Privacy Policy

Last updated: February 24, 2025

1. Introduction

Welcome to Gamerlog. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our game tracking and social platform.

2. Information We Collect

We collect the following types of information:

Account Information: Email address, username, and password when you create an account.
Profile Data: Avatar, bio, and other optional profile information you choose to provide.
Gaming Data: Games you track, ratings, reviews, lists, and gaming activity you log.
Social Data: Users you follow, comments, and likes on community content.
Usage Data: How you interact with our platform, including pages visited and features used.

3. How We Use Your Information

We use your information to:

Provide and maintain the Gamerlog service
Personalize your experience and recommendations
Enable social features like following users and sharing content
Send important service updates and notifications
Analyze usage patterns to improve our platform
Prevent fraud and ensure platform security

4. Data Sharing

We do not sell your personal data. We may share information with:

Other Users: Your public profile, reviews, ratings, and lists are visible to other users.
Service Providers: Third-party services that help us operate the platform (hosting, analytics).
Legal Requirements: When required by law or to protect our legal rights.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption, secure authentication, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

Contractual necessity (Art. 6(1)(b)): Account data, profile data, and gaming data — required to provide the Gamerlog service.
Consent (Art. 6(1)(a)): Advertising and analytics cookies — only activated after you give consent via our cookie banner.
Legitimate interest (Art. 6(1)(f)): Usage analytics (to improve the platform), security and fraud prevention.
Legal obligation (Art. 6(1)(c)): Retaining certain data when required by applicable laws.

7. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

Access your personal data and obtain a copy
Correct inaccurate or incomplete information
Delete your account and all associated data
Restrict or object to processing of your data
Request data portability — contact us at [email protected] to request an export of your data
Withdraw consent at any time for processing based on consent (e.g., advertising cookies), without affecting the lawfulness of processing prior to withdrawal
Lodge a complaint with a supervisory authority — for users in Germany, the relevant authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (www.datenschutz-berlin.de)

To exercise any of these rights, contact us at [email protected].

8. Cookies & Consent

We use essential cookies to maintain your session and preferences. We may also use analytics and advertising cookies. You can manage your cookie preferences at any time via the "Privacy Settings" link in the website footer.

9. Data Retention

We retain your personal data for the following periods:

Account data: Retained while your account is active. Permanently removed within 30 days of account deletion.
Gaming data: Retained while your account exists. Deleted with your account.
Usage/analytics data: Identifiable logs deleted within 90 days. Aggregated data may be retained indefinitely.
Cookie consent records: Retained for up to 12 months as required by GDPR.
Security logs: Retained for up to 90 days.

10. International Data Transfers

Your data may be processed outside the EEA. We use providers including:

Supabase (database/auth) — may process data in the United States
Google AdSense (advertising) — processes data globally
Plausible Analytics — EU-based
CookieYes (consent management) — may process data outside the EEA

Where data is transferred outside the EEA, we ensure safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions are in place.

11. Sub-Processors

We use the following third-party sub-processors:

Supabase Inc. — Database hosting, authentication, backend services
Google LLC — Advertising (AdSense), analytics
Plausible Insights OÜ — Privacy-friendly website analytics
CookieYes Limited — Cookie consent management
IGDB (Twitch Interactive) — Game metadata
Lovable (GPT Engineer) — Application hosting and deployment

12. Children's Privacy

Gamerlog is not intended for children under 13. We do not knowingly collect personal information from children under 13.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by updating the "Last updated" date.

14. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve Gamerlog. These include:

Strictly necessary cookies – required for login, security, and core functionality
Analytics cookies – used to understand how visitors use our platform
Advertising cookies – used by Google AdSense and approved third-party vendors

Visitors in the EU/EEA/UK will see a consent banner. Non-essential cookies only activate after consent. Users can change or withdraw consent via the "Privacy Settings" link in the footer.

15. Google AdSense and Third-Party Vendors

We use Google AdSense to display ads. Google and its partners may use cookies to display personalized or non-personalized ads, limit repetitive ads, measure ad performance, and detect invalid traffic.

Learn more: https://policies.google.com/technologies/partner-sites

16. Transparency & Consent Framework (TCF)

For EU/EEA/UK visitors, Gamerlog uses a certified CMP participating in the IAB Europe TCF. Consent choices can be modified through the "Privacy Settings" link.

17. California Privacy Rights (CCPA/CPRA)

California residents have the right to opt out of the sale of personal information, access their data, and request deletion. A "Do Not Sell or Share My Personal Information" option is available through our Privacy Settings panel.

18. Retention of Consent Records

We store anonymized cookie-consent records (status, timestamp, region) as required by GDPR and related laws.

19. Contact Us

For questions about this privacy policy, contact us at [email protected]