WIRESYNDICATE

WireSyndicate Privacy & Telemetry Policy

Effective Date: October 25, 2026
System Architecture Baseline: v1.2.0 Release

WireSyndicate ("WireSyndicate," "we," "us," or "our") is dedicated to protecting the privacy of our business users, developers, brand partners, and the players who enjoy games powered by our infrastructure. This Privacy & Telemetry Policy outlines the categories of information we collect, how it is processed, and our strict Zero-PII commitment regarding end-user players.

1. Corporate Account & Identity Data (Web Platform)

1.1 Information Collected: When you create an account, register an organization, or execute campaign transactions on wiresyndicate.com, we collect:

  • Corporate contact information (Full name, work email address, organization name).
  • Authentication credentials (passwords cryptographically hashed via Argon2/bcrypt).
  • Financial identifiers (Stripe Customer IDs, transaction records, and invoice histories; full payment card numbers are collected directly by Stripe and never touch our servers).
  • Profile metadata (team member roles, notification preferences, UI experience mode).
    1.2 Purpose: This data is processed strictly to manage user authentication, enforce role-based access control (RBAC), facilitate payment fulfillment, and maintain audit ledgers.

2. In-Game Runtime Telemetry & Zero-PII Player Protection

2.1 Zero-PII Guarantee: The WireSyndicate Unity SDK and Godot SDK operate under an uncompromising Zero Personally Identifiable Information (Zero-PII) architecture.
2.2 Runtime Invariants:

  • No Device Fingerprinting: Our client SDKs do NOT collect device serial numbers, MAC addresses, IMEI identifiers, Advertising IDs (IDFA/GAID), or hardware GUIDs.
  • No Player Tracking: We do NOT harvest player gamer-tags, chat logs, persistent player profiles, or personal credentials.
  • COPPA & GDPR Compliance: Because our SDKs operate without collecting or transmitting personal data from game clients, WireSyndicate placements can be integrated into games of all age ratings (E through M) without violating child privacy regulations.
    2.3 Operational Spatial Telemetry: When an in-game placement node is rendered, the client SDK computes only:
  • Anonymous camera frustum gaze vectors (to verify whether an asset entered the player's line of sight).
  • Placement instance identifiers and texture resolution dimensions.
  • Ephemeral, salted HMAC impression verification tokens (imp_...) with short TTLs to prevent replay attacks.
  • Ephemeral IP addresses processed at the edge solely for coarse geographic routing (country/metro DMA level) and immediately discarded without persistent storage.

3. Cookies, Security, & Session Management

3.1 Essential Cookies: We utilize secure, encrypted HTTP-only session cookies (sb-access-token, ws_active_org) solely to maintain authenticated dashboard state and prevent cross-site request forgery (CSRF).
3.2 Bot & Sybil Protection: We implement Cloudflare Turnstile on public login and contact forms to prevent brute-force attacks and automated registration spam without tracking user browsing behavior across the web.

4. Infrastructure Subprocessors & Data Retention

4.1 Vetted Subprocessors: Corporate platform data is hosted and processed through tier-one cloud providers under strict Data Processing Agreements (DPAs):

  • Supabase / AWS: Primary relational database hosting and encrypted object storage.
  • Stripe: Merchant billing, PCI-compliant card processing, and developer payouts.
  • Upstash: Low-latency Redis caching and rate-limiting infrastructure.
  • Vercel: Edge runtime network and global CDN deployment.
    4.2 Data Retention: Account and financial transaction records are retained for the duration of the organization's active standing and as required by statutory financial compliance standards.

5. Data Subject Rights & Contact Information

5.1 Your Rights: Authorized account holders may access, update, or request deletion of their corporate account profile at any time by contacting our engineering cell.
5.2 Inquiries: For privacy inquiries, compliance questionnaires, or Data Processing Agreement requests, contact our Data Protection Officer at:
Email: privacy@wiresyndicate.com
Address: WireSyndicate Legal & Privacy Operations, 1209 Orange Street, Wilmington, DE 19801