Privacy Policy
Updated June 2025
1. About Medal
We are Medal B.V. (trading under the name Medal). We offer an online platform (the Platform) for recording, watching, and sharing gameplay clips and videos (together Clips), and access the best-shared content by the gaming community within a safe and friendly environment. We enable users to interact with each other through Clips, likes, voice chat and messages. The use of the Platform and all related services thereto hereinafter referred to as: the Services. These Services are accessible via https://medal.tv (the Website), via the Medal desktop software (the Desktop App) and via the Medal iOS and Android applications (the Mobile Apps).
2. What is this?
This is a Privacy Policy. In this document we explain what type of personal data we collect when you use our Services, when you visit our Website, or when you apply for our open roles. We also explain for what purposes we use the data, how we secure them and how we store them.
Residents of the United States, including its territories and possessions, are subject to a separate version of this Privacy Policy. If you are located in the United States, please refer to the U.S. Privacy Policy for the terms that apply to your data.
3. Privacy and Privacy Legislation
Personal Data means all information by which a person can be directly or indirectly identified. We process your Personal Data in line with the General Data Protection Regulation (GDPR) and other relevant legislation on the protection of Personal Data (collectively referred to as the Privacy Legislation).
4. Our role as (Joint) Controller
We collect and process the Personal Data in the context of our Services. We determine the purposes and means of these processing activities. This means we act as Controller within the meaning of the Privacy Legislation. Next to that, there are specific processing activities for which we act as joint Controller. These processing activities are mentioned under paragraph 7.
5. What Personal Data are processed by Medal, why and on what basis?
As Controller we may process your (personal) data if you use our Services, and/or when you visit our Website and/or social media pages.
When you use our Services through the Website, Desktop App and/or Mobile App
| Personal Data | Purpose(s) | Legal ground(s) |
|---|---|---|
| If you create an account: • Username, email address, password, year of birth; • Optional: uploaded biography, phone number, donation link, your profile photo; and/or • Non-personal: the details of the hardware you are using. Please note: if you choose to log in via third party account(s) or to connect your account with such third party account, you authorize us (through OAuth) to process your Personal Data linked to this account (such as your username, real name, email address, profile picture, friends or followers—depending on the third party and which data you share with them). |
We may use these data to: • Register your account; • Enable you to access your account and our Services; • Allow us to communicate with you and approach you appropriately in our communications; • Send you notifications and service updates related to your use of our Services; • Flag, report and prevent misuse, fraud and threats of/regarding to our Services; and/or • Improve our services. |
We may process these data, because this is necessary to perform our contract with you (i.e. to provide our Services). We may send you service updates based on our legitimate interest to keep you informed about activities related to your use of our Services. It is always possible to unsubscribe from our service updates via the link at the bottom of each service update. We may send you notifications if you gave us permission to do so. It is always possible to opt-out from these notifications via the settings of your device. We may also process (some of) these data because we have a legitimate interest to ensure a secure use of the Accounts and associated Services. We may process your year of birth because we have a legitimate interest to you such information to get a better understanding of the use of our Services. We may process your hardware information based on a legitimate interest in understanding what hardware is most popular among our users, to understand crashes and bugs in our software, and optimize the service for your hardware. We will carry out audio scanning and moderation of the Clips in accordance with our legal obligations and pursuant to our legitimate business interest to protect users from and to remove harmful and unlawful content from our platform. If you post contest-hashtags within the context of game contests, we may share the Personal Data included in this post with the relevant game studio because we have your permission to do so (i.e., by you posting your content accompanied with the indicated contest hashtag). Please check the privacy notice of the relevant game studio to see how your Personal Data are handled. Game studios we partner with are indicated along with the announcement of the contest hashtag. |
| If you use our Find your Friends functionality in order to find friends already on Medal, to invite your contacts to start using Medal and to be found by your friends already on Medal: The names and respective contact information included in your contact list (in hashed form). If you are an existing user of Medal, your username and other information included in your Account. Please note that Medal does not process personal data of individuals in the contact list, as Medal cannot reverse the hashing of this data. |
We use these data to: • Show you which of your contacts use Medal and to make it easy to connect with these friends; • Facilitate you in inviting new friends to Medal. Such invitation will then be sent via your own SMS/Messenger app. |
We may process the personal data included in your contact list because we have your permission to do so. Besides that, we may show existing friends on Medal in providing the 'Find your Friends' functionality because we have a legitimate interest to provide such functionality. Medal designed this functionality in a privacy friendly way, as it has implemented additional safeguards to limit the impact on the privacy of our users, namely by hashing the personal data obtained from the contact list and by clearly informing you about this functionality via this privacy notice. |
| If you use our desktop app while playing games: The game you are playing, for some games also your in-game identifiers (username/tagline and unique identifier), and for some games the match, map, region or server you are in. |
We use these data to: Show other Medal users stats about the match Clips are taken from and connect you to other Medal users you are playing with. |
We process this data based on legitimate interest in providing you a better service where you can connect with the people you play with. |
| If you choose Connect Mobile: • Phone number. |
We use these data to: • Connect your account with the Mobile App on your phone. |
We may process these data, because this is necessary to perform our contract with you (i.e. to execute the requested Service). |
| If you upload, download and/or share content: • The content you make available on the Platform, such as: your username, email address, comments, likes, posts, chats with other users and/or any uploaded Clips with or without accompanying audio (that may include voice); and your phone number, if you request to download a Clip via a link by text; and Metadata associated with any uploads • In relation to in-game content uploaded by you, we may also capture the input controls you use to play the game (In-game Controls). |
We may use these data to: • Allow you to view, download and upload Clips on our Platform; • Allow you to use all related Services thereto; • Allow you to communicate with other users through likes, comments, posts and chats; • Enable you to share your Medal content on your other online profiles according to your preferences; and share your public Medal content (including through our API) on the platforms or websites of our partners, such as game studios and other platforms like Xbox (Microsoft); • Create controller and keyboard overlays, which can be added to your Clips; • Do research on and create data algorithms, AI algorithms, or data-based features; • We may also use the data to provide and maintain the platform, and to continue to deliver quality product generally to users. Data can be used to improve the quality of data algorithms, which are used in the product or by the company; • We may also share the content with third parties as further described in Section 7 below; and/or • Carry out audio scanning of the Clips for the purpose of identifying and moderating illegal activity and harmful behaviour and ensuring compliance with Medal's codes of conduct. |
We may process these data, because this is necessary to perform our contract with you (i.e. to provide our Services). If you post contest-hashtags within the context of game contests, we may share the Personal Data included in this post with the relevant game studio because we have your permission to do so (i.e., by you posting your content accompanied with the indicated contest hashtag). Please check the privacy notice of the relevant game studio to see how your Personal Data is handled. Game studios we partner with are indicated along with the announcement of the contest hashtag. We may use your data for research and to create data algorithms, AI algorithms, or data-based features based on legitimate interest in providing you a better service and contributing to academic and industrial advancements. Users may opt-out of the collection or usage of this data in the privacy section of the in-app settings. |
| If you Subscribe to our newsletters • Your email address. |
We may use these data to: • Send you messages about promotions, (new) features and/or products on our Platform and all our related Services. |
We may send you these e-mails if you gave us permission to do so. It is always possible to unsubscribe from these e-mails via the link at the bottom of each e-mail. |
| If you create a support ticket • Your username, email address, the Discord name (optional), and the content of the correspondence between you and Medal.tv. |
We may use these data to: • Answer your questions and/or handle any complaints; and • Improve our Services as a result of questions and feedback from you. |
We may process these data, because we have a legitimate interest to contact and assist you based on your comment or question and to improve our Services as a result of the questions and feedback we receive. |
| Technical Information IP-address, your country, (selected) language, usage behaviour of our Services and your unique device identifier. |
We may use these data to: Analyse the use of our Services; • Improve our Services; • Improve the security of the Platform, Services, and accounts; and • Flag, report and prevent misuse, frauds and threats of/regarding to our services. |
We may process these data because we have a legitimate interest to gain insight in the use of our Platform for the sake of improving our services. |
| User Testing Contact information such as Discord username, to assess whether you qualify to participate in our user testing program. Age, location, username, type of games you usually play, whether you are a member of any of our (early access) communities, and a recording of the screen share, in case you participate in our user testing program. |
We may use these data to: • Assess your eligibility to participate in our user testing program; • Establish a good rapport at the beginning of the conversation; • Conduct the survey; and • Improve our services. |
We may process these data to assess whether you qualify to participate in our user testing program, because we have a legitimate interest in selecting a group of users eligible for our user testing program and because you have opted in to be an 'early access' user and/or because you have subscribed to dedicated 'user testing' channels. In case you participate in our user testing program, we ask for your permission for all other processing of Personal Data required for the user testing. |
| If you accept targeted advertising, tracking cookies and analytics and usage behavior data from the use of our Services. This may include the following: • Hardware specifications; • Your system language; • Your country based on IP address; • Estimated age or given age based on surveys run within Medal's ecosystem; • Installed games and services on your device; • Clips captured, games played, session count, and session time from games and their associated servers, mods, or subgame/experience. |
We may use these data to: • Deliver relevant website content and targeted advertisements to you based on one or more criteria from the data we collect; and • Measure or understand the effectiveness of the advertising we serve you. |
We may process your personal data to provide you with targeted advertising because we have your consent to do so. It is always possible to opt-out of any such use of your personal data for targeted advertising purposes by withdrawing your consent for the use of tracking cookie(s) in accordance with our cookie statement. |
When you visit our social media pages
| Personal Data | Purpose(s) | Legal ground(s) |
|---|---|---|
| Uploaded information Information of visitors who leave a comment or otherwise post something on our social media pages, including the Personal Data contained within these comments and/or posts |
We use these data to: • Contact the visitors in reply of their post and/or comment via our social media pages; and/or • Process the feedback left on our social media pages. |
We may process these data, because we have a legitimate interest to process these data and because the visitors voluntarily made public such information. Our social media pages are also controlled by the social medium itself. Please check their own privacy policies, to see how each social medium handles Personal Data. |
When you apply for our open roles
| Personal Data | Purpose(s) | Legal ground(s) |
|---|---|---|
| Contact details First name and surname, e-mail address, address and telephone number |
We use these data to contact you about the application | We may process these data, because we have a legitimate interest in processing these data. We need the data to get (and keep) in touch with you and to process and review the application. |
| Application Information Information provided by you, among others: Personal Data included in the Curriculum Vitae and motivation letter, qualifications, photo, gender and day of birth |
We use these data to: • assess whether you suit the job at Medal; and • determine who is the most suitable candidate |
We may process these data, because we have a legitimate interest in processing these data and because you provide this data yourself and voluntarily. We need the data to get (and keep) in touch with you and to process and review the application. |
| Information retained during application process Notes from interviews |
We use these data to: • assess whether you suit the job at Medal; and • determine who is the most suitable candidate |
We may process these data, because we have a legitimate interest in processing these data and because you provide this data yourself and voluntarily. We need the data to get (and keep) in touch with you and to process and review the application. |
| Information from public sources Information in public profiles, such as LinkedIn and other social networks (where applicable) |
We use these data to: • assess whether you suit the job at Medal; and • determine who is the most suitable candidate |
We have a legitimate interest to process these data as we need them to process and assess the application. We only process information that is relevant for the application and you always get the opportunity to react to our findings. |
6. How long do we keep the Personal Data?
We store Personal Data for as long as we need it for the above purposes. In this respect, we apply the following retention periods:
-
Personal Data of the users of our Services | This data is stored as long as the user has an active account on our Platform and for a maximum period of 24 months after the last use of our Platform. We delete your Personal Data earlier if you delete your account yourself. In that case, we delete your Personal Data 14 days after deletion of the account.
-
Personal data processed via Access the Phone List functionality | This data is stored as long as necessary to perform this functionality or until the consent is withdrawn.
-
Personal Data of Website visitors | This data is stored as long as it is necessary to provide the Services you as a user have requested.
-
Personal Data in our correspondence | This data is stored as long as necessary to handle your message/question/complaint.
-
Personal Data of job applicants | This data is stored for a maximum of 4 weeks after the application process is finalized and/or when the procedure with the specific applicant ends, unless you gave us permission to store the Personal Data for (up to) 1 year to re-engage you in alternative procedures.
-
Other information | We store other Personal Data only for as long as it is necessary for the purposes. This is deleted as soon as it is no longer necessary for the purposes for which we processed it or, if applicable, the consent for such processing is withdrawn.
After expiry of the retention periods, we may process and retain certain Personal Data to comply with legal retention obligations and/or for fraud/misuse investigations/possible legal proceedings. In such events, we will retain the data separately and only use such data for the aforementioned purposes.
7. Do we share your Personal Data with others?
Processors
We use the services of Processors for the processing of (personal) data. Within this context, these Processors receive Personal Data which they process on our behalf. Among other things, we use processors for hosting our Platform, managing our CRM, and monitoring and analyzing the safety and use of our Services. The Processors must strictly follow our instructions regarding the processing of such Personal Data. Therefore, they must not use the Personal Data for their own purposes.
Where Medal and another entity jointly determine the purposes and means of processing, Medal and such other party act as joint controllers within the meaning of the GDPR. In that case, the parties involved have defined their respective responsibilities, roles, and relationships in a mutual arrangement.
Entities within the Medal group are acting as joint controllers with Medal regarding the processing activities as set out in the table above. Medal is the first point of contact executing for your rights as described in this Privacy Notice in relation to the Personal Data processed within this joint relationship. Where appropriate, Medal (or a joint controller) may refer you to the other party if you can exercise your rights more quickly or effectively with such other party.
External Controllers
We may also share your Personal Data with external controllers in the following cases:
Payments: Your Payment will be processed via a third party payment service provider (including but not limited to iDeal, VISA, PayPal, MasterCard, Paddle, Stripe and PayPal) and respectively the terms and conditions of those services will apply to the payments you make using the respective third party. Any Personal Data you provide to this payment provider will be processed by the payment provider (as Data Controller) in accordance with their own privacy policies.
Tax authorities: We are legally obliged to include (some of) the Personal Data in our financial administration, which may have to be shared with various national tax authorities. The tax authorities will process these Personal Data in accordance with its own privacy policies.
Game Studios: We may share Personal Data with our partners such as game studios after you gave your permission to do so (i.e. by you posting your content accompanied with the indicated contest hashtag). For more information on how these parties (as Controller) process your Personal Data, please refer to their privacy notice, as provided along with the contest hashtag.
Technology operators and commercial partners: any uploaded Clips and associated labels and metadata may be shared with third parties to facilitate the creation of data algorithms, data-based features, or AI algorithms, and for other AI model development and training, and improvement of related products and services, including as described in the "Intellectual Property and User Generated Content" section our Terms of Service.
Apart from the above, we may share your Personal Data with third parties if we are legally obliged to do so.
In compliance with local privacy laws, you can opt-out of sharing your personal information with third parties in the privacy section of the app settings.
8. Cookies
We may use cookies on our Website. A cookie is a simple small text file that can be stored in your computer when visiting the Website. This text file identifies your browser and/or computer. When visiting our Website again, the cookie ensures that our Website recognizes your browser or computer.
For more information on our use of cookies, please refer to our cookie statement.
9. Our Recommender Systems
The Medal recommendation system is a heuristic and machine driven system which allows users to view only content which has been marked as public and viewable by other users. The system works by applying an algorithm to a small set of pre-determined content features which allows us to rank such content for our users. Those features include:
- the game the content was captured from;
- the time it was captured;
- the number of shares, likes and views it has aggregated over time;
- the number of comments, replies, and upvotes it has aggregated over time; and/or
- whether the content went through an editing flow.
These features are then matched by our algorithm to a user's individual characteristics based on their prior preferences and history of usage, in particular: (a) Medal content that they have watched, liked, shared, or commented on inside of our platform, and (b) Interactions from a user's followed network on that piece of Medal content.
10. hCaptcha
We use the hCaptcha anti-bot service (hereinafter "hCaptcha") on our website. This service is provided by Intuition Machines, Inc., a Delaware US Corporation ("IMI"). hCaptcha is used to check whether the data entered on our website (such as on a login page or contact form) has been entered by a human or by an automated program. To do this, hCaptcha analyzes the behavior of the website or mobile app visitor based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled.
For the analysis, hCaptcha evaluates various information (e.g. IP address, how long the visitor has been on the website or app, or mouse movements made by the user). The data collected during the analysis will be forwarded to IMI. hCaptcha analysis in the "invisible mode" may take place completely in the background.
Data processing is based on Art. 6(1)(f) of the GDPR (DSGVO): the website or mobile app operator has a legitimate interest in protecting its site from abusive automated crawling and spam. IMI acts as a "data processor" acting on behalf of its customers as defined under the GDPR, and a "service provider" for the purposes of the California Consumer Privacy Act (CCPA).
For more information about hCaptcha and IMI's privacy policy and terms of use, please visit:
11. Is your data transferred outside the European Economic Area (EEA)?
We may transfer Personal Data to parties outside the EU, if one of our third parties is established outside the EU. We make sure the transmission of Personal Data outside the EU is in accordance with the Privacy Legislation (chapter 5 of the GDPR), meaning the Personal Data will only be transferred to a company or country that provides an adequate level of protection.
12. Third party websites
You may find advertising or other (hyper)links on our Platform that link to the websites, products and services of partners, suppliers, advertisers, sponsors, licensors or other third parties. We do not control the content or the links that appear on these websites and we are not responsible for the practices employed by websites linked to or from our Platform. In addition, these websites, products, and services, including their content and links, may be constantly changing. These websites, products and services may have their own privacy policies, user terms and customer service policies. Browsing and interaction on any other website, including websites that are linked to or from our Platform, are subject to the terms and policies of that website.
13. Changes in this Privacy Policy
We are constantly looking for ways to improve our Website and Services. Therefore, we may update this Privacy Notice from time to time. If we change the Privacy Notice significantly, we will post a notification on our Website together with the updated Privacy Notice.
14. How do we protect the Personal Data?
We have implemented technical and organizational measures designed with the intent to (i) secure your Personal Information; and (ii) mitigate the risk of accidental loss or unauthorized access, use, alteration, or disclosure of your Personal Information.
Unfortunately, the transmission of information via the Internet is not completely secure.
WHILE WE STRIVE TO USE COMMERCIALLY ACCEPTED MEANS TO PROTECT YOUR PERSONAL INFORMATION, WE CANNOT GUARANTEE ITS ABSOLUTE SECURITY. TO THE FULLEST EXTENT ALLOWED BY LAW, ANY TRANSMISSION OF PERSONAL INFORMATION IS AT YOUR OWN RISK. WE ARE NOT RESPONSIBLE FOR CIRCUMVENTION OF ANY PRIVACY SETTINGS OR SECURITY MEASURES CONTAINED ON OUR SERVICES.
The safety and security of your information also depends on you.
NO EXPECTATION OF PRIVACY: You should not expect any privacy when using our Services, whether in public or private areas of the platform. Information shared through our Services—including messages, uploads, or other content—may be accessible to us and, in some cases, to other users.
LIMIT PERSONAL INFORMATION: Please avoid providing any personal or sensitive information (such as your Social Security number or other government ID data) when using our Services. We do not require such information, and you should not post or transmit it on or through the platform under any circumstances.
15. Your rights and who to contact
As laid down in the Privacy Legislation, you have the right to:
- Ask us for access to and/or a copy of the Personal Data we process of you;
- Ask us to transfer such copy to another data controller;
- Ask us to adjust, review or remove your Personal Data from our systems;
- Ask us to restrict the processing of your Personal Data;
- Object to the processing of your Personal Data;
- Withdraw your permission (without consequences for the Personal Data that was processed before your withdrawal); and
- File a complaint with the Dutch Data Protection Authority, if you believe that we process your Personal Data unlawfully.
If you have any questions, comments or concerns regarding the way we handle your Personal Data, please contact our Data Protection Officer via [email protected]
16. Contact Information
Medal B.V.
Gooimeer 8, 1411 DD Naarden
W: medal.tv
Chamber of Commerce: 64147894