This page says what LOBBYIT keeps about you, why, who else handles it, and how to get it
deleted. It's written to be read, not skimmed past.
The short version
LOBBYIT keeps your email, your profile, what you post, and your squad history.
It never asks where you are. "Region" is a continent-sized choice you pick yourself.
Squad voice goes phone to phone. It is never recorded and never reaches a server.
It shows no ads and does not track you across other apps or websites.
It never sells or rents your information to anybody.
You can delete your account from inside the app, and it takes your data with it.
Who is responsible for your data
The data controller is Iam The Protagonist Ltd, trading as LOBBYIT and The
It Group, a private limited company registered in England and Wales, company number
16842280, registered office 60 Hay Lane, London, NW9 0NB. Registered with the Information
Commissioner's Office, registration number ZC272634. Email
theitgroupapps@gmail.com.
1. What we collect, and why
Everything below is something the app genuinely stores. Nothing is listed that it doesn't.
Your account — your email address, or the identifier Apple or
Google gives us when you sign in with them. To create your account and sign you in.
Legal basis: contract.
Your profile — your callsign, your emblem (a number that draws a
shape, or a photo if you upload one), the region and platform you chose, the languages you
speak, whether you use a mic, the games and ranks on your card, the hours you're usually
free, and how strict you want matching to be. This is what other players see when they're
deciding whether to stack with you. Legal basis: contract.
Your gamertags — the in-game IDs you add, shown to the squad once
it fills so people can actually add each other.
Legal basis: contract.
What you do in the app — messages, squads, standing requests,
friendships, ratings you give and reports you make.
Legal basis: contract.
Your Discord server — only if you link one, and only the server
and channel details needed to post there.
Legal basis: consent, withdrawn by unlinking.
Subscription status — whether you're on Pro, when it runs out,
and the receipt identifier the store gives us. We never see your card number
— the whole payment happens inside Apple's or Google's own systems.
Legal basis: contract.
Push notification token — the address your phone gives us so a
notification can reach it. Legal basis: consent, withdrawn by turning
notifications off.
Crash reports — when the app breaks: the device model, the OS and
app version, and where in the code it happened.
Legal basis: legitimate interests — running an app that works.
Which screens get used — a small event each time something
significant happens, like a squad filling, so we can see where the app is going wrong. No
third-party analytics company is involved; these stay in our own database.
Legal basis: legitimate interests.
Emails you send us — to answer them.
Legal basis: legitimate interests.
What we deliberately don't collect: your location — the app has no
location code in it at all and never asks the phone for it; your contacts; your photos
beyond one you choose to upload as an emblem; anything about what you do in other apps. We
don't sell your data, we carry no advertising, and we don't use Apple's App Tracking
Transparency because we don't track you across other companies' apps.
2. Who else handles it
We use other companies to run the app. They only get what they need for their job, under a
contract that stops them using it for anything else.
Supabase — the database, the uploaded emblems, sign-in, and the
account emails. Hosted in London, United Kingdom.
Apple and Google — sign-in, push notifications, app distribution
and billing. United States.
Sentry — crash reports. Germany (their EU region).
Discord — only if you link a server. United States.
Vercel — this website, and the pages behind shared squad and
profile links.
Where a provider is outside the UK, the transfer is covered by the UK International Data
Transfer Addendum or the UK's adequacy regulations for that country.
Other players see your profile, your emblem, your games and ranks, whether you're online,
and anything you send in a squad. Your email address is never shown to another player.
We'll share data if the law requires it — a court order, a lawful request from the
police or a regulator — and to protect someone's safety.
3. How long we keep it
Your account and what's in it: while your account exists, then deleted within 30 days of
you deleting it.
Messages you sent may remain visible to the people you sent them to, without your name
attached — the same way a conversation does not vanish from the other person's
phone.
Records connected to a suspension or an abuse report: up to 12 months after the account
closes, because otherwise a ban is undone by making a new account.
Crash reports and usage events: 90 days.
Backups: up to 30 days, after which deleted data is gone from them too.
Payment records: we hold no payment records, because we never take the payment. Apple
and Google keep theirs under their own policies.
4. Your rights
Under UK data-protection law you can ask us to:
show you what we hold about you, as a copy, usually within a month;
correct it;
delete it — which you can also do yourself, from
Delete account on the YOU tab inside the app;
give you a copy in a form you can take elsewhere;
stop using it for a particular purpose, or object to
our legitimate-interests uses;
withdraw consent for anything that was based on it, like notifications
or a linked Discord server.
Email theitgroupapps@gmail.com and we'll reply
within one month. Wherever you live, that request will be honoured — there is no need
to establish that a particular law applies to you first. If you're not happy with how we
handle it you can complain to the Information Commissioner's Office at
ico.org.uk/make-a-complaint or on
0303 123 1113.
5. Children
LOBBYIT is not for anyone under 13, and accounts are not knowingly created for them. If you
believe a child under 13 has an account, email us and we'll delete it.
6. Security
Data is encrypted in transit and at rest with our hosting providers. Access to it is limited
to the people who need it to run the app. No system is perfect; if we ever have a breach
that puts you at risk we'll tell you and the ICO as the law requires.
7. Cookies and tracking
The app itself sets no cookies. This website sets none either — it has no analytics,
no tag manager and no third-party scripts.
8. Changes
If how we handle data changes, this page is updated first and the effective date above
changes with it. For anything significant we'll tell you in the app or by email.
9. Contact
Iam The Protagonist Ltd, trading as LOBBYIT and The It Group
Registered in England and Wales, company number 16842280
Registered with the Information Commissioner's Office, registration number ZC272634
60 Hay Lane, London, NW9 0NB, United Kingdom theitgroupapps@gmail.com