Evil Geniuses (EG) LLC
Privacy Policy
Last revised on April 10, 2026
1. General
At Gridlock, we care about your privacy and your personal information, so we have prepared this Privacy Policy to explain how we collect, use, and share your personal information. This Privacy Policy applies to all personal information that may be collected or received about you when you use our website at playgridlock.gg or interact with our services as detailed further below.
Evil Geniuses (EG) LLC, a Delaware limited liability company with our business address at 6701 Center Dr W, Ste 950, Los Angeles, CA 90045, United States of America, is the data controller for the purposes of the General Data Protection Regulation (“GDPR”) and any relevant local legislation (“Data Protection Laws”). Data Protection Representative Limited, a company registered in the Republic of Ireland with registered number 616588, is our appointed Representative under the Data Protection Laws for the European Union member states and the United Kingdom. Please see Contact Us below for more information.
Please be aware that this Privacy Policy does not apply to any personal information you may provide to third parties (such as Discord, Twitch, YouTube, or Kick). We recommend that you familiarize yourself with the privacy policies of any third parties to which you provide your personal information.
2. What information we collect
Personal information is data that can be used to identify or contact a single person. We may collect personal information from you in a variety of ways when you interact with us through our website or other channels, including if you:
- Visit the playgridlock.gg website
- Create an account on our gaming platform
- Link a third-party account (such as Discord, Twitch, Kick, Google, or Microsoft/Xbox) to your Gridlock profile
- Subscribe to any of our newsletters
- Participate in any of our contests or promotional events
- Register for, or participate in, any of our tournaments or competitive gaming events
- Submit responses to forms or surveys posted by us
- Contact us through different channels
Examples of the types of personal information we may collect include: your name, email address, date of birth, gamer tags, Minecraft username, social media handles, linked third-party account identifiers (such as Discord username, Twitch channel ID, Kick channel ID, YouTube channel data, and Xbox profile data), IP address, device identifiers, electronic signatures, and other personal information you provide.
When you link a third-party account to your Gridlock profile, we may receive certain information from that third-party service through its OAuth authentication process, including your email address, username, profile picture, and channel or account identifiers. The specific information received depends on the third-party service and the permissions you authorize during the linking process.
We collect technical data about how you interact with our website; for more information, see Cookies and Analytics below.
We also collect data in a form that does not, on its own or combined with other information we have, permit direct association with any specific individual. We may collect, use, transfer, and disclose non-personal information for any purpose.
3. Cookies and analytics
A “cookie” is a small amount of data that often includes an anonymous unique identifier that is sent to your browser from a website and stored on your computer’s hard drive or browser. When you access our website, cookies may be sent to your web browser and stored on your computer or mobile device. We use cookies to record information about your online preferences and allow us to tailor our website to your interests. Information supplied by cookies can help us to understand the profile of our visitors and help us to provide you with a better user experience.
We use Plausible Analytics for general website analytics. Plausible is a privacy-friendly analytics service that does not use cookies, does not collect IP addresses or user agent strings, and does not store any personal data. No cookie consent is required for Plausible because it does not track individual users.
On our dashboard (accessible after account login), we use PostHog for product analytics to help us understand how users interact with our platform features. PostHog uses cookies and may associate analytics data with your email address for user identification purposes. PostHog analytics are activated only after you affirmatively consent to cookies through our cookie consent banner. If you do not consent, no PostHog cookies will be placed and no personal data will be sent to PostHog for analytics purposes.
If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to deny or accept the cookie feature; however, you should note that cookies may be necessary to provide you certain features available on our website (e.g., customized delivery of information or remember your login).
You can find more information about cookies and how to manage them at www.allaboutcookies.org or www.aboutcookies.org.
4. Third-party services and data sharing
To provide our services, we integrate with a number of third-party platforms and service providers. Below is a description of the categories of third-party services we use and the types of personal information shared with each.
Authentication providers
When you create an account on Gridlock, you may authenticate using a third-party service. Through this process, we receive limited information from the third-party provider as authorized by you during login. The specific data received from each provider is as follows:
- Discord — email address, username, and profile picture. Upon account creation, you will be joined to the public Gridlock Discord server.
- Kick — email address and live stream channel ID.
- Google — email address and YouTube channel data linked to your Google account.
- Twitch — email address and channel ID.
- Microsoft — Minecraft username and Xbox profile data.
Infrastructure and hosting providers
- PlanetScale, Inc. — our database infrastructure provider. Personal information submitted through our registration and account creation process is stored in a PlanetScale-hosted database. PlanetScale maintains SOC 1 Type 2 and SOC 2 Type 2 certifications, encrypts all data at rest and in transit, and operates under a Data Processing Addendum.
- Vercel, Inc. — our website hosting provider. Vercel processes user IP addresses and request data in connection with serving website content.
Analytics providers
- Plausible Analytics — a privacy-friendly analytics service used for general website traffic analysis. Plausible does not use cookies, does not collect IP addresses, and does not store personal data.
- PostHog — a product analytics service used on the Gridlock dashboard. After you consent to cookies, your email address may be sent to PostHog to identify your account within our analytics environment.
Age verification
- Kids Web Services (KWS) by SuperAwesome (Epic Games) — used to conduct age verification and obtain verifiable parental consent for users under the age of sixteen (16). KWS processes limited personal information (such as date of birth and parent/guardian contact information) solely for the purpose of verifying age and facilitating parental consent.
Each of our third-party service providers processes data on our behalf or in connection with providing their services to us. Where applicable, we implement contractual protections, including data processing agreements, that restrict the use of your personal information to the provision of services to Evil Geniuses.
5. Use of personal information
We use your personal information for the following purposes:
- To create and manage your Gridlock account
- To register you for and administer tournaments, competitive gaming events, sweepstakes, and contests
- To administer prizes and comply with applicable tax and legal requirements
- To send you information about your relationship or transactions with us
- To send you newsletters, event notifications, and other communications if you have opted in to receive them
- To process and respond to your inquiries
- To improve the content and features of our website and services
- For internal research, analytics, and reporting
- To enforce the legal terms that govern your use of our services
- To administer and troubleshoot our website
Legal bases for processing (EU/UK users)
If you are located in the European Union or the United Kingdom, our legal bases for processing your personal information are as follows:
- Performance of a contract — processing that is necessary to provide you with our services, including account creation, tournament registration, event administration, and prize fulfillment.
- Consent — processing based on your affirmative consent, including newsletters, marketing communications, and PostHog analytics cookies. You may withdraw your consent at any time.
- Legitimate interests — processing necessary for our legitimate interests in understanding how users interact with our services in order to improve them, provided such processing does not override your fundamental rights and freedoms. This includes aggregated, non-identifying analytics through Plausible.
- Legal obligation — processing necessary to comply with applicable laws, such as tax reporting requirements in connection with prize administration.
For any marketing communications you receive from us, you may unsubscribe at any time by clicking the unsubscribe link at the bottom of the email.
6. Sharing your personal information with third parties
We share your personal information only where: (1) it is necessary to offer the service you have requested; (2) there is a legal requirement for us to do so; (3) where you have provided consent; or (4) we have a lawful legitimate interest to do so.
Service providers
We share personal information with the third-party service providers described in Section 4 above, who assist us in operating our platform, hosting our website, performing analytics, and verifying user age. These service providers process data on our behalf under data processing agreements or equivalent contractual protections that restrict their use of your personal information to the provision of services to Evil Geniuses.
Legal requirements
We will be required to access and disclose personal information in response to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. Additionally, we will access and share account or other personal information when we believe it is necessary to comply with law, to protect our interests or property, to prevent fraud or other illegal activity perpetrated through our services or using our name, or to prevent imminent harm. This will include accessing and sharing personal information with other companies, lawyers, agents, or government agencies.
7. Third-party websites and links
Our services contain links to other sites operated by third parties, including the third-party authentication providers described in Section 4. We do not control such other sites and are not responsible for their content, their privacy policies, or their use of personal information. Our inclusion of such links does not imply any endorsement of the content on such sites or of their owners or operators. Any information submitted by you directly to these third parties (including social media platforms) is subject to that third party’s privacy policy.
Please review the privacy policies of each third-party service you use in connection with Gridlock to better understand their privacy practices.
8. Rights of individuals in the European Union and the UK
If you are located in the European Union or the UK, you have the following rights in relation to the personal information we hold about you, unless provided otherwise by local law:
- Right of access — You have the right to ask us for copies of your personal information.
- Right to rectification — You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Right to erasure — You have the right to ask us to erase your personal information in certain circumstances.
- Right to restriction of processing — You have the right to ask us to restrict the processing of your information in certain circumstances.
- Right to object to processing — You have the right to object to the processing of your personal data in certain circumstances.
- Right to data portability — You have the right to ask that we transfer the information you gave us to another organization, or to you, in certain circumstances.
Please note that you can unsubscribe from our newsletter at any time by clicking the “unsubscribe” button at the bottom of a newsletter email. To exercise any of your other rights, please see the Contact Us section below.
In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
We will retain your data until your account is deleted, after which point we may retain anonymous data collected through our services which may be shared with third parties in any manner.
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available at the European Commission’s website.
8A. International data transfers
Evil Geniuses (EG) LLC is based in the United States. If you are located outside the United States, please be aware that personal information you provide to us or that we collect may be transferred to, processed, and stored in the United States. Our service providers, including PlanetScale (database hosting), Vercel (website hosting), and PostHog (analytics), may also process data in the United States or other jurisdictions. PlanetScale operates under a Data Processing Addendum that incorporates the European Commission’s Standard Contractual Clauses for cross-border data transfers from the European Economic Area, the United Kingdom, and Switzerland. Where required by applicable law, we implement appropriate safeguards for cross-border data transfers, including Standard Contractual Clauses approved by the European Commission or reliance on certified Data Privacy Framework programs. By submitting your personal information through our services, you acknowledge and consent to the transfer of your personal information to the United States, subject to the protections described in this Privacy Policy.
9. Age requirements and parental consent
Gridlock is designed for competitive gaming and may be used by younger players. We take the protection of children’s personal information seriously and have implemented the following age-based requirements that apply to all users regardless of location:
Users under 13
Children under thirteen (13) years of age are prohibited from creating an account or participating in Gridlock services. We do not knowingly collect or store personal information from children under 13. If we discover that we have unknowingly collected personal information from a child under 13, we will delete it promptly.
Users ages 13 to 15
Users between the ages of thirteen (13) and fifteen (15) may create an account and participate in Gridlock services only after completing a verifiable parental or legal guardian consent process. We use Kids Web Services (KWS), a parental verification platform operated by SuperAwesome (an Epic Games company), to verify age and obtain parental consent. During the registration process, users who indicate they are under sixteen (16) will be directed to complete the KWS parental verification flow. Upon successful verification, the user’s account will be designated as a child profile in the Gridlock database. In such cases, we collect only the minimum personal information necessary to facilitate participation and administer events.
Users 16 and over
Users who are sixteen (16) years of age or older may create an account and participate in Gridlock services by confirming their age during the registration process.
Why we use 16 as our global age threshold
We have adopted sixteen (16) as our global age threshold for independent account creation and data processing consent, regardless of the user’s jurisdiction. This approach reflects the default age of digital consent under the GDPR (Article 8), accounts for varying age thresholds across EU member states (which range from 13 to 16), and provides a consistent, protective standard for our community. Given the nature of Gridlock as a Minecraft-based competitive gaming platform with a younger player demographic, we believe this uniform threshold best protects our users.
Parental rights
Parents or legal guardians of users under sixteen (16) may at any time review, request deletion of, or refuse further collection of their child’s personal information by contacting us at the address provided in the Contact Us section below.
However, we may collect technical information from all visitors of our website required for delivering our services and for the support of our internal operations, regardless of age. This technical information is collected through Plausible Analytics, which does not store personal data, IP addresses, or cookies.
10. Retention of personal information
Your personal information will be retained for as long as it is necessary to carry out the purposes set out in this Privacy Policy (unless longer retention is required by applicable law). For tournament and event registration data, we will retain your personal information for the duration of the event and for a period of sixty (60) days thereafter for prize administration and tax reporting purposes, after which it will be deleted unless retention is required by law. We may keep an anonymized form of your personal information, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.
10A. Your California privacy rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), provides you with additional rights regarding your personal information. We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising purposes. You have the right to: (i) know what personal information we collect, use, and disclose about you; (ii) request deletion of your personal information; (iii) correct inaccurate personal information; and (iv) not be discriminated against for exercising these rights. To exercise any of these rights, please contact us at privacy@playgridlock.gg or at the address in the Contact Us section below.
For California residents under the age of sixteen (16), we will not sell or share personal information without affirmative opt-in consent. For residents under thirteen (13), such consent must be provided by the consumer’s parent or guardian.
11. Information security
We have implemented administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information. These measures include encryption of data in transit (TLS 1.2+), access controls, and contractual data protection obligations with our service providers. Where we use third-party platforms to process personal information, we require that such platforms maintain industry-standard security certifications and practices. While no method of transmission over the Internet or electronic storage is completely secure, we strive to use commercially reasonable means to protect your personal information.
11A. Data breach notification
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the applicable supervisory authority without undue delay and, where feasible, within seventy-two (72) hours of becoming aware of the breach, in accordance with Article 33 of the GDPR. Where the breach is likely to result in a high risk to the rights and freedoms of individuals, we will also notify the affected individuals without undue delay, in accordance with Article 34 of the GDPR and applicable US state data breach notification laws.
12. Do not track
Our website is not designed to respond to “do not track” signals sent by some browsers.
13. Updates
We may update this Privacy Policy from time to time. When we change this Privacy Policy in a material way, we will let you know by posting the update to our website and/or by letting you know by email if we have your email.
14. Contact us
Our contact details in relation to this Privacy Policy are as follows:
Evil Geniuses (EG) LLC
6701 Center Dr W, Ste 950
Los Angeles, CA 90045
United States of America
For individuals located in the EU or the UK, if you would like to raise a question or otherwise exercise your rights in respect of your personal information, you may do so by sending an email to DPR Group at datainquiry@dpr.eu.com quoting “Evil Geniuses — Play Gridlock” in the subject line, contacting us via the online webform at dpr.eu.com/datarequest, or mailing your inquiry to DPR Group at the most convenient address. Please refer clearly to Evil Geniuses in your correspondence.