← Back

Privacy Policy

Last updated: July 1, 2026

1. Introduction

Gamerlog is operated by David Kiziria, a sole proprietor (Kleinunternehmer) based at Harzer Strasse 37, 12059 Berlin, Germany. Contact: .

Welcome to Gamerlog. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our game tracking and social platform.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, username, and password when you create an account.
• Profile Data: Avatar, bio, and other optional profile information you choose to provide.
• Gaming Data: Games you track, ratings, reviews, lists, and gaming activity you log.
• Social Data: Users you follow, comments, and likes on community content.
• Usage Data: How you interact with our platform, including pages visited and features used.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Gamerlog service
• Personalize your experience and recommendations
• Enable social features like following users and sharing content
• Send important service updates and notifications
• Analyze usage patterns to improve our platform
• Prevent fraud and ensure platform security

4. Data Sharing

We do not sell your personal data. We may share information with:

• Other Users: Your public profile, reviews, ratings, and lists are visible to other users.
• Service Providers: Third-party services that help us operate the platform (hosting, analytics).
• Legal Requirements: When required by law or to protect our legal rights.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption, secure authentication, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Contractual necessity (Art. 6(1)(b)): Account data, profile data, and gaming data — required to provide the Gamerlog service.
• Legitimate interest (Art. 6(1)(f)): Usage analytics (to improve the platform), security and fraud prevention.
• Legal obligation (Art. 6(1)(c)): Retaining certain data when required by applicable laws.

7. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access your personal data and obtain a copy
• Correct inaccurate or incomplete information
• Delete your account and all associated data
• Restrict or object to processing of your data
• Request data portability — contact us at to request an export of your data
• Withdraw consent at any time for any processing based on consent, without affecting the lawfulness of processing prior to withdrawal
• Lodge a complaint with a supervisory authority — for users in Germany, the relevant authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (www.datenschutz-berlin.de)

To exercise any of these rights, contact us at .

8. Cookies & Consent

We use essential cookies to maintain your session and preferences. We may also use analytics and advertising cookies. You can manage your cookie preferences at any time via the "Privacy Settings" link in the website footer.

9. Data Retention

We retain your personal data for the following periods:

• Account data: Retained while your account is active. Permanently removed within 30 days of account deletion.
• Gaming data: Retained while your account exists. Deleted with your account.
• Usage/analytics data: Identifiable logs deleted within 90 days. Aggregated data may be retained indefinitely.
• Security logs: Retained for up to 90 days.

10. International Data Transfers

Your data may be processed outside the EEA. We use providers including:

• Supabase (database/auth) — may process data in the United States
• Umami (privacy-friendly analytics) — EU-based, data stays in the EU

Where data is transferred outside the EEA, we ensure safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions are in place.

11. Sub-Processors

We use the following third-party sub-processors:

• Supabase Inc. — Database hosting, authentication, backend services
• Google LLC — Authentication only (Sign in with Google)
• Umami (umami.is) — Privacy-friendly website analytics
• IGDB (Twitch Interactive) — Game metadata
• Lovable (GPT Engineer) — Application hosting and deployment

12. Children's Privacy

Gamerlog is not intended for children under 16. We do not knowingly collect personal information from children under 16.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by updating the "Last updated" date.

14. Contact Us

For questions about this privacy policy, contact us at