1. Who we are
Gamepad Overlay ("we", "us") is a free tool developed by KWWD (Katy Whitton Web Development). We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy, please message the support forum.
2. What we collect and why
a) Our own usage analytics (collected on the server)
When you use the generator on this website, our server logs several pieces of information so we can understand how the tool is used and keep it working:
- A one-way hashed IP address. Your IP address is converted (hashed) the moment it arrives, using a keyed, one-way cryptographic hash, and the raw address is never stored. The hash cannot be reversed to recover your IP address and is never used to identify you; it exists only to count anonymous usage and prevent obvious abuse.
- An approximate country code (two letters, e.g. GB, US, DE), derived from your IP address using a MaxMind GeoLite2 database. This lookup happens entirely on our own server — your IP address is not sent to MaxMind.
- Your browser user agent (browser type and operating system).
- The overlay options you choose (controller type, colours, stick size, and preset name).
Legal basis: these records are anonymous, aggregated usage statistics and are not personal data under the UK GDPR. The hashed identifier is one-way and keyed on our server, no raw IP address is retained, and we hold no information that would allow these records to be linked to, or identify, any individual. Because the data is not personal data, the consent and individual-rights provisions of the UK GDPR do not apply to it. Google Analytics is different — it is only used with your consent via the cookie banner (see below).
b) Cookies
We use only a small number of cookies. The table below lists them all. "Necessary" cookies need no consent; analytics cookies are only set if you give your consent.
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
controllerType |
Remembers the controller style you selected, so it persists when you reload or revisit the page. | Necessary (functional) | 365 days |
ga-consent |
Stores your cookie choice so we know not to ask again. | Necessary (your choice) | 365 days |
_ga, _ga_<container> |
Google Analytics. Collects anonymised usage statistics (e.g. pages visited, approximate location, device type). | Analytics (consent required) | Up to 400 days |
You can change your analytics choice at any time using the Cookie Settings link in the "How We Use Cookies" panel on the main page.
c) Google Analytics
We use Google Analytics (Google Ireland Limited and/or Google LLC) to see how many people visit the site and which pages are most useful. Google's analytics cookies are only loaded after you click "Accept" in the cookie banner, and they never load in OBS overlay mode (?panel=off).
If you prefer, you can additionally block Google Analytics everywhere using Google's official opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
3. How we use your data
- To provide and operate the Gamepad Overlay generator.
- To count visitors and understand how the tool is used, so we can improve it (aggregated analytics).
- To keep the tool secure and free from obvious abuse.
We do not sell your data and we do not collect your name, email address, or payment details.
4. Who we share data with
We only work with the following third parties, and only to the extent necessary to provide the site:
- Google — Google Analytics (after your consent), Google Fonts (loading fonts), and YouTube (embedded instruction video). The YouTube video and font requests may send limited technical data (such as your IP address) to Google; Google's own privacy terms then apply.
- Ko-Fi — if you visit or donate through a Ko-Fi button, you leave our site and Ko-Fi's privacy policy applies from that point.
- Hostinger — our hosting provider. Hosting infrastructure keeps standard server logs that may include IP addresses, as is normal for any website host.
- MaxMind — the country lookup uses MaxMind's GeoLite2 data, but locally on our server. No IP address is transmitted to MaxMind.
5. International transfers
Our hosting provider (Hostinger) stores data within the EEA and the United Kingdom. When Google processes data for Analytics or Fonts, some processing may occur in the United States; Google relies on the European Commission's standard contractual clauses (SCCs) to safeguard such transfers. By consenting to analytics cookies you agree to these transfers.
6. How long we keep data
- Analytics records (hashed IP, country code, user agent, overlay options) are kept in our database for the lifetime of the tool. They are anonymous and aggregated, cannot be linked to any individual, and contain only one-way, keyed hashes — no raw IP address is ever retained and we hold no means of reversing them.
- Cookies last as long as the table in section 2(b) says, or until you clear your browser's cookies.
7. Your rights
We do not hold any personal data that can be linked to you, so the individual rights under the UK GDPR (access, rectification, erasure, restriction, objection and portability) do not arise in relation to this site. The one exception is Google Analytics: you can change or withdraw your consent at any time using the Cookie Settings link in the "How We Use Cookies" panel on the main page, or by clearing your browser's cookies.
8. Children
This website is directed at adult streamers and content creators. By using it you confirm you are of legal age in your jurisdiction. We do not knowingly collect data from children. Because the site collects no personal data that can be linked to any individual (see sections 2 and 7), we have no way of identifying whether a child has used the generator, and no child-specific data exists that could be located or removed. Accordingly, no action is needed, or can be taken, in respect of any individual user.
9. Links to other websites
Pages on this site may link to external websites (including affiliate links, YouTube, and Ko-Fi). We are not responsible for the privacy practices of those sites. Please read their privacy policies.
10. Changes to this policy
We may update this policy from time to time. The version at the top of this page ("Last updated") always reflects the current policy. Significant changes will be highlighted on the site.
11. Contact
Data Controller: KWWD (Katy Whitton Web Development)
Contact: support forum