CLEAR SUMMARY
This notice is a readable map of data handling: what can be collected, why it is needed, where control is available and how to make a privacy or security request. It is written to support informed choices, not to hide them in dense legal language.
This page is product information, not legal advice or a substitute for a case-specific decision.
Scope and controller
This policy applies to the public Guys Cast website, Guys ID member accounts, Guys Community, Guys Arena and the restricted Guys Nexus staff environment when they are provided from theguyscast.com. Guys Cast determines why and how account data is processed. It does not replace the privacy terms of an external platform you choose to use.
Information you provide
Depending on the feature you use, this may include your display name, email address, profile image, language, profile settings, communication preferences, messages sent through forms, community contributions, game participation, support requests and purchase-related records. Optional fields remain optional and are labelled in the interface.
Public profile and community content
Your display name, profile image, biography and content you intentionally publish may be visible to other people in the relevant public or community surface. Before publishing, the interface should identify what will be public. Drafts, private account controls, email addresses, security records and staff assignments are not treated as public profile content. Removing a public item hides it from active service views, although a limited copy may remain temporarily in backups, abuse records or lawful evidence.
Arena and gameplay records
Guys Arena may process game moves, match results, ratings, clocks, matchmaking signals, reconnect and abandon events, fair-play indicators and reports. These records are used to run matches, calculate results, protect competitive integrity, investigate abuse and provide match history. Public leaderboards or match views show only the fields identified by the interface; sensitive security signals are restricted to authorized staff.
Information collected automatically
When you use the service, our systems may process IP address, approximate region, browser and device type, operating system, language, timestamps, requested pages, referrer, session and device identifiers, cookie state, consent choices, error diagnostics, rate-limit signals and security events. We use these records to deliver the site, remember choices, measure reliability, prevent abuse and investigate failures. We do not use Guys ID sign-in data to build advertising profiles.
Uploads and media metadata
When a feature accepts an image, audio or video file, we may process the file itself together with practical metadata such as format, size, dimensions, duration, upload time and a generated integrity identifier. We use those details to validate the upload, create requested versions, show progress, prevent duplicates, recover failed work and enforce storage or safety limits. We do not claim ownership of your original media merely because it was uploaded.
Measurement without selling identity
We may use aggregated or de-identified service measurements to understand page reliability, device compatibility, feature usage and performance. We do not sell personal information, rent member lists or use Google Sign-In identity data to target advertising. If optional analytics or marketing technology is introduced later, it must be clearly identified and controlled through the applicable consent settings before it is enabled.
Google Sign-In
Guys Cast uses Google Sign-In to create or reconnect a Guys ID. The requested scopes are openid, email and profile. Google may provide a stable account identifier, verified-email status and, when available, your name, profile image and language. We use them only to recognize the same account, create or populate your profile, protect the session and check a staff role that was assigned separately. We never receive your Google password. This sign-in does not request Gmail, Google Drive, contacts, calendar or YouTube data and does not grant a management role by itself. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
How and why we use information
We process information to authenticate accounts; provide profiles, community and game features; deliver requested content and messages; preserve preferences; complete account, export and deletion requests; maintain availability; detect fraud, bots and unauthorized access; enforce platform rules; troubleshoot defects; improve accessibility and performance; and meet legal obligations. Where applicable, processing is based on providing the service you request, your consent, legitimate security and operational interests, or a legal requirement.
Cookies and local storage
Strictly necessary cookies and browser storage keep sessions secure, bind authentication to the requesting device, remember language and theme, protect forms and prevent replay. Optional measurement or communication choices are used only when enabled. Blocking necessary storage may prevent sign-in or account features from working. Session credentials are HttpOnly where the browser supports that protection and are not readable by public page scripts.
Service providers and disclosure
Cloudflare provides hosting, content delivery, storage, database, abuse prevention and network security. Google processes the Google Sign-In transaction on its own systems. Other processors may be used only when needed for a requested function, such as delivery, payment or support, and receive only the information required for that function. We may disclose information when legally required, to protect users or the service, or during a lawful organizational transaction with appropriate safeguards. We do not sell personal information and do not share Google user data for advertising.
International processing
Guys Cast and its infrastructure providers may process information in Canada, the United States and other locations where they operate. When information crosses borders, we use the contractual, technical and organizational safeguards available for the service and limit access to authorized operational purposes.
Who can access information
Internal access is limited by assigned role and operational need. Members do not gain staff access through ordinary sign-in. Authorized staff may access only the tools and records permitted for their role, while sensitive actions are subject to stronger authentication, audit records and revocation. We review access when responsibilities change and remove it when it is no longer required.
Security
Controls include encrypted transport, signed provider tokens, one-time OAuth state and nonce values, PKCE, short-lived authorization transactions, server-side sessions, device binding, CSRF protection, rate limiting, role checks, audit records and access revocation. Restricted staff tools require a separately assigned role and an additional verified factor; a normal member login cannot open Guys Nexus. No system is risk-free, so suspected compromise should be reported promptly through the Contact page.
Security incidents
We investigate suspected unauthorized access, contain affected credentials or sessions and preserve the minimum evidence needed to understand what happened. Where law requires notice, we notify affected people and the appropriate authority within the applicable period, using the contact information available to us. A security notice will not ask you to send a password, session cookie or one-time code.
Retention
We keep account information while the account is active and as needed to provide requested features. Session and security records are retained for operational security, fraud prevention, dispute handling and legal compliance, then deleted or de-identified when no longer required. A member-initiated account deletion request has a 30-day cancellation window before irreversible processing begins. Limited evidence may be retained after deletion when required for security, legal claims or statutory duties; it is access-restricted and is not used to recreate the account.
Backups, caches and deletion completion
Deletion removes the active account and connected records scheduled by the service. Copies in rotating backups, caches or delivery systems may disappear on their normal replacement cycle rather than instantly, and are not restored to active use except for disaster recovery. Legal, fraud-prevention or security evidence is separated, access-restricted and retained only for the period that justifies it.
Your controls and rights
Signed-in members can edit profile information, review or revoke sessions, change preferences, request an account-data export and request or cancel deletion during the 30-day window. You may also ask for access, correction, restriction or objection where applicable. We may verify identity before fulfilling a sensitive request. You can remove Guys Cast from Google Account third-party connections at any time; that stops future Google authorization but does not itself delete the separate Guys ID or replace a deletion request.
Canadian privacy principles
Where Canadian private-sector privacy expectations apply, PIPEDA’s fair-information principles are a useful reference for accountability, identified purposes, meaningful consent, limiting collection and use, safeguards, openness, individual access and challenging accuracy. This notice describes our product approach and does not determine which law applies to every person, transaction or location.
Automated decisions
Automated systems may flag spam, abuse, suspicious access or fair-play risk for protection and review. We do not use Google Sign-In profile information to make a solely automated decision that produces a legal or similarly significant effect. When a consequential moderation or account decision is made, an available review or contact path should be provided where appropriate.
Children
Guys Cast is not directed to children who are below the minimum age required to manage their own online account in their location. Do not create an account or submit personal information if you cannot lawfully consent. A parent or guardian who believes a child supplied information may contact us for review and removal.
Policy changes
When this policy changes materially, we update the effective date and provide an appropriate notice in the service. Earlier consent is not treated as permission for a materially different use that requires new consent.
Contact
Send privacy, data-rights or security requests through https://theguyscast.com/contact. Use the same address if you cannot access the signed-in account tools. Include enough information to identify the request, but never send a password, session cookie or one-time authentication code. Identity verification may be required before sensitive information is disclosed or changed.