Contents
This privacy policy describes how personal data is collected, used, and protected on the Game Space website and related services.
Please note that the website does not process card or other electronic payments — payment to confirm a reservation is completed at the relevant venue, in line with that venue’s internal rules.
We do not sell personal data and do not use it for third-party advertising or profiling.
1. Who we are
The controller responsible for processing personal data is Individual entrepreneur operating the online platform “Game Space” (Georgia).
Contact: compliance@gamespace.ge
Full registration details (legal address, identification information, and other particulars) are available on written request, in line with legal requirements.
2. Data we collect
- Phone number — account identification and communication with users (including reservation confirmation and SMS notifications)
- Email and password hash — authentication (via Supabase Auth)
- Technical metadata — for security purposes related to authentication
- First name, last name, and profile photo — user identification and service delivery where necessary
- Online reservation data — location; station; date and time; duration; contact name and phone; email (optional)
- Ratings and comments — if the user submits a review on the platform
- Telegram / loyalty updates — only if the user opts in where offered (no SMS marketing list)
- Tournament leaderboard data — publicly displayed name and score
- Support correspondence — communication received by email
Note: an indicative price (GEL) may be stored for on-site operational processing only; this does not constitute online payment.
3. IP addresses and technical infrastructure
We do not use IP addresses or device data for advertising, profiling, or behavioural analytics.
However, such data may be processed automatically by our infrastructure (hosting, database, APIs, and security systems) solely for: maintaining security; fraud prevention; and stable service operation.
4. Legal bases and purposes of processing
- Contract / preparatory steps — taking and fulfilling reservations, account management
- Consent — optional Telegram/loyalty preferences and similar features
- Legitimate interests — security, fraud prevention, and service improvement
- Legal obligations — tax and accounting requirements
5. Processors
- Supabase — database, authentication, and file storage
- Twilio — SMS messages (e.g. one-time codes)
- Sentry (if enabled) — technical error monitoring
Personal data may be processed outside Georgia (including in the European Economic Area or other regions). In such cases we use appropriate legal mechanisms (e.g. standard contractual clauses) to ensure adequate protection.
We have appropriate agreements in place with all processors that meet data-protection requirements.
6. Retention
Data is retained only for as long as necessary to achieve the relevant purposes or as required by law.
After account deletion:
- Some data is deleted
- Some may be anonymised
- Some may be retained for periods defined by law
In the event of a security incident that may affect users’ rights, we will act in accordance with applicable law, including notifying relevant authorities and users where required.
7. Your rights
Under applicable law you may have the right to: obtain information about your data (access); request rectification; request erasure; restrict processing; and lodge a complaint with a supervisory authority. Contact us for requests: compliance@gamespace.ge
8. Cookies
Use of cookies is described in detail in a separate document — the Cookie Policy. We use only essential cookies.
9. Changes
If this policy is updated, changes will be reflected on this page with an updated “Last updated” date.