1. Information we process
The information we process depends on the features you use and may include:
- Account and platform information: username, platform identifier, PlayFab identifier, authentication information, account status, and gameplay records.
- Communication and moderation information: voice communications handled by Vivox, locally generated speech-to-text transcripts, selected transcript fragments, text-chat content, player reports, moderation classifications, explanations, recommended actions, and enforcement or appeal records.
- Device and network information: IP address, device type, operating system, application version, crash or diagnostic data, connection information, and feature usage.
- Approximate location: general location inferred from an IP address. Roadside does not collect precise GPS location.
- Purchase information: product, entitlement, and transaction status. Meta and Steam process full payment-card information under their own privacy notices; we do not receive your complete payment-card number or security code.
- Support information: messages and other information you provide when contacting us or submitting a privacy request.
United States category summary
| Category | Examples relevant to Roadside | Processed? |
|---|---|---|
| Identifiers | Username, account or platform ID, IP address | Yes |
| Commercial information | Entitlements, purchases, transaction status | Yes |
| Internet or network activity | Connection, diagnostic, log, and feature-usage data | Yes |
| Geolocation | Approximate location inferred from IP address | Yes, approximate |
| Audio, electronic, or similar information | Vivox voice communications, transcripts, text chat, and reports | Yes |
| Inferences | Safety classifications and recommended moderation actions | Yes |
| Sensitive information | Information that may be incidentally contained in player communications | May be included |
| Biometric identifiers | Voiceprints used to identify a person | No |
Sources
We receive information directly from you, automatically from your device and use of the Services, and from platform or service providers such as Meta, Steam, Microsoft PlayFab, and Unity Vivox when they provide account, entitlement, communications, or service data.
2. Voice and text moderation
Roadside uses a layered moderation process intended to reduce unnecessary transmission of player communications:
- Vivox provides multiplayer voice chat.
- Speech recognition can create text locally on the device.
- Safety indicators select transcript fragments for review.
- Cloudflare relays selected text to OpenAI for classification.
- What OpenAI receives: selected text transcript fragments and the instructions needed to classify them. A fragment may include an incomplete speech-recognition result if it triggered a safety indicator.
- What the moderation feature does not send to OpenAI: raw microphone audio. This does not change the fact that Unity Vivox processes audio to provide multiplayer voice chat.
- Why fragments are selected: local safety indicators may look for potentially harmful words, phrases, partial words, or spelling variations. A match is only a signal; context is considered by the moderation model.
- Moderation output: OpenAI may return a violation classification, an explanation, and a recommended action. We may use that result for safety, enforcement, review, and appeals.
Voice and text moderation can make mistakes. A keyword match by itself does not necessarily establish a violation, and ordinary in-game statements may be allowed depending on context.
3. How we use information
We may use personal information to:
- create, authenticate, maintain, and secure player accounts;
- provide gameplay, multiplayer, voice-chat, purchases, and support features;
- detect, investigate, and respond to harassment, hate, threats, sexual exploitation, self-harm encouragement, doxxing, fraud, cheating, or other violations;
- issue warnings, communication restrictions, suspensions, or bans and handle appeals;
- diagnose errors, protect our systems, and improve performance and reliability;
- comply with legal obligations, enforce our terms, and protect players or other people; and
- improve OpenAI models when the separate model-improvement sharing described below is enabled.
4. Legal bases
Where applicable law requires a legal basis, we rely on one or more of the following:
- Contract: processing needed to provide the Services you request.
- Legitimate interests: protecting players, enforcing rules, preventing abuse or fraud, securing the Services, and improving reliability, balanced against your rights.
- Consent: where we ask for permission, including where consent is required for a particular use or category of information. Consent may be withdrawn for future processing.
- Legal obligations and vital interests: complying with law or responding to a serious risk of harm.
Model-improvement sharing is a secondary purpose and is not required to perform the core safety classification. Where applicable law requires consent or an opt-out for that sharing, we will provide the required choice.
5. When and with whom we disclose information
We disclose information only as reasonably needed for the purposes described in this notice.
| Provider | Purpose | Information involved |
|---|---|---|
| OpenAI | AI-assisted safety classification and, when enabled, model improvement | Selected transcript fragments, moderation instructions, and model outputs |
| Cloudflare | API request handling, security, and infrastructure | Selected transcript fragments, request metadata, IP and security logs |
| Unity Vivox | Multiplayer voice communications | Voice audio, voice-service identifiers, connection information |
| Microsoft PlayFab | Player accounts, game data, backend services, and enforcement records | Account IDs, authentication, gameplay and moderation records |
| Meta and Steam | Platform access, authentication, purchases, and entitlements | Platform IDs, entitlement and transaction status, device or service data |
Providers process information under their own terms and privacy documentation. We may also disclose information to professional advisers, authorities, or transaction counterparties when reasonably necessary for legal compliance, safety, claims, financing, reorganization, merger, acquisition, or sale of assets.
7. Automated moderation and appeals
Automated systems may identify communications, classify potential violations, and recommend actions. These results may contribute to warnings, communication restrictions, temporary suspensions, or account bans. They are safety signals and can be incorrect.
You may contest a moderation action through our contact form. Where required by applicable law, we will provide information about the main factors involved and a way to request human review of a decision made solely by automated means that produces legal or similarly significant effects.
8. How long we keep information
We keep information only as long as reasonably necessary for the purposes described here, including providing accounts and gameplay, investigating abuse, enforcing rules, handling appeals, maintaining security, resolving disputes, and meeting legal obligations. Retention depends on the type of record, the seriousness of an incident, and whether an account or dispute remains active. We delete or de-identify information when it is no longer needed, unless law permits or requires longer retention.
OpenAI API retention
OpenAI's published API data controls state that default abuse-monitoring logs may contain prompts,
responses, and related classifier metadata and may generally be retained for up to 30 days, subject
to stated exceptions. The OpenAI Responses API has a 30-day application-state retention period by
default or when its store setting is true, and response data is stored for at least 30
days. Model-improvement sharing, when enabled, is subject to OpenAI's applicable terms and data controls.
See OpenAI API data controls.
Other providers, including Cloudflare, Unity Vivox, Microsoft PlayFab, Meta, and Steam, retain data according to the applicable service configuration, contracts, legal requirements, and their privacy documentation.
9. International transfers
Lifeworks is based in the United States, and our providers may process information in the United States and other countries. Those countries may have privacy laws that differ from the laws where you live. Where required, we rely on appropriate transfer safeguards, which may include contractual protections such as standard contractual clauses. Contact us for more information about safeguards applicable to a particular transfer.
10. Security
We use reasonable technical and organizational measures designed to protect personal information, including limiting the moderation data selected for external review and using encrypted network connections where supported. No system or transmission can be guaranteed completely secure.
11. Children and minors
Roadside is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without any notice and verifiable parental consent required by law. Users must also meet the minimum age and parental-consent requirements of their platform and country.
If you are a parent or guardian and believe a child provided personal information without required authorization, contact us at [email protected]. We will investigate and take appropriate steps, which may include deleting information or restricting communication features.
12. Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, or a copy of your personal information; object to or restrict processing; withdraw consent; opt out of certain sales, sharing, targeted advertising, or profiling; and appeal the denial of a request. These rights may be subject to legal exceptions.
Submit a request through our contact form or email [email protected]. We may request information reasonably necessary to verify your identity and authority. Authorized agents may submit requests where allowed by law, subject to verification.
We will not discriminate against you for exercising an applicable privacy right. If you are in the EEA, United Kingdom, Switzerland, or another jurisdiction with a privacy regulator, you may also have the right to complain to that regulator.
13. Updates and contact
We may update this notice to reflect changes to Roadside, our providers, or legal requirements. We will update the date at the top and provide additional notice when required for a material change.
Lifeworks Entertainment, LLC
United States
Email: [email protected]
Privacy requests: https://www.lifeworksent.com/contact-us