Maya Sari is the Privacy & Compliance Lead at HKQS Games, where she is responsible for making sure the company collects as little player data as possible, protects what it does collect, and complies with every privacy law that applies to a global gaming audience. She is the reason HKQS Games can credibly promise "no signups, no tracking" — a promise she treats as an engineering and legal commitment, not a marketing slogan.
Maya's working principle is uncompromising: privacy is a player experience, not a policy page. A privacy notice that nobody reads protects nobody. Real privacy protection is built into the product — into what data is collected in the first place, how it flows through the system, how long it is kept, and how easily a player can understand and control it. Everything she ships is designed to make the right thing the default, not the opt-in.
Maya began her career in data-protection law, advising companies on compliance with the GDPR as it came into force and watching firsthand how often "compliance" was treated as a checkbox exercise bolted onto a product after the fact. She grew frustrated with that pattern and made an unusual move for a lawyer: she crossed over into product. She wanted to be in the room when decisions were made, not after, so that privacy could shape the product rather than be retrofitted around it.
Before joining HKQS Games, Maya built and led privacy programs for consumer software companies, where she translated dense regulatory requirements into concrete engineering tasks — data-flow maps, retention schedules, consent-management systems, vendor assessments, and incident-response playbooks. She has navigated cross-border data transfers, supervised cookie-consence rollouts across multiple jurisdictions, and represented companies in regulator engagements. She has also spent a lot of time simply educating product teams on what the law actually requires, which is usually less than they fear and more than they assume.
At HKQS Games, Maya has embedded privacy-by-design into the entire product lifecycle. New features are reviewed for data implications before a line of code is written; analytics are configured to collect only what is genuinely needed and to aggregate or anonymize wherever possible; and the default state of every player's experience is "no account, no tracking, no identifiers persisted across sessions." When the team wants to add a measurement or a feature that touches player data, Maya's first question is always whether the same goal can be achieved without the data — and very often, it can.
She maintains a living data inventory that maps exactly what HKQS Games collects, where it is stored, who can access it, and when it is deleted. She runs periodic audits to make sure the inventory matches reality, because the most common privacy failure she has seen across the industry is not malice but drift — a feature added eighteen months ago that quietly started logging something nobody remembered to review. Her job, as she describes it, is half lawyer, half archaeologist.
Maya keeps HKQS Games compliant across a genuinely complex global landscape. The EU's GDPR sets the high-water mark for data-subject rights and lawful processing; California's CCPA and CPRA have carved out their own regime for US residents; and a growing list of jurisdictions from Brazil to the UK to several US states have layered on their own requirements. Rather than build a separate compliance program for each, Maya has designed a single privacy architecture that meets the strictest applicable standard by default — a "highest common denominator" approach that simplifies engineering and gives every player the strongest protection the company can offer.
She is particularly attentive to cookie law and the broader category of tracking technologies, an area where the games industry has a poor historical track record. Under her leadership, HKQS Games has moved away from behavioral advertising identifiers, minimized its use of third-party trackers, and built its measurement strategy around privacy-preserving techniques like aggregated analytics and on-device processing. The result is a product that loads faster (because it is not hauling a dozen tracking scripts) and respects players more — two outcomes she is quick to point out are not in tension.
One of Maya's recurring messages to the product team is that compliance, done well, is a creative constraint rather than a brake on innovation. When the team cannot rely on quietly following players around the web, they are forced to build better games and to measure success through signals players actually consent to sharing. She has seen this dynamic produce better products: clearer onboarding, more honest marketing, and retention curves driven by genuine enjoyment rather than engagement-manipulation tricks that depend on surveillance.
She is also a careful steward of the company's relationship with its players on privacy questions. She wrote and maintains the HKQS Games privacy policy with the goal of making it readable by an actual human rather than a regulator, and she has pushed for plain-language explanations of what the company does and does not collect. She believes that the best privacy communication is the one a player can understand in under two minutes — and that anything longer is usually hiding something.
Maya spends a meaningful part of her time on education — both inside the company and outside it. She runs internal training that helps engineers, designers, and marketers build an intuition for privacy, so that good decisions get made without her in the room. She also writes publicly about privacy in the games industry, an area she considers chronically under-discussed given how much data games traditionally collect. Her writing is practical rather than alarmist: she wants players to understand what is at stake and developers to understand that respecting privacy is both legally necessary and good business.
She is a mentor to other privacy professionals, particularly those working in smaller companies that cannot afford a large legal team. She believes privacy expertise should not be a luxury reserved for the largest platforms, and she actively shares the templates, checklists, and decision frameworks she has built over her career. You can read her most recent piece — on how HKQS Games built a no-signup, no-tracking games platform — in the article below.
Currently, Maya is leading HKQS Games through the next wave of privacy regulation, including the expanding patchwork of US state laws and the evolving guidance on international data transfers. She is also piloting a privacy review process for AI-assisted features, an area where she believes the industry is moving faster than its safeguards, and where she wants HKQS Games to set a thoughtful example rather than follow a careless one.
Outside of work, Maya is an advocate for digital rights in her community, an enthusiastic (if novice) gardener who finds weeding a useful metaphor for data minimization, and a patient reader of privacy regulations who insists this is more interesting than it sounds. Reach her through the article below or on social media — she is always happy to talk privacy, and occasionally, only tangentially, about her tomatoes.
Maya maintains HKQS Games' privacy practices and is happy to walk any player through what we collect — and what we don't.