PocketBytePocketByte

Privacy Policy

Last updated: October 13, 2026

1. Introduction

PocketByte ("we", "us", "our") operates the PocketByte mobile application and the website at pocketbyte.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including the PocketByte app for ChatGPT and the PocketByte connector for Claude and other AI assistants (section 7).

The controller responsible for data processing is Share a Wish Technologies GmbH, Op'n Dörp 2, 24217 Barsbek, Germany, represented by its managing director Florian Holtorf (operator of PocketByte, see Imprint), email contact@pocketbyte.io.

2. Information We Collect

We may collect the following types of information:

  • Account information: Email address, username, display name, profile picture
  • User content: Games you create and publish, comments, ratings, feedback
  • Gameplay videos ("reels"): Screen recordings of gameplay that you choose to record, edit, and publish, including any captions, text overlays, audio tracks, and thumbnails you add
  • Usage data: Game play statistics, feature usage, session duration
  • Device information: Device type, operating system, app version, device language/locale
  • Purchase data: Credit purchase history (payment processing is handled by Apple/Google)
  • Reports & feedback: Content reports, app feedback, bug reports you submit

Gameplay videos are created and uploaded only when you actively record and publish them. Because a recording captures whatever is shown on screen, please make sure it does not contain personal data (yours or anyone else's), private messages, or third-party content you are not allowed to share. You confirm this before publishing.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve our services
  • Process transactions and manage your credit balance
  • Display your published games and creator profile to other users
  • Send important service-related communications
  • Investigate reports and enforce our Terms of Service
  • Analyze usage patterns to improve the user experience
  • Prevent fraud and ensure platform security

4. Data Sharing

We do not sell your personal data. We may share information with:

  • Service providers: Cloud hosting (Supabase), AI model providers (Anthropic, OpenAI), push notifications (Google Firebase Cloud Messaging) — only the minimum data necessary to provide the service
  • Advertising partners: Google and Meta, only if you agree to ad measurement in the app (see section 5)
  • Legal requirements: When required by law, regulation, or legal process
  • Safety: To protect the rights, safety, or property of our users or the public

Your published games and public profile are visible to all users of the Platform.

5. Ad Measurement (Google & Meta)

We advertise PocketByte on Google (Google Ads) and Meta (Instagram, Facebook). To measure which ads lead to installs and to optimize our campaigns, the app contains Google Analytics for Firebase (Google Ireland Limited) and the Meta SDK (Meta Platforms Ireland Limited). Both are switched off by default and only become active after you agree in the app ("Ad measurement"). You can withdraw your consent at any time in the app under Settings → Ad measurement.

  • What is sent: app events (app start and install, sign-up, created games, paywall views, checkout starts, purchases with price and currency, created matches and challenges), device and app information (device model, operating system, app version, language, IP address) and device identifiers (app instance ID; on Android the advertising ID; on iOS the advertising identifier only if you also allow tracking in the iOS prompt)
  • What is not sent: the content of your games, your prompts and messages, your email address or your name
  • Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG)
  • Transfers: Google and Meta may process data in the USA, based on the EU–U.S. Data Privacy Framework and standard contractual clauses. For some purposes they act as independent controllers; see the privacy policies of Google and Meta
  • Retention: event data in Google Analytics is kept for 2 months; Meta keeps event data according to its own policy

If you decline, neither SDK sends events. Apple and Google may still report aggregated install counts for ad campaigns from their app stores; these do not identify you.

6. AI Processing & Content Moderation

When you create games, your prompts and instructions are sent to third-party AI providers (such as Anthropic and OpenAI) for processing. These providers have their own privacy policies and data handling practices. We send only the minimum information necessary for game generation and do not share your personal account data with AI providers.

To keep the community safe, content you publish (including games, captions, comments, and gameplay videos) may be reviewed using a combination of automated systems (including AI-based moderation) and human review. This helps us detect and act on content that violates our Terms of Service, such as illegal, harmful, or infringing material.

7. PocketByte in ChatGPT, Claude and Other AI Assistants

You can use PocketByte from AI assistants: the PocketByte app in ChatGPT (server endpoint pocketbyte.io/api/mcp-chatgpt) and the PocketByte connector for Claude and other assistants that support the Model Context Protocol (MCP) (endpoint pocketbyte.io/api/mcp). In both cases the assistant's own AI model writes the game; PocketByte tests, stores, shows and, on request, publishes it. PocketByte is not affiliated with or endorsed by OpenAI or Anthropic.

  • What our tools receive:only the inputs the assistant sends to a PocketByte tool for your request — for example a game's title, description, genre and code, a change description, the assistant's model name (shown as "Built with …"), search keywords, game ids, and (Claude connector only) image or 3D model files you ask it to upload. We do not request or receive your chat history, other conversations, your location or your contacts.
  • Anonymous previews (ChatGPT, without sign-in): if you have not connected a PocketByte account, a game you create is stored as a private preview (code, title, description, versions, automatic test results) for 24 hours and then deleted automatically. A preview is bound to a one-way hash (SHA-256) of the anonymous user identifier ChatGPT sends with each request, so only you can open, edit or save it; we never receive your name or email for previews. Previews are never listed or published and can only be played through an expiring signed link.
  • Abuse prevention and rate limits: to limit abuse we store a one-way hash of the requesting IP address with each preview (deleted with the preview after 24 hours) and keep short-lived, in-memory request counters keyed by hashed identifiers. We do not use these identifiers for tracking, profiling or advertising.
  • Account linking (OAuth):to save, list or publish games, you connect your PocketByte account. You sign in on pocketbyte.io (OAuth 2.1 with PKCE, operated with our authentication provider Supabase), and the assistant receives an access token for your PocketByte account. We never see your ChatGPT or Claude password, and OpenAI or Anthropic never see your PocketByte password. With this token the tools can read your basic profile (account id, username or display name, email address — used to show which account is connected), list and read your games, create and edit private draft games and new versions, upload assets (Claude connector), and publish a game when you ask for it. They cannot delete your games, change your account settings, make purchases or access payment data. You can disconnect PocketByte at any time in the assistant's settings, and revoke an assistant's access (including its refresh tokens) on pocketbyte.io/oauth/grants.
  • Testing and content review: each saved game is run automatically in a headless browser on our servers (phone smoke test). When you publish, the game code, title and description are additionally checked by an automated content review that uses an AI model provider (Anthropic). Published games are public like any other PocketByte game.
  • What the assistant receives back:tool results (for example a game's title and status, test results, search results or your games list) are returned to the assistant and processed by OpenAI or Anthropic under their own privacy policies.
  • No sale, no ads: we do not sell data from these integrations, do not show ads in them, and do not share them with advertising partners (section 5 applies only to the mobile app).
  • Retention: anonymous previews and their hashed identifiers 24 hours; games saved to your account are kept like other account content until you delete them or your account (section 10).
  • Legal basis: performance of the service you request (Art. 6(1)(b) GDPR) and our legitimate interest in preventing abuse and keeping the service secure (Art. 6(1)(f) GDPR).

8. Music & Audio

You can add audio to gameplay videos from our in-app library. This library uses tracks from third-party sources such as Freesound that are made available under their respective licenses. When you select a track, we store a reference to it and its attribution together with your video. You must not upload or add copyrighted music that you do not have the rights to (for example, commercial tracks from streaming platforms).

9. Publishing to Our Own YouTube Channels (YouTube API Services)

To publish our own videos to our own YouTube channels, we use an internal tool ("SMA Publisher", a self-hosted instance of the open-source software Postiz at postiz.whispergames.ai) that uses the YouTube API Services provided by Google. The tool is used only by our own team; it is not offered to the public and does not process any data of PocketByte users or website visitors.

When one of our channels is connected via Google OAuth, the tool receives the channel ID, channel name and profile picture and the permission to upload videos and set their title, description, privacy status and thumbnail, and it reads basic statistics (e.g. views, likes) of our own uploaded videos. Only the OAuth tokens and this basic channel data are stored, on our server in Germany; they are not shared with third parties.

By using the YouTube API Services, the YouTube Terms of Service and the Google Privacy Policy apply. Access can be revoked at any time in the Google security settings. After revocation, or on request to contact@pocketbyte.io, we delete the stored tokens and channel data within 7 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission, secure database access controls, and regular security reviews.

11. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Published games may be anonymized rather than deleted.

Gameplay videos you publish are stored until you delete them or your account. When you delete a video or your account, the video file and its thumbnail are removed from public access. We may retain copies of reported content and related records for a limited period where necessary to handle reports, prevent abuse, or comply with legal obligations.

12. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict certain processing activities
  • Request a portable copy of your data
  • Withdraw consent at any time where processing is consent-based

To exercise these rights, contact us at contact@pocketbyte.io.

13. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we learn we have collected such data, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Your continued use after changes constitutes acceptance of the updated policy.

15. Contact

If you have any questions about this Privacy Policy, please contact us at: contact@pocketbyte.io