Privacy Policy

1. Who we are

BetaTesters.org is a beta testing recruitment platform that connects software developers with volunteer testers. The platform is owned and operated by:

For the purposes of UK GDPR and EU GDPR, Innovations and More Ltd is the data controller in respect of your personal information.

2. Information we collect

2.1 Account registration

When you create an account we collect:

• Full name — used to personalise your experience and to identify you in administrative communications.
• Email address — used to identify your account, to deliver reward notifications and to send administrative alerts to the platform operator.
• Password — stored as a one-way cryptographic hash (bcrypt). We never store or transmit your password in plain text.
• Registration date and time — recorded automatically when your account is created.

2.2 Feedback submissions

When you submit feedback on a beta project we collect:

• Your overall star rating (1–5).
• Your written answers to up to three optional open-ended questions (what you liked, what could be improved, bugs you found).
• The date and time of submission.
• The project identifier associated with the submission.

2.3 Optional collaboration information

The feedback form includes an entirely optional section for testers who would like to be considered for future collaboration opportunities with Innovations and More Ltd or with project developers. This section is only presented after feedback has been submitted and is activated only if you tick the relevant checkbox. If you do not tick the checkbox, none of the following information is collected.

If you choose to express an interest in collaboration, you may optionally provide:

• LinkedIn profile URL — a link to your public LinkedIn profile, to help us understand your professional background. You are under no obligation to provide this.
• Mobile telephone number — a contact number, in whatever international format you prefer, for use in relation to collaboration enquiries only. You are under no obligation to provide this.
• Contribution statement — a free-text description of your skills, experience, qualifications, ideas or expertise. This field is entirely optional.

This information is collected solely for the purpose of considering you for future collaboration or employment opportunities and will not be used for any other purpose. It will not be shared with any third party and will be retained only for as long as it is relevant to that purpose or until you request its deletion.

2.4 Uploaded files

You may optionally upload screenshots (JPG, PNG, GIF, WebP) and screen recordings (MP4, WebM, MOV) as part of your feedback submission. These files are:

• Stored on the web server that hosts BetaTesters.org.
• Accessible to the platform administrator via a private URL.
• Limited to 20 MB per file. File type and MIME type are validated on upload.

Do not upload files containing sensitive personal information, financial data or any content that is unlawful or violates the rights of others.

2.5 Technical and usage data

Our web server automatically records standard technical information when you access the platform, including your IP address, browser type, referring page, pages visited and the date and time of each request. This data is retained in server log files and is used solely for security, fraud prevention and platform stability purposes. It is not linked to your account profile.

We also use one first-party session cookie to maintain your login state (see Section 5).

2.6 Information we do not collect

We do not collect payment card numbers, bank details, government identification numbers, health data, biometric data, or precise geolocation data. We do not build advertising profiles or sell your personal information to third parties.

3. How we use your information

We use the personal information we collect for the following purposes:

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal basis for processing (UK & EU users)

Under UK GDPR and EU GDPR, we must have a lawful basis for processing your personal information. Our bases are:

• Contract (Article 6(1)(b)): Processing your name, email address and feedback submissions is necessary to perform the beta testing service you have requested and to administer your account.
• Legitimate interests (Article 6(1)(f)): We process IP addresses and server log data to protect the security of the platform, prevent abuse and ensure service reliability. Our legitimate interests do not override your fundamental rights and freedoms.
• Legal obligation (Article 6(1)(c)): We may process your information where necessary to comply with a legal obligation, for example in response to a lawful request by public authorities.
• Consent (Article 6(1)(a)): Where we rely on consent (for example, for any non-essential cookies we may introduce in future), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies and similar technologies

We use a small number of cookies. Please see our Cookie Policy for full details, including how to manage your preferences.

In summary:

• Session cookie (PHPSESSID): An essential first-party cookie that keeps you signed in during your visit. This cookie is deleted when you close your browser or sign out. It does not track you across websites.
• Consent cookie (bt_consent): Stores your cookie consent preference so we do not repeat the consent banner on each visit. Expires after 365 days.

We do not currently use analytics cookies, advertising cookies or any third-party tracking technologies. If we introduce these in future, this policy and our Cookie Policy will be updated and fresh consent will be requested where required.

6. Sharing your information

We do not sell, rent or trade your personal information. We share it only in the limited circumstances described below:

• Platform operator: Your name, email address, feedback content and any uploaded files are accessible to the authorised administrator of BetaTesters.org (Innovations and More Ltd) to operate the service and arrange rewards.
• Hosting provider: Our website is hosted on a third-party hosting platform. Your data is stored on servers provided by that host. The host processes data on our behalf and is contractually bound to keep it secure and not to use it for any other purpose.
• Legal requirements: We may disclose your information if required to do so by law, court order, or a request from a competent public authority, or where we reasonably believe disclosure is necessary to protect our legal rights, the safety of any person, or to prevent fraud.
• Business transfer: In the event of a merger, acquisition or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this policy.

No personal data is transferred to any third party for marketing purposes.

7. Data storage and security

Your personal information is stored in a SQLite database file on the server that hosts BetaTesters.org. The database file is located outside the publicly accessible web root directory.

We implement the following security measures:

• Passwords are hashed using the bcrypt algorithm with a cost factor of 12. Plain-text passwords are never stored.
• All forms use CSRF tokens to prevent cross-site request forgery.
• All input is parameterised using PDO prepared statements to prevent SQL injection.
• All output is HTML-escaped to prevent cross-site scripting (XSS).
• Uploaded file types are validated against both file extension and MIME type.
• Session cookies are set with the HttpOnly flag and strict session mode is enabled.
• Rate limiting is applied to login and registration endpoints to resist brute-force attacks.
• Session identifiers are regenerated on login to prevent session fixation.
• Security headers are set including X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy.

No system of transmission or storage can be guaranteed to be 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and any applicable supervisory authority as required by law.

8. Data retention

We retain your personal information for as long as is necessary for the purposes set out in this policy, subject to the following guidelines:

• Account data (name, email, password hash): Retained for the duration of your account. If you request account deletion, your account data will be removed within 30 days of a verified request.
• Feedback submissions: Retained indefinitely for the purposes of operating the platform and providing a record of testing activity. On account deletion, feedback records may be anonymised rather than deleted so that aggregate platform data remains accurate.
• Uploaded files: Retained until manually deleted by the platform administrator or as part of an account deletion request.
• Server logs: Typically overwritten or deleted on a rolling basis in accordance with the hosting provider's standard log rotation policy.
• Rate limiting records: Automatically purged after the applicable rate-limiting window (up to 10 minutes).

9. International users

BetaTesters.org is operated from the United Kingdom. If you access the platform from outside the United Kingdom, your personal information will be transferred to and processed in the United Kingdom.

The United Kingdom has been granted an adequacy decision by the European Commission, meaning that transfers of personal data from the European Economic Area to the United Kingdom are permitted without additional safeguards.

California residents (CCPA/CPRA): In addition to the rights described in Section 10, California residents have the right to: know what personal information we collect, use, disclose or sell; request deletion of personal information (subject to exceptions); opt out of the sale of personal information (we do not sell personal information); and not to be discriminated against for exercising privacy rights. To exercise these rights, please contact us at admin@innovationsandmore.com. We will not discriminate against you for exercising any of these rights. We do not sell personal information as defined by the CCPA/CPRA.

Other jurisdictions: We endeavour to comply with applicable privacy laws in all jurisdictions where we operate. If you have a question about how we process your data under the law of a specific jurisdiction, please contact us.

10. Your privacy rights

Depending on where you are located, you may have the following rights regarding your personal information:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to rectification: You may request that we correct inaccurate or incomplete personal information.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal information in certain circumstances.
• Right to restriction of processing: You may request that we restrict the processing of your personal information in certain circumstances.
• Right to data portability: You may request a copy of your personal information in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests.
• Rights related to automated decision-making: We do not carry out automated decision-making or profiling that produces significant effects.

To exercise any of these rights, please contact us at admin@innovationsandmore.com. We will respond to verified requests within one month (UK/EU GDPR) or 45 days (CCPA/CPRA). We may extend this period where permitted by law and will notify you if we do so.

We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

If you are located in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EEA, you may complain to the supervisory authority in your country of residence.

11. Children's privacy

BetaTesters.org is not directed at children. We do not knowingly collect personal information from anyone under the age of 13 (or 16 where required by applicable law, including UK GDPR). If you are a parent or guardian and believe your child has provided us with personal information, please contact us at admin@innovationsandmore.com and we will delete the information promptly.

By creating an account, you confirm that you are at least 13 years of age (or the minimum digital age of consent in your jurisdiction if higher).

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other operational reasons. When we make material changes, we will update the effective date at the top of this page.

We encourage you to review this policy periodically. Your continued use of BetaTesters.org after the effective date of any updated policy constitutes your acceptance of the changes.

13. Contact us

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal information, please contact us:

We will endeavour to respond to all legitimate enquiries within 14 working days.