Privacy Policy
Last updated: 2026-11-10
This policy explains what ControllerOverlay (controlleroverlay.com) collects when you use it, what we do with it and the choices you have.
What we collect
- Account details. Your name, email address and a hashed password when you create an account. If you sign in with a third-party account, we receive your name, email address and profile picture from that provider.
- Session records. When you sign in we store a session with its IP address and browser user agent, so that you stay signed in and we can spot misuse.
- Your overlay. The controller model, skin, colours, light settings, the name you put on the pad and your Bluetooth button mapping, plus your overlay link. For the link we also keep the time it was last opened in streaming software.
- Purchase records. When you buy the vault we keep the order number, amount, date, status and the email used at checkout. Payment is handled by Waffo, our merchant of record. We never see or store your card number.
- Cookies and browser storage. We set the cookies needed to keep you signed in. A design you start before signing in is kept in your own browser's storage until you sign in. We do not use advertising cookies.
What we do not collect
Your controller input is read by your own browser and drawn on your own screen. Button presses and stick movements are not sent to our servers and are not recorded.
How we use it
- To run your account and show your overlay on your link.
- To take payment for the vault, unlock it and handle refunds.
- To answer support requests.
- To keep the service secure and prevent abuse.
We do not sell personal data and we do not use it for advertising.
Who we share it with
- Cloudflare, which hosts the site and its database.
- Waffo, the merchant of record that processes vault payments, calculates tax and issues receipts. Waffo handles your payment details under its own privacy policy.
- Authorities, when the law requires it.
These providers may process data in countries other than your own.
How long we keep it
Account and overlay data are kept while your account exists. Purchase records are kept for as long as tax and accounting rules require. Sessions expire on their own.
Your rights
You can ask for a copy of your data, have it corrected or have your account and its data deleted by emailing support@controlleroverlay.com from the address on the account. Depending on where you live you may also have the right to object to or restrict certain processing and to complain to your data protection authority.
Children
The service is not directed at children under 13, and we do not knowingly collect their data.
Changes to this policy
If we change this policy in a way that matters, we will update the date on this page and post a notice on the site.
Contact
Privacy questions and requests: support@controlleroverlay.com.