Privacy Policy
Last Updated: September 24, 2026
Quick Links:
1. Introduction
GameSpace LLC ("Company," "we," "us," or "our") operates GameSpace, a sports facility booking platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service, and information we collect about sports venues and the businesses and organisations that run them from public sources, even if they do not use the Service. Section 2.4 explains that collection.
Please read this Privacy Policy carefully. It describes the practices that apply to your use of the Service.
2. Information We Collect
2.1 Information You Provide
We collect information you directly provide, including:
- Account Information: Name, email address, phone number, and profile photo
- Payment Information: Payment card details (processed securely by Stripe)
- Booking Information: Facility preferences, booking history, and special requests
- Communications: Messages sent through our platform and support inquiries
- Facility Owner Information: Business details, facility descriptions, pricing, and availability
- Claim Information: If you claim a venue listing, your name, email address, phone number (optional), your role at the venue, any note you add, the verification method you used and its result, and the date and time of each step. You can claim without an account.
- Listing Requests: If you ask us to correct or remove a listing, your name, contact details, your connection to the venue, and the details of your request
2.2 Automatically Collected Information
When you use our Service, we automatically collect:
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, search queries
- Location Data: General location based on IP address (with your permission, precise location for facility search)
- Log Data: Access times, IP addresses, referring URLs
2.3 Third-Party Information
If you sign in using Google OAuth, we receive your name, email, and profile picture from Google according to their privacy practices.
Google Business Profile. If you choose to verify a venue claim by signing in with Google Business Profile, we ask Google for permission to see the business locations you manage. We use that access only to check whether one of those locations matches the venue you are claiming. If it does, we record the result of the check and copy that location's phone number, website, opening hours and photos, noting that they came from you through Google and when you gave permission. We use those details only to run your venue's listing, and we review them before they appear on it. We do not store your Google access token after the check, and we do not use Google user data for advertising or share it with anyone else. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
2.4 Information About Venues From Public Sources
For venues that have not joined GameSpace, we collect information that the venue or its operator has made public: the venue's name, address, location, sports and facilities, published prices, hours, rentals, and photographs, and business contact details such as a main phone number, a general or bookings email address, and a contact page. Our sources are OpenStreetMap, Wikidata, the venue's or operator's own public website, photographs licensed for reuse, and information our team enters by hand.
We aim to collect contact details for the venue as a business, not for individual people. We prefer a bookings or general mailbox (such as info@) on the venue's own website. Where a venue publishes only a named person's work email as its contact, for example a sole owner, we may show it as the venue's contact. That person can ask us to remove it (section 6).
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve our Service
- Process bookings and payments
- Send booking confirmations and reminders
- Facilitate communication between users and facility owners
- Respond to inquiries and provide customer support
- Send service-related announcements and updates
- Detect and prevent fraud and security issues
- Publish venue listings, with credit to where the information came from
- Verify that a person claiming a listing is authorised to act for the venue
- Contact venues at their published business email address to invite them to claim their listing, and keep a record of anyone who has asked us to stop
- Analyze usage patterns to improve user experience
- Comply with legal obligations
4. Information Sharing
We may share your information with:
4.1 Facility Owners
When you make a booking, we share necessary information (name, contact details, booking requirements) with the facility owner to fulfill your reservation.
4.2 Service Providers
We work with third-party service providers including:
- Stripe: Payment processing
- Supabase: Database and authentication services
- Vercel: Hosting and deployment
- Google: Maps and OAuth services, and Business Profile verification when you choose it
- Resend: Email delivery, including invitations to claim a venue listing
4.3 Legal Requirements
We may disclose information when required by law, to respond to legal process, or to protect the rights, property, or safety of our users or others.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4.5 Public Venue Listings
Venue information described in section 2.4 is shown publicly on the venue's listing page and in search, with a credit to its source. Information about people who claim a listing or send us a listing request is not shown publicly.
5. Data Retention
We retain your information as follows:
- Account Data: Retained while your account is active and for a reasonable period thereafter
- Booking Records: Retained for 7 years for tax and legal purposes
- Messages: Retained for 90 days unless preserved by either party
- Usage Logs: Retained for up to 12 months
- Venue Listings: Kept while the listing is published. If a venue asks us to remove its listing, we stop showing it and keep a record of the request (the venue's source identifiers, the reason, who asked, and when) so the listing is not published again.
- Claim Records: Kept while the claim is active and for a reasonable period thereafter
- Invitation Opt-outs: Kept so we can continue to honour them
6. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data (subject to legal retention requirements)
- Opt-out: Unsubscribe from marketing communications
- Data Portability: Request your data in a portable format
To exercise these rights, please contact us at support@trygamespace.com.
6.1 Venues and Listings
If you run a venue, you can claim its listing to control what it says, or ask us to correct or remove it by emailing support@trygamespace.com (see section 2A.4 of our Terms of Service). We check that a removal request comes from someone authorised to act for the venue before we act on it. A removed listing stays removed: it is not published again when we refresh listing data from our sources. Removing a listing from GameSpace does not remove the venue from OpenStreetMap or other public sources. Place names: US Census and GeoNames (CC BY 4.0).
6.2 Invitation Emails
We may email a venue at its published business email address to invite it to claim its listing. Each invitation comes from hello@trygamespace.com, includes our postal address, and tells you how to stop further emails: reply "no thanks", or use your email app's unsubscribe option. We will not send you another invitation after you ask us to stop.
7. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Secure authentication and access controls
- Regular security assessments
- Employee access restrictions
While we strive to protect your data, no method of transmission over the Internet is 100% secure. You use the Service at your own risk.
9. Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). This section describes your rights and how to exercise them.
10.1 Your Rights
- Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes, and the categories of third parties with whom we share information.
- Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You can request correction of inaccurate personal information.
- Right to Opt-Out: You can opt-out of the “sale” or “sharing” of your personal information.
- Right to Limit Use: You can limit the use and disclosure of sensitive personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
10.2 Categories of Personal Information
In the past 12 months, we may have collected the following categories of personal information:
- Identifiers (name, email, phone number)
- Commercial information (booking history, transaction records)
- Internet activity (browsing history, search history on our site)
- Geolocation data (general location from IP address)
- Professional information (business details for facility owners, and business contact details for venues collected from public sources)
We collect this information from you, automatically from your use of the Service, and, for venue listings, from public sources: venue and operator websites, OpenStreetMap, and Wikidata (see section 2.4).
10.3 Sale and Sharing of Information
We do not “sell” personal information in the traditional sense. However, some data sharing with advertising partners may be considered a “sale” or “sharing” under CCPA's broad definitions. You can opt-out of this sharing by visiting our “Do Not Sell My Personal Information” page.
Exercise Your CCPA Rights:
Do Not Sell or Share My Personal Information →10.4 How to Submit a Request
To exercise your CCPA rights, you can:
- Visit our CCPA request page
- Email us at privacy@trygamespace.com
- Contact us at the address listed below
We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.
11. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).
11.1 Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract: Processing necessary to perform our services (e.g., booking facilities)
- Consent: Processing based on your explicit consent (e.g., marketing communications)
- Legitimate Interests: Processing for our legitimate business interests (e.g., fraud prevention, improving our services, publishing public business information about sports venues, verifying claims, and contacting venues about their listing)
- Legal Obligation: Processing required by law (e.g., tax records)
11.2 Your GDPR Rights
- Right of Access: Obtain a copy of your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
Exercise Your GDPR Rights:
Export Your Data →You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
12. International Data Transfers
Our Service is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States, which may have different data protection laws than your country.
For transfers from the EEA, UK, or Switzerland, we rely on:
- Standard Contractual Clauses approved by the European Commission
- Your explicit consent where appropriate
- Necessity for the performance of a contract with you
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
GameSpace LLC
116 Agnes Rd Ste 200
Knoxville, TN 37919
Email: privacy@trygamespace.com