouTube data. Every result links back to the creator's channel and video on YouTube.

If you are a creator who appears in our results, we process the public channel and video data listed above and, if you published one, the business email address in your channel description. For Twitch we use public channel and stream data from the Twitch API. We process this data on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in helping game developers find relevant creators, and your interest in being found for the business enquiries your published address invites.

You can object at any time. Email support@gooder.games with your channel URL and we will stop showing your channel and email in CreatorScout.

Steam key links: if a developer sends you a review key through a CreatorScout claim link, we record the time you first reveal the key and show that developer that the key was viewed. We record nothing else about your visit in our database. The link stops working when the developer removes the key (Art. 6(1)(f) GDPR).

• Account: your email address, which we use to send you a sign-in link and to identify your account (Art. 6(1)(b) GDPR, performance of a contract).
• Trial emails: during your Pro trial we send you two emails, three days before it ends and when it ends, using your account email. Every one has an unsubscribe link, and we keep a record of which were sent and of your unsubscribe (Art. 6(1)(f) GDPR, our interest in telling you before your plan changes).
• Weekly follow-up email: only if you turn it on in Settings, we email you once a week, using your account email, the names and handles of the saved creators that are waiting on you and what to do next. It never contains creator contact details, Steam keys or your notes. We keep when you turned it on and when we last sent it; turn it off in Settings or with the unsubscribe link in every email (Art. 6(1)(a) GDPR, your consent).
• Your workspace: the creators you save, outreach status and history, notes, Steam keys you enter, game profiles (campaigns) and generated pitch drafts. When you are signed in we store these in our database so they sync across your devices; otherwise they stay in your browser's local storage (Art. 6(1)(b) GDPR).
• Billing: your subscription status, trial and renewal dates and the customer reference from our payment provider, Stripe. We never see or store your full card details (Art. 6(1)(b) and (c) GDPR).
• Usage limits and security: counts of searches per day and per hour, keyed to your account or, when you are not signed in, to your IP address. We use them to enforce plan limits and to protect the service from abuse (Art. 6(1)(f) GDPR).
• Your own YouTube API key (optional): stored only in your browser and sent with each search so we can query YouTube with your key. We do not store it in our database.
• Developer tools (optional): API keys you create (we store only a hash and a short prefix), a log of API requests made with them (endpoint, status, time), and any webhook URL you configure.
• Contact form: your name, email address and message, which we use to answer you (Art. 6(1)(b) or (f) GDPR).
• AI pitch drafts (optional): when you generate a pitch, the creator's public profile details and the game details you entered are sent to Google's Gemini API to write the draft.

• Strictly necessary: a sign-in session cookie while you are signed in, and local storage entries for your saved list, your theme and your cookie choice. These are needed for the service to work and do not require consent (§ 25(2) TDDDG).
• Analytics (only with your consent): if you accept analytics in the cookie banner, we use PostHog to measure page views and product interactions, such as which features are used, so we can improve CreatorScout. With the same consent we also record session replays: a reconstruction of how you move through the interface (pages, clicks, scrolling). Text you type into input fields is masked and never recorded, and personal details on screen, such as email addresses, notes and keys, are hidden. PostHog stores a pseudonymous identifier in your browser. While you are signed in, we link these events to your account's internal user ID (never your email address or name), and when you buy Pro our server reports the purchase to PostHog under the same ID; signing out ends the link. Without consent no analytics data or replay is sent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

You can change your choice at any time with Cookie Preferences in the footer. Withdrawing consent does not affect processing that already happened.

We use these providers to run CreatorScout. They process data on our behalf:

• Vercel: hosting. Server request logs include IP addresses.
• Supabase: database and sign-in (email sign-in links).
• Stripe: payments and subscription management.
• PostHog: product analytics and session replays, only after consent.
• Resend: delivers contact-form messages to us, our two emails about your trial, and the weekly follow-up email if you turn it on.
• Google: YouTube Data API (creator data) and the Gemini API (AI pitch drafts).
• Twitch and Steam: public creator and game data. No data about you is sent to them.

Some providers may process data outside the European Economic Area. Where they do, the transfer relies on an adequacy decision (such as the EU-U.S. Data Privacy Framework) or on the EU Standard Contractual Clauses.

• YouTube search results are cached for 7 days per game and shared across all users, then fetched fresh. Channel activity is cached for 7 days per channel.
• YouTube data on creators you saved (statistics, recent video, email) is refreshed from YouTube or deleted no later than 30 days after we fetched it. Your own notes, status and history for that creator stay until you delete them.
• Usage counters for rate limits are deleted after about one day.
• Your account and workspace are kept until you delete them or ask us to. Billing records are kept for as long as commercial and tax law requires.
• Contact messages are kept as long as needed to answer you.

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time.

To delete your account and data, email support@gooder.games from the address you sign in with. We delete your account and the data linked to it without undue delay and at the latest within one month. You can export your saved creators as CSV from the Saved page at any time.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

We will update this policy when the service changes and show the new date at the top. See also our Terms of Service.