1. Who Operates This Website
This website is operated by TOBY 7X, an independent gaming creator brand based in India. The website acts as the central digital hub for the TOBY 7X YouTube gaming channel, cataloguing gameplay walkthroughs, hardware benchmarks, PC performance analysis, and lightweight utilities.
For any questions regarding this Privacy Policy or your personal data, you may reach out directly via our dedicated privacy channel: xetoby@gmail.com or via our secure Contact Page.
2. Scope of This Policy
This policy applies to all public web pages, sub-routes, interactive utilities, and services hosted under the canonical domain https://www.toby7x.games/. It covers:
- Browsing the video library, livestreams, and gaming shorts catalogue.
- Exploring the Top 50 PC games directory and system requirements.
- Executing client-side network diagnostics via our Speed Test and Download Time Calculator.
- Voluntarily subscribing to browser push notifications.
- Submitting game suggestions or secret discoveries through our community hub.
- Transmitting messages to our direct contact desk.
3. Information You Provide to Us
You can access and browse nearly all areas of TOBY 7X anonymously without creating an account or providing any personal details. We only receive personal information when you choose to transmit it voluntarily:
- Contact Inquiries: When submitting an inquiry via our Contact form, you provide your email address (required to receive a reply), an optional name or handle, a topic classification, and your message text.
- Community Suggestions: When submitting a game walkthrough request or engine discovery on the Community page, you provide an author name/handle, a game title, and textual details. We do not ask for or store phone numbers, email addresses, or physical locations for community submissions.
- Prohibited Information: Do not submit sensitive personal data, passwords, payment cards, national identification numbers, or confidential documents. We immediately purge any unsolicited sensitive information.
4. Automatically Collected Visitor Telemetry
To evaluate site performance, detect broken routes, and protect our infrastructure against automated abuse, we operate a self-hosted, privacy-first telemetry pipeline backed by our Supabase database.
How Our Telemetry Works:
- No Raw IP Persistence: Your IP address is never written into our permanent database. Upon receiving a telemetry beacon, our server computes a salted SHA-256 hash truncated to 16 characters for short-term rate limiting and session deduplication.
- Device & Browser Context: We collect aggregate metadata including browser name, browser version, operating system, device class (mobile, tablet, desktop), screen dimensions, language, and coarse referrer category (e.g., Direct, YouTube, Search).
- No Third-Party Analytics Trackers: We do NOT embed Google Analytics, Meta Pixel, Hotjar, or cross-site tracking scripts that follow you across the internet.
5. YouTube API Services & Google Privacy
TOBY 7X incorporates YouTube API Services to synchronize and display our official video titles, thumbnails, view counts, duration, and livestream broadcast statuses directly on this website.
Mandatory YouTube API Developer Policy Disclosures:
- By viewing or interacting with YouTube-powered content on this website, you acknowledge and agree that your interaction is also governed by the Google Privacy Policy.
- Use of video and Shorts playback features is also subject to the YouTube Terms of Service.
- No Authorized User Data Collected: TOBY 7X does not request, collect, or store private Google account credentials, personal YouTube profile data, or OAuth access tokens from website visitors. All API calls retrieve publicly published channel metadata only.
- Data Refresh & Deletion: In accordance with the YouTube API Services Developer Policies, public video and channel metrics cached on our servers are refreshed every 24 hours, and no non-authorized YouTube data is retained beyond 30 days without re-synchronization.
6. YouTube Video Embeds & Player Facades
When you choose to play a video or short on TOBY 7X, the media is streamed using YouTube's embedded player infrastructure.
- To protect your privacy while browsing, our video cards display static image thumbnails hosted on Google's media servers. An active YouTube embed player is only instantiated when you explicitly click to play a video.
- Once the embedded YouTube player loads, Google and YouTube receive technical connection requests (including your IP address and browser headers) and may place cookies in accordance with Google's Privacy Policy.
7. Internet Speed Test & Network Diagnostics
Our speed test at /tools/speed-test is powered by Cloudflare's official open-source JavaScript testing engine (@cloudflare/speedtest).
- Direct Edge Routing: The speed test executes entirely inside your client browser. Test data payloads are transmitted directly between your device and Cloudflare's global network nodes to calculate download speed, upload speed, latency (ping), and jitter.
- Provider Data Processing: Cloudflare receives the network requests necessary to conduct the test. Processing of those packets is governed by Cloudflare's Privacy Policy.
- Zero Server Logging by TOBY 7X: TOBY 7X does not route speed test payloads through our origin servers and does not record or store your speed test results or ISP connection identities.
8. Browser Push Notifications
We provide an optional Web Push notification service to notify you when new walkthroughs, 4K premiers, or livestreams go live.
- Explicit Affirmative Opt-In: Push notifications are completely voluntary. They are only enabled when you explicitly click the notification bell icon and approve the native browser prompt.
- Stored Data: To deliver notifications, our database stores an anonymous browser push endpoint URL, cryptographic public keys (
p256dhandauth), your broad user-agent string, and chosen notification topics (e.g. videos, shorts, livestreams). We never associate push endpoints with names, emails, or personal accounts. - One-Click Unsubscribe: You can revoke notification permissions at any time through your browser settings or by toggling off notifications using our on-site control. Upon revocation, your subscription record is marked inactive and queued for permanent pruning.
9. Cookies & Local Storage Inventory
TOBY 7X does not deploy third-party advertising cookies or cross-domain tracking pixels. We use standard browser localStorage and sessionStorage strictly for site functionality and aggregated session diagnostics:
| Identifier | Mechanism | Duration | Operational Purpose |
|---|---|---|---|
| toby7x_vid | localStorage | 365 days | Anonymous pseudonym for unique visitor counts; contains no personal data. |
| toby7x_sid | sessionStorage | Session | Tracks multi-page visits during a single browsing session. Erased on tab close. |
| toby7x_speed_unit | localStorage | Persistent | Remembers user preference for speed test throughput units (Mbps vs MB/s). |
| toby7x_poll_* | localStorage | Persistent | Prevents duplicate ballot submissions in local community editorial polls. |
10. Data Retention Schedule
We adhere to strict data lifecycle limits and routinely delete records when their operational utility expires:
| Data Category | Storage Location | Retention Period | Deletion / Purge Trigger |
|---|---|---|---|
| Visitor Sessions & Events | Supabase (PostgreSQL) | 90 calendar days | Automated rolling cleanup job. |
| Contact Inquiries | Supabase (PostgreSQL) | Up to 12 months | Purged after inquiry resolution, unless required for legal/security defense. |
| Web Push Subscriptions | Supabase (PostgreSQL) | Active duration | Removed upon unsubscribe request or invalid endpoint push rejection. |
| Community Submissions | Supabase (PostgreSQL) | Editorial lifecycle | Reviewed weekly; rejected or obsolete suggestions purged periodically. |
| YouTube API Cached Data | Supabase (PostgreSQL) | Max 30 days | Overwritten on daily sync; purged strictly within 30 days per policy. |
11. Technical & Organizational Security Controls
We implement industry-standard safeguards to secure any stored data:
- End-to-End Encryption: All traffic is encrypted in transit over HTTPS using TLS 1.3.
- Row-Level Security (RLS): Our database enforces granular PostgreSQL Row-Level Security policies. Anonymous and public users cannot read contact inquiries, visitor session logs, or push subscription endpoints.
- Secret Isolation: Service-role keys, push encryption secrets, and YouTube API credentials reside exclusively on protected servers and are never bundled into client-side JavaScript.
12. Indian Legal Framework & Your Rights
TOBY 7X is governed by the laws of India. We process information in alignment with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
Regulatory Note on Phased Implementation:
The DPDP Act 2023 was notified in the Gazette of India under G.S.R. 843(E) on 13 November 2025. Under the statutory phased commencement timetable, the primary operative provisions—including formal Data Fiduciary notice requirements, consent management mechanisms, and Data Protection Board of India adjudication procedures—come into force on 13 May 2027 (18 months post-notification).
Regardless of regulatory transition schedules, TOBY 7X respects your privacy rights. You may submit requests at any time to:
- Right to Access & Confirmation: Request a summary of the personal information we maintain concerning your contact inquiries.
- Right to Correction & Erasure: Request the correction of inaccurate data or the deletion of your contact submissions and push subscriptions.
- Right of Grievance Redressal: Submit any concern or complaint regarding data handling directly to our privacy desk at xetoby@gmail.com.
13. Protection of Children's Privacy
TOBY 7X publishes general-audience video game content and PC technical performance reviews. Our website does not target, market to, or knowingly collect personal information from individuals under 18 years of age. If you believe a minor has submitted personal contact information without parental guidance, please contact us at xetoby@gmail.com, and we will promptly delete the data.
14. External Platforms & Third-Party Links
Our website links to external platforms including Steam, Reddit, Instagram, VALORANT / Riot Games, Epic Games Store, and publisher websites. We have no authority over and assume no responsibility for the content, privacy policies, or data practices of third-party platforms. We encourage you to review the privacy statements of each external site you visit.
15. Modifications to This Policy
We may revise this Privacy Policy periodically to reflect infrastructure enhancements, updated statutory rules, or changes in platform developer terms. The revised version will be published on this page with an updated “Last Updated” date. Continued use of our website following the posting of updates indicates your acknowledgment of the revised terms.
To exercise your data rights, request message deletion, or inquire about our data practices, contact us at: