Privacy Policy

Last updated September 21, 2026.

This Privacy Policy explains how Osborn Design Works ("we," "us," or "our") collects, uses, and shares information when you use Goodly Trials — the website at goodlytrials.com, the web game at play.goodlytrials.com, and the Steam application (together, the "Service").

It should be read with our Terms of Service. Questions: [email protected].

1. Information we collect

Account and sign-in

If you sign in with Discord or Steam, we receive an identifier from that provider, plus a display name and, when available, an avatar. We store those so we can keep you signed in and show your profile in the game. We do not receive your Discord or Steam password.

We may also record which providers are linked to your account, your play tier (for example demo or full), and whether you have finished training.

Play and progression

When you play, we store game records needed to run the Service. That can include campaign runs, shop and army snapshots, match results, ranked ratings, multiplayer lobby participation, and similar progression. Multiplayer lobby names and your display name may be visible to other players in a lobby.

Device, logs, and local data

Our servers and hosting providers automatically receive technical information such as IP address, browser type, device type, and request timestamps. On your device we may store a session cookie, game progress, audio and display settings, and short-lived marketing campaign tags (UTMs) in session storage.

Communications

If you email us, we keep the address and the content of the message so we can reply.

2. How we use information

We use the information above to:

• operate, secure, and improve the Service;
• create and maintain your account, sessions, and game progress;
• run ranked play, multiplayer lobbies, and match history;
• understand how the Service is used and fix problems;
• measure marketing (including Steam, Discord, and advertising campaigns);
• comply with law and enforce our Terms.

3. Analytics and advertising

On production, we use product analytics and advertising tools. These currently include:

• PostHog, for product analytics (pages viewed, in-game events, and a limited set of account traits such as display name and linked sign-in providers);
• Meta Pixel, for advertising measurement and conversion events;
• Google Ads / Google tag, for advertising measurement and conversion events.

These tools may set cookies or similar identifiers and may receive device and usage data. We load them on production sites, not on local development or staging.

The marketing homepage may embed YouTube videos (privacy-enhanced YouTube mode). YouTube / Google may collect data according to Google's policies if you play a video.

4. Cookies and similar technologies

We use:

• a session cookie so we can keep you signed in (http-only; used for the playable game);
• cookies or pixels from analytics and advertising partners, as described above;
• local storage and session storage on your device for settings, game progress, and marketing UTMs.

You can block or delete cookies in your browser. If you block the session cookie, you will not stay signed in. Browser controls do not stop all local storage.

5. How we share information

We share information with:

• service providers who host the Service, store data, or help us operate it (including our hosting and database providers);
• Discord and Valve / Steam, when you choose to sign in through them, subject to their policies;
• analytics and advertising partners named above, so they can provide their services to us;
• other players, limited to what the game needs to show (such as a display name in a lobby);
• authorities or other parties when we believe we must, to comply with law, protect rights, or respond to a valid legal request.

We do not sell personal information for money. Some advertising and analytics tools receive identifiers and usage data, which certain privacy laws treat as "sharing" for cross-context behavioral advertising. You can email [email protected] to ask us to stop that sharing to the extent we control it.

Steam purchases are processed by Valve. We do not receive your full payment card details. See Steam's privacy policy for how Valve handles purchase data.

6. Retention

We keep account, play, and analytics data for as long as your account is active and as needed to operate the Service, resolve disputes, and meet legal duties. Session cookies expire. You may ask us to delete your account as described below.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To make a request, email [email protected]. We may need to verify that the request comes from you.

California residents may also have rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale or sharing of personal information. We do not use or disclose sensitive personal information for purposes that require a separate right to limit under that law.

If we cannot honor a request, we will explain why, including any exception that applies (for example, data we must keep to run a current match or to comply with law).

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe we have, email [email protected] and we will delete it.

9. International users

We are based in the United States. If you use the Service from another country, your information will be processed in the United States and in any other country where our providers operate, which may have different data-protection laws than your own.

Where a privacy law requires a legal basis, we typically rely on: performing our contract with you (providing the game and your account); legitimate interests (securing and improving the Service, understanding usage); and consent where we ask for it or where an advertising or analytics cookie requires it.

10. Changes

We may update this Privacy Policy. The "Last updated" date will change when we do. Continued use of the Service after an update means you accept the revised policy.

11. Contact

Privacy questions and requests: [email protected].

See also our Terms of Service.