We handle your data with the same care we bring to every deal. No selling data. No dark patterns. Just clear, honest privacy practices.
Game Equity Hub (“we”, “us”) describes how we process personal data on this site and in the marketplace. Under UK GDPR, EU GDPR, and similar laws you must identify the controller clearly. If you operate through a registered company, add its legal name, registered address, company number, and a dedicated privacy inbox (for example hello@gameequityhub.com) in your live legal pack.
We rely on: contract — to deliver accounts, listings, deals, and support you request; legitimate interests — to secure the platform, prevent fraud, and improve products in a way that respects your rights; consent — for non-essential cookies, marketing emails, and optional analytics you turn on; legal obligation — where we must retain or disclose information for regulators, tax, or court orders. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
If personal data is stored or processed in countries without an adequacy decision (for example United States cloud hosting), we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms where required, and can provide more detail on request.
You may lodge a complaint with your local data protection authority (for example the ICO in the UK or an EU member state supervisory authority). We encourage you to contact hello@gameequityhub.com first so we can try to resolve your concern.
The marketplace is not directed at children below the digital consent age in their region (often 13 or 16). We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it promptly.
When you register, list a game, make an offer, or contact us, we collect: full name, email address, username, payment details (bank account, crypto wallet addresses), Roblox username and profile information, game listing information (URLs, descriptions, financial metrics), communications with our team, and any documents or screenshots you submit for verification purposes.
We collect IP addresses, browser type and version, device identifiers, pages visited and time spent, referring URLs, session duration, and clickstream data. Site-usage measurement is done with Google Analytics 4 and is described in full in Section 7A, including what it does and does not receive and how to switch its cookies off. We use cookies and similar technologies to remember preferences and analyse usage patterns.
With your permission, we may access Roblox Creator Hub analytics data, Roblox group and game information, and revenue and performance metrics. This data is used solely to verify listings and is never shared with third parties outside of the immediate transaction.
We use your information to create and manage your account, process transactions, verify game listings and ownership claims, match buyers with relevant listings based on their criteria, communicate about deals, updates, and support requests, and send transactional emails (deal confirmations, payment receipts, dispute notifications).
We analyze usage patterns and transaction data to detect fraud, fake metrics, and bad-faith actors. Information may be shared with law enforcement if required by applicable law or to prevent imminent harm.
Aggregated, anonymized data is used to improve our valuation models, matching algorithms, and overall platform experience. Individual user data is never sold for marketing purposes.
With your explicit consent, we may send newsletters, market reports, and new listing digests. You may unsubscribe at any time via the link in any email or by contacting hello@gameequityhub.com.
To facilitate deals, we share limited profile information between buyers and sellers involved in a specific transaction. This includes display name, contact information, and verification status — never full financial details unless explicitly agreed.
We work with payment processors, hosting providers, analytics tools, and communication platforms. These providers are contractually bound to use your data only to provide their services to us and may not use it for their own purposes.
We may disclose information when required by law, court order, or regulatory authority; to protect the rights, property, or safety of EquityHub, our users, or the public; or in connection with a merger, acquisition, or sale of all or part of our business (users will be notified in advance).
We never sell personal data to third parties for advertising. We never share the commercial analytics attached to a listing — visits, revenue, performance metrics — beyond the parties involved in that specific deal. We never disclose payment details to counterparties without explicit consent. Note that this is separate from the site-usage measurement described in Section 7A: that sends anonymous interaction counts to Google Analytics, and never your identity, your listings’ figures, or anything you write on the platform.
We retain account data for as long as your account is active. If you delete your account, we retain anonymized transaction records for legal and dispute purposes for 7 years, which is standard for financial record-keeping.
Records of completed, cancelled, or disputed transactions are retained for 7 years from the transaction date. This retention is required for financial compliance, dispute resolution, and regulatory purposes.
Email and in-platform communications are retained for 3 years after the date of the last interaction for support and dispute purposes. You may request deletion of non-transactional communications at any time.
You may request a complete export of all personal data we hold about you at any time. We will provide this in a machine-readable format within 30 days of your request.
You may update your account information at any time through your profile settings, or by contacting hello@gameequityhub.com for data that cannot be self-managed.
You may request deletion of your account and associated personal data. We will comply within 30 days, except where we are legally required to retain certain records (see Section 4).
You may opt out of marketing communications at any time. You may also opt out of non-essential cookies through our cookie preference center. Note that opting out of functional cookies may impact platform usability.
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Access to user data is restricted to authorized personnel with a legitimate business need. We maintain regular security audits and penetration testing schedules.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach, consistent with applicable data protection laws.
Required for the platform to function: authentication session management, security tokens, user preferences, and the record of your cookie choices (“geh_consent_v1”, six months). These cannot be disabled without breaking core functionality — the consent record in particular is what lets us honour your decision instead of asking on every page.
We use Google Analytics 4 to understand aggregate traffic and errors — see Section 7A for the detail. It runs without cookies unless you enable the Analytics category, in which case it sets its own first-party cookies (names beginning “_ga”) to recognise returning visits. We do not sell browsing history for advertising.
We do not run behavioural ad networks on this marketing site. Google Analytics’ advertising features — Google Signals, ad personalisation, remarketing audiences — are switched off in the tag itself, not merely unused, so no advertising storage is written even if you accept analytics cookies. Any future marketing tags would only load if you enable the Marketing category in cookie settings.
You can open the cookie preference centre at any time from “Cookie settings” in the site footer to review or change optional categories, or use “Change your choice” at the top of this page to clear the decision entirely — that puts analytics back to cookieless immediately and shows the consent banner again. Your choice is stored in a cookie named “geh_consent_v1”, scoped to gameequityhub.com and valid for six months, so clearing site data also clears it and you will be asked again. That cookie is strictly necessary: it is the record of your decision, and without it we could not honour the decision. Because it is scoped to the whole domain, one answer covers both this site and the marketplace at app.gameequityhub.com — you are not asked twice, and changing it in either place changes it for both.
We use Google Analytics 4 on this marketing site and in the marketplace at app.gameequityhub.com, to see which pages people read, which routes into the product work, and where a flow such as signing up or making an offer breaks down. Nothing here is used to make decisions about an individual — it exists so we can fix the parts of the product that do not work.
Anonymous interaction events: a page view for each screen (its address only, described below), account creation, sign-in, publishing a listing, submitting an offer, and a short machine-readable code when one of those fails — for example “rate_limited” or “below_minimum”. Alongside these, Google receives the technical information any web request carries: approximate location derived from your IP address (country and region level; the full address is not stored in the reports), device type, browser, operating system, screen size, language, and the site that referred you.
No personal data. Not your email address, your name, your display name or your Roblox username; not your listings’ prices, revenue figures or descriptions; not message contents; not payment or wallet details; not the contents of any form. Event parameters carry counters, fixed machine codes and durations only. Addresses of pages are also stripped before they leave the browser: the query string and the fragment are removed entirely, and any identifier in the path — a listing id, a studio slug, a password-reset token — is replaced with a placeholder, so “/reset-password?token=…” is reported as “/reset-password” and nothing more. This is done deliberately, because Google Analytics would otherwise read and transmit the raw address of every page.
Google Ireland Limited / Google LLC, acting as our processor under Google’s data processing terms. Data may be processed outside your country, including in the United States, under the safeguards described in “International transfers” above. We have not enabled Google Signals, ad personalisation, remarketing audiences or data sharing with Google’s advertising products; those features are switched off in the tag itself, so Analytics data is not used to target advertising to you anywhere.
Analytics starts in Google’s Consent Mode with every storage type denied, which means it runs without cookies: no “_ga” cookie is written, nothing is stored on your device, and visits cannot be linked together across sessions. If you press Accept, we grant analytics storage only — Analytics may then set its own first-party cookies so a returning visit is recognised as the same one. Advertising storage stays denied whatever you choose. If you press “Essential only” or “Reject all”, it stays cookieless permanently.
Use “Change your choice” at the top of this page: it clears the stored decision, returns Analytics to cookieless immediately, and brings the consent banner back. “Cookie settings” in the footer opens the same categories for a finer-grained change. Your decision is held in one cookie scoped to the whole of gameequityhub.com, so it applies to this site and to the marketplace at app.gameequityhub.com alike; you can also change it from Settings → Account inside the marketplace, and either place updates both. Withdrawing does not affect processing that already happened while consent was in force.
For any privacy-related requests, questions, or complaints, contact us at hello@gameequityhub.com with the subject line "Privacy Request". We respond within 10 business days.
We will notify registered users of material changes to this policy via email at least 14 days before changes take effect where we are required to do so. Continued use of the platform after changes may constitute acceptance where permitted by law. This version adds Section 7A (Analytics) covering our use of Google Analytics 4 and revises Sections 1.2, 3.4 and 7 accordingly. Last updated and effective: 23 August 2026.