PLAYROLL · PRIVACY
Privacy Policy
What we collect when you play, build or sign up, why we collect it, and the choices you have.
Effective Date: October 4, 2026|Last Updated: October 4, 2026
See also our Terms of Use.
Our commitment to your privacy
playroll.live is run by Norad Tech (PT Norad Technology Extensions and Norad Tech FZ LLC, together "Norad," "we," "us" or "our"). This policy covers playroll.live, the Plays on it, and the ZappyPlay studio (also called NudgePlay Studio).
You can play on playroll without an account and without telling us who you are. We only ask for personal details when you join the waitlist or use the studio.
1. Information we collect
Information you give us
- Waitlist: your email address and whether you are joining as a player, builder or brand
- Studio account: email address, mobile number, LinkedIn profile URL and company name
- Messages: anything you send us by email or through a form
Content you upload to the studio
When you build or remix a Play, we store what you upload, including:
- Brand assets (logos, images, graphics)
- Game content (sounds, videos, animations, text)
- Business data (offers, links, redemption codes, campaign results)
- Your settings and preferences
When you play
- Likes and play counts: when you open or like a Play, we add one to that Play's public total. The totals are anonymous and are not linked to you.
- On your device: your browser remembers which Plays you have played and liked, so the New feed can show you fresh Plays and you cannot like a Play twice. This stays in your browser's local storage, and we do not receive it.
Scores in our own Plays last for your session only and are not stored by us.
Technical and usage information
If you accept analytics cookies in our cookie banner, Google Analytics collects:
- IP address and device information
- Browser, operating system and screen details
- The website that sent you to us
- Pages viewed, Plays opened and how you interact with them
- Session length and how often you visit
If you decline, these analytics tags do not run.
2. How we use your information
Running playroll
- Serve Plays and build your feeds (For You, Trending, New, Rewards)
- Show like and play counts on each Play
- Give studio users access to ZappyPlay and store their uploads
- Generate AI-built Plays, remixes and performance reports
Talking to you
- Send your early access invite if you joined the waitlist
- Send account and security messages to studio users
- Answer your questions and support requests
- Send product news, only if you have agreed to receive it
Making playroll better
- Understand which Plays people finish, share and remix
- Fix problems and improve speed and reliability
- Develop new features and improve Zappy
Legal and security
- Comply with applicable laws
- Prevent fraud, abuse and reward cheating
- Enforce our Terms of Use
3. Plays made by brands and creators
Some Plays on playroll are made by or for brands and community creators, and some load from other websites. If a Play asks you for details, for example to claim a reward or a discount code, the brand or creator behind it decides how those details are used, under its own terms and privacy policy. Please read them before you share anything.
4. Who we share information with
Service providers
We use trusted providers to run our services:
- Website hosting: SleekCMS hosts playroll.live
- Studio and game hosting: Amazon Web Services (AWS)
- Analytics: Google Analytics, only with your consent
- Counters: an independent counter service stores the anonymous like and play totals
- Email: Amazon SES
- Payments: secure payment gateways, when payments are offered
How providers must treat your data
- Access only the information they need
- Keep it confidential and secure
- Never use it for their own purposes
When the law requires it
We may disclose information to:
- Respond to valid legal requests from authorities
- Protect the rights, property or safety of Norad, our users or others
- Investigate breaches of our Terms of Use
- Do anything else you have explicitly agreed to
6. Security and retention
How we protect data
- Encryption in transit (TLS) for every page and Play
- Encrypted storage for sensitive information
- Role-based access controls and monitoring
- Regular security reviews
How long we keep it
- Waitlist: until you ask us to remove you or we no longer need it for the launch
- Studio accounts: while your account is active; data may be archived after 12 months of inactivity
- Account deletion: data is permanently deleted within 30 days of closure
- Legal requirements: some data may be kept longer if the law requires it
7. Your rights and choices
Access and control
Email us at any time to:
- See a copy of the information we hold about you
- Correct anything that is wrong
- Delete your information, including leaving the waitlist
- Get your data in a standard format (JSON or CSV)
Studio users can also update their profile in Account Settings.
Your choices
- Accept or decline analytics in the cookie banner
- Unsubscribe from product news through the link in any email
- Object to processing for marketing purposes
- Clear your browser storage to reset what playroll remembers on your device
8. International data transfers
We operate from Indonesia and the United Arab Emirates, and our providers may process data in other countries. Wherever your information is processed, we protect it to the standards in this policy and as applicable law requires.
9. Children's privacy
playroll and the ZappyPlay studio are not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us their details, contact us and we will delete them.
10. Updates to this policy
We may update this policy as playroll grows or the law changes. When we make a material change, we will update the date above and give notice on playroll, and by email where we have your address, at least 30 days before it takes effect.