Ko-fiLegal
Privacy Policy
Last updated:
This privacy policy explains what data Game Guesser collects, why we collect it, and your rights regarding that data. We aim to be clear and honest — no legalese.
1. Data Controller
Game Guesser is operated by Garbage Apps.
Contact for privacy inquiries: garbag3.apps@gmail.com
We plan to migrate to a dedicated privacy address (privacy@gameguesser.com) via Cloudflare Email Routing in the future.
2. Data We Collect
We collect only what we need to operate the service:
- Account data — If you sign up, we store your email address and chosen username via Supabase Auth. Guest sessions use an anonymous identifier only.
- Game scores — When you submit a score to the leaderboard, we store your score, timestamp, and user ID.
- Preferences — Your cookie consent choice is stored in a browser cookie (
cc_cookie). No personal data is in this cookie. - Analytics — If you consent, Vercel Analytics collects aggregated page view and performance data. No individually identifying data is linked to you.
We do not sell your data. We do not build advertising profiles.
3. Legal Basis for Processing
| Processing Activity | Legal Basis |
|---|---|
| Auth session (login, anonymous play) | Contract — necessary to provide the service |
| Leaderboard score submission | Legitimate interest — expected feature of the game |
| Vercel Analytics | Consent — only when analytics category is accepted |
| Cookie consent record (cc_cookie) | Legal obligation — required to demonstrate GDPR compliance |
| Ad serving (future) | Consent — only when ads category is accepted |
4. Cookie Policy
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| sb-* (Supabase) | Auth session token | Session / 1 week | Necessary |
| cc_cookie (vanilla-cookieconsent) | Stores your consent choice | 6 months | Necessary |
| va_* (Vercel Analytics) | Aggregated analytics | Session | Analytics (opt-in) |
| Ad network cookies (future) | Ad serving & capping | Varies | Ads (opt-in) |
You can update your cookie preferences at any time using the Privacy Settings link in the footer.
5. Third-Party Services
- Supabase — Database and authentication provider. Processes auth data on our behalf under their privacy policy.
- Vercel — Hosting and analytics provider. See Vercel's privacy policy. Analytics only collected with your consent.
- IGDB / Twitch — Game database. We fetch game metadata (titles, release dates, screenshots) from the IGDB API at build / import time. No user data is sent to IGDB.
- Ad networks (future) — We may integrate ad networks in a future update. Ads will only load with your explicit consent. This policy will be updated before that change goes live.
6. Your Rights Under GDPR
If you are in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Ask us to correct inaccurate data.
- Erasure— Ask us to delete your account and associated data (“right to be forgotten”).
- Portability — Request your data in a machine-readable format.
- Objection — Object to processing based on legitimate interest.
- Restriction — Ask us to restrict processing while a dispute is being resolved.
- Withdraw consent — Change your cookie and analytics preferences at any time via Privacy Settings in the footer.
To exercise any of these rights, contact us at garbag3.apps@gmail.com. We will respond within 30 days.
7. Children's Privacy
Game Guesser is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 (COPPA). Under GDPR, users under 16 must have parental consent for data processing.
If you believe a child has provided personal data without appropriate consent, please contact us and we will delete it promptly.
8. Data Retention
| Data | Retention Period |
|---|---|
| Auth account (email, username) | Until account deletion |
| Anonymous session | Expires after session ends; no persistent data |
| Leaderboard scores | Indefinitely (they are public game records) |
| Consent cookie (cc_cookie) | 6 months, then consent is re-requested |
| Vercel analytics data | Per Vercel's retention policy (typically 90 days) |
You can delete your account at any time from your profile page. Account deletion removes your email, username, and associated scores.
9. California Privacy Rights (CCPA)
Game Guesser does not sell personal information. Phase 0 of our ad rollout uses a NullProvider — no ad network receives any user data.
When ad networks are integrated in a future update, we will add a “Do Not Sell or Share My Personal Information” control and update this policy accordingly.
10. Policy Changes
We may update this policy when our data practices change (e.g., when we add ad networks). Material changes will be announced on the site and the “Last updated” date at the top will be revised.
If we make a change that requires re-consent for analytics or ads, the cookie consent banner will reappear to collect a fresh consent.
11. Contact Us
For any privacy-related questions, data subject requests, or concerns, please contact:
Garbage Apps
Email: garbag3.apps@gmail.com
You also have the right to lodge a complaint with your local data protection authority if you believe we are not handling your data correctly.