Lights Out
GitHub
Legal & privacy

Privacy Policy

How player data supports Lights Out.

Last updated: September 17, 2026

Lights Out is an independently operated community project based in Minnesota, United States, serving players internationally. This policy covers the Lights Out website, Windows app and related online services. For privacy questions and requests, contact contact@theneeb.com. It does not cover Bodycam or Steam’s independent services.

  • Steam identity: SteamID64, public display name, avatar and profile URL obtained through Steam sign-in and its profile API. Steam authenticates you; we do not receive your Steam password or email through this sign-in.
  • Play and social activity: matchmaking and party activity, friends and friend requests, presence, match participants and results, rank/rating, gameplay statistics and events, and activity timestamps.
  • Messages and reports: in-service chat, player reports, bug-report text, associated Steam identity, moderation actions and support correspondence. Other players can submit reports about you.
  • Technical information: request routes, limited protocol metadata (content type and size), timestamps, app/mode versions and gameplay diagnostic fields. Lights Out does not record your connection IP address in its application logs, analytics or player records, and does not use it to identify you. Auto-hosting uses a private per-match credential. Installation/removal events contribute to aggregate gamemode counts.
  • On your device: settings, game-folder configuration, downloaded packs and sign-in tokens. See Cookies & Storage.

Do not put passwords, financial details or other sensitive information in chat or reports.

Network providers still process IP addresses. Connecting to an online service necessarily exposes a network address to the systems carrying the connection. Railway’s HTTP request logs include source IP addresses, and Cloudflare’s relay service processes client IP addresses to establish and maintain connections. Removing IP collection from the Lights Out application does not disable those providers’ processing or logging. Bodycam and Steam connections are also governed by their own services.

We use account and gameplay data to authenticate players, run matches, maintain rankings and history, provide friends and party features, and display player profiles. We use chat and reports to deliver messages, investigate abuse and bugs, enforce fair play, and handle appeals. Technical data supports downloads, connectivity, troubleshooting and security. Aggregate counts help us understand gamemode use.

Where European or UK data-protection law applies, we rely on performance of the service contract for data necessary to provide requested account, matchmaking and social features; legitimate interests for proportionate security, fraud prevention, moderation and service diagnostics; and legal obligations where applicable. Our legitimate interests are keeping the service secure, reliable and fair. You may object to processing based on legitimate interests. Where consent is legally required for an optional use, it must be obtained separately and can be withdrawn without affecting earlier lawful processing. Reading this policy is not consent to every use of data.

  • Other players: profile information, presence, rankings, match information and messages can be visible through the relevant social, leaderboard and match features. A message recipient can copy or share what you send.
  • Service providers: Railway hosts the service; Upstash provides server-side storage when configured; Cloudflare relays the app’s connection-quality checks; Valve/Steam provides authentication and public profile services. Support email providers process correspondence. Providers receive the information needed for their role and may process network and service logs under their own terms.
  • Administration: the operator and authorized moderators use player records, reports and relevant chat to operate and moderate the service.
  • Legal disclosures: information may be disclosed when required by law or reasonably necessary to protect rights, safety and the service, subject to applicable law.

The current service does not sell personal information or use it for cross-context behavioral advertising. It does not embed advertising pixels in the public website.

Different records have different lifetimes. The current software defaults retain ordinary match chat for seven days after its last saved update. A player report can extend the associated stored transcript to 180 days. Player-report and bug-report lists expire 180 days after their last saved update; new reports can refresh the list’s expiry. Match-history lists default to the latest 50 entries and a 180-day expiry refreshed by new activity; detailed match records also default to 180 days. These are rolling storage periods, not a promise that every individual item disappears exactly that many days after creation.

Account, rank, friend and some moderation records currently have no automatic inactivity expiry. The gameplay diagnostic buffer keeps the latest 600 entries rather than enforcing a fixed time limit. Separately, operational analytics event details default to 30 days, match analytics and their compact summaries to 365 days, and daily aggregate statistics to approximately three years. Authoritative match-settlement receipts and manual rank-change audits have no automatic expiry. Runtime copies, infrastructure logs, backups and support emails have separate lifecycles. Server settings can change the software defaults. Contact us for the retention applicable to your records or to request deletion; signing out or uninstalling does not delete server records.

Retention decisions must take account of the purpose, ongoing service use, security and abuse investigations, legal duties and applicable deletion rights. We do not promise automatic account deletion that the software does not implement.

Email contact@theneeb.com with the subject “Privacy request” and describe your request. If relevant, include your SteamID or profile link; never send your Steam password or sign-in token. You can request access, correction or deletion, and, where applicable, a portable copy, restriction of processing, objection, withdrawal of consent, or information about recipients. Rights and exceptions depend on your location. We may need proportionate verification that the account is yours and must protect other people’s data when responding.

Requests are handled manually. Applicable legal deadlines govern responses; permitted extensions or refusals must be explained. If you disagree with a decision, reply with “Privacy appeal” to request review. You may also complain to your local data-protection authority or, where applicable, the Minnesota Attorney General. Exercising a privacy right does not itself result in discriminatory treatment, although deleting data necessary for an account may prevent use of that feature.

Lights Out operates from the United States. Information may be processed in the US and in countries where service providers operate; those countries may have different privacy protections. Transfers subject to European or UK law require an applicable legal transfer mechanism. Contact us for information about destinations and safeguards. This policy does not assert that any particular certification or contractual transfer mechanism has been verified for every provider.

Lights Out is not directed to children under 13. Do not use the service if you are under 13 or below a higher age required for your use by local law or the relevant game/platform rules. A parent or guardian should supervise use by minors where required. If you believe a child has provided personal information contrary to these requirements, contact us so we can investigate and take appropriate action.

Gameplay rules calculate ratings and may apply automatic match penalties. You can contact contact@theneeb.com to ask for a review of a disputed result or moderation decision. Privacy rights relating to automated decisions apply where the conditions in your local law are met.

Sam Warren, operating as Lights Out, is the operator and data controller for this service, based in Minnesota, United States. Contact contact@theneeb.com.

The date above identifies this version. Material changes will be described through appropriate service notices, and additional consent will be requested when required. Contact contact@theneeb.com about this policy or to exercise your rights.