Privacy

How we handle your details

Last updated 15 October 2026. This page covers playmill.io and its waitlist form.

Who we are

The controller of your personal data is EXYZ Studio LTD (ЕХИЗ Студио), a company registered in Bulgaria, UIC 208888786, registered office: 12 Tri Ushi Str., fl. 1, office 1, Vazrazhdane district, 1303 Sofia, Bulgaria.

For anything about your data, write to artjoms.usmanovs@exyz.studio.

What we collect

• What you type into the waitlist form: your name, work email, and, if you choose to add them, your company, role, game store link, the answers you pick (volume, networks, mechanics and so on), what you find hardest about creatives, how you heard about us, and your message.
• When you sent it.
• Your IP address, briefly: kept in the server's memory for 10 minutes to limit repeated submissions, never written to disk or logs.

We do not use cookies, ad trackers or tracking pixels. We count visits with Cloudflare Web Analytics: it sets no cookies and does not identify you; it sees the page address, the referring site, your browser type and your country, and keeps only aggregate counts.

Why we use it

Only to contact you about the Playmill beta: to invite you, to plan a pilot with you, and to decide whom to invite first. The legal basis is your consent (Article 6(1)(a) GDPR), given with the checkbox on the form. No newsletters, no selling, no sharing with anyone outside the providers below.

Where it is stored and who processes it

• DigitalOcean hosts the site and stores the waitlist on a server in Amsterdam, the Netherlands.
• Brevo (Sendinblue SAS, France) delivers one notification email per submission to our team.
• Google Workspace hosts our team mailbox where that email arrives.
• Google Fonts serves the page fonts, so your browser sends your IP address to Google when it loads them.
• Cloudflare serves our product video from media.playmill.io and manages our DNS, so your browser sends your IP address to Cloudflare when it loads the video. Cloudflare Web Analytics also counts visits to these pages, without cookies.

Each of these providers works under a data processing agreement or its own terms that comply with GDPR. Some of them may process data outside the EU under the safeguards the GDPR requires, such as Standard Contractual Clauses.

How long we keep it

Until the beta waitlist closes, and no longer than 24 months after you sent the form. If you ask us to delete your details, we do it within 30 days, usually much sooner.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it or hand it to you in a portable format, and you can withdraw your consent at any time. Withdrawing it does not affect what we did before. Write to the address above; we answer within one month.

You can also complain to a data protection authority. Ours is the Commission for Personal Data Protection of Bulgaria (cpdp.bg); you can also go to the authority where you live or work.

Changes

If we change how we use your data, we update this page and its date. We will not use your details for anything new without asking you first.