Privacy Policy
1. Information collection and use
We collect and store information provided by users through the sign-up form and user profiles. This information may include your username, email, other contact information, Discord username, Twitter username, and other personally identifiable information ("Personal Information"). We use this information to communicate with you, provide site-related information, and improve our services. Additionally, when you visit our Site, we collect certain data sent by your browser, such as your IP address, browser type, browser version, the pages you visit, and other statistics ("Log Data").
2. Google and YouTube User Data
The Crimson Market and its apps, Social Riddle (www.thecrimsonmarket.com/socialriddle) and Megaphone (www.videoeditoraifree.com), use one Google sign-in, shown on Google's consent screen as The Crimson Market. This section explains what each of them reads from your Google account and YouTube, and why.
- Sign in with Google. We read your name, email address and profile picture to create and sign in to your account. With the "See your YouTube account" permission we also look up the IDs of the YouTube channels you own, once at sign-in, and store only those channel IDs on your account, so Social Riddle can recognise your comments when you enter a giveaway. We do not keep the Google access token from sign-in.
- Social Riddle. When you connect your YouTube channel to run a giveaway, we list your uploaded videos with their titles, thumbnails and view and like counts so you can choose one, and read the public comments on the video you choose to find eligible entries and pick a winner. We store the comments entered into a giveaway (the commenter's channel name and ID, the comment text and its time) and the result (the video's title and thumbnail, and the winner's name, channel and profile picture).
- Megaphone. When you connect a YouTube channel we read its ID, title and thumbnail, and when a short you scheduled comes due we upload it to that channel with the title, description and visibility you chose. Megaphone's privacy policy describes this in full.
We do not read your private videos' contents, your YouTube analytics, your Gmail or any other Google data. Access tokens for connected YouTube channels are stored encrypted and used only for the purposes above.
These apps use YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy. You can remove our access at any time from your Google security settings. To have the YouTube data we hold about you deleted, email [email protected] with the subject line "Personal Data Request"; we delete it within 7 days.
The Crimson Market's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never passed to the advertising or analytics providers described in section 4.
We do not sell, rent, transfer, or share Google user data with any third parties except in the following limited circumstances:
- When required to comply with applicable law, regulation, legal process, or enforceable governmental request.
- To protect the security or integrity of our services.
- To investigate fraud, abuse, or violations of our terms.
Google user data is used only to provide the features described above. We do not use Google user data for advertising purposes.
3. Data Protection and Security Measures
We implement appropriate technical and organizational safeguards to protect personal information and Google user data from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit using HTTPS/TLS.
- Secure server infrastructure and access controls.
- Restricted internal access to user data.
- Monitoring and logging of system access.
Google user data is stored only as long as necessary to provide the requested service and is deleted when no longer required.
4. Advertising and analytics
We use third-party services, including Google Analytics and Playwire, to collect, monitor, and analyze user activity on our Site. These services help us understand user preferences, improve our content, and implement remarketing services. By accessing the Site, you consent to the collection and use of your information by these third-party vendors. We recommend reviewing their privacy policies and contacting them for any inquiries or concerns. Users accessing the site from the UK can opt out of targeted advertising as per GDPR guidelines.
5. Communications
We may use your Personal Information to contact you for account assistance or send site-wide notices. Additionally, we may provide interactive communications to enhance your experience using the email address you provided. You can unsubscribe from these communications by clicking the unsubscribe button in your profile settings.
6. Cookies
Our website uses cookies for the sole purpose of authentication and system logging. These cookies are essential for the proper functioning of our services and are not used for any other purposes. We do not intentionally share cookies or their associated data with third parties. Your privacy and data security are of utmost importance to us.
7. Data retention
We will store your information only as long as necessary to fulfill the purposes for which it was collected and processed. If you withdraw your consent or object to the processing of your data, we will delete your personal information unless other legal grounds exist or applicable law requires us to retain the data.
8. Your data rights and choices
We respect user rights regardless of their location. You have the right to access, correct, update, amend, or delete your personal data. You can submit a data access request by emailing [email protected] with the subject line "Personal Data Request." To exercise other rights or lodge a complaint, contact us using the same email address. We encourage resolving concerns directly with us before contacting the supervisory authority.
9. Your rights under GDPR
If you are located in the European Economic Area, you have certain rights under the General Data Protection Regulation (GDPR). These rights include access, rectification, erasure, restriction of processing, withdrawal of consent, data portability, and objection. To exercise these rights, contact us at the email address provided in section 8 of this Privacy Policy.
