Data & Security

There are several features available through the management page that enable you to control data handling.

IP Truncation Options

Gamesight uses one-way hashes (SHA-256) on all information related to the IP addresses of your users before storage to ensure the privacy and security of your data, as outlined in the Data Handling Details document. If you wish to further anonymize this information, we provide the option to truncate IP addresses for certain regions by dropping last octet of the IP (commonly referred to as IP obfuscation or anonymization).

Using the below control you can choose to truncate IP addresses originating from countries with heightened personal data privacy laws (such as Germany or the EU under GDPR). Changing this setting will likely affect the attribution accuracy for your game in the selected region. Please consult with legal council to determine the best data handling policy for your company.

Data Retention Options

You may use these settings to control how long we retain raw logs for the event, click, and impression data that you send to Gamesight. Changing your data retention doesn't affect our standard reports but could prevent us from providing detailed custom reports on historical data or trends.

Reset on new activity

Enable this setting to reset the retention period for a user's data each time we receive new data for the user. Disabling this option will cause old user data to be removed even if the user is still active.

User Opt-Outs

The Gamesight platform offers two different methods for managing user opt-outs. These tools enable your company to have complete control over the data privacy of your end users. The two parts of the opt-out process are disabling web tracking and adding the user to the Do Not Track list preventing the collection of in-game data.

Web Tracking

For managing opt-outs on impressions and clicks users can opt-out directly by loading the following webpage in their browser.

https://gsght.com/optout

Ensure that the tracking domain for your installation of Gamesight matches the one above (it may be different than gsght.com). This will place an opt-out cookie on the user's device with a 10 year expiration.

In-Game Events

For managing opt-outs of in-game event collection we recommend that you provide an option in your game client to allow users to enable or disable telemetry. If this is not possible, we also provide an explicit Do Not Track feature in the Gamesight console. You simply need to add the user's in-game ID to the list. This will block events from being logged for any event that is tagged with that user id.

The in-game event opt-out list may also be updated through our Do Not Track API.

Right to Access & Erasure Requests

Gamesight enables your company to comply with both Right to Access and Right to Erasure requests under GDPR. These requests can be processed programmatically via our GDPR APIs, or through your Gamesight account's dashboard. Both options function equally, so be sure to use the method that works best for you and your team.

GDPR APIs

GDPR Requests can be processed using our GDPR APIs which allows you to programmatically submit requests for data access or removal.

To get started you will need to generate a new API Key with the GDPR scope using the API Key Management system. Note that data removal requests may take several hours to take full effect across all systems.

Management Console

In addition to our GDPR APIs, you can quickly and easily request data for users or remove user data directly through your Gamesight account's dashboard on the Management page.

Once you are on the Management page, click "Data & Security" below the Game column to view the Data & Security options as shown below.

You can use the Data Access option to request data for a specific User ID. This can not only help you fulfill data access requests that you may receive, but you can also utilize the data request to validate your integration status. An example of a Data Access request is shown below.

You can also use the Data Removal feature to request data removal for either an individual user, or a group of users, by providing User IDs as shown below.

The Data Removal request will remove all data related to a user, which includes all events that have been logged for them. This feature can also be used for removing test data from your game while testing your integration and running attribution tests.