Privacy policy
Last updated: [date]
This English version is a translation provided for convenience. In case of any discrepancy, the Spanish version prevails.
Who processes your data
The controller is [full name or company name], tax ID (NIF) [NIF], with its address at [full postal address]. For any question about your data: [contact email]. More details in the Legal notice.What data we process and why
- Account: alias, email, encrypted password or passkey, profile photo and shelf photo if you upload them, and the date you accepted the Terms and confirmed you are an adult. They are used to create and maintain your account.
- Approximate location: we only store a position randomly shifted up to 1.5 km from the real one, never your exact location. When you sign up we estimate it from your IP address, which only indicates the approximate area of your internet provider, never your home; the IP isn't stored in your profile. You can refine your location later by giving your browser permission. It's used to show you games nearby and to show yours to other users in your area.
- Your collection, proposals and ratings: the games you publish, the swaps you propose or accept, and the ratings, which are visible to other users.
- Chat messages: they are stored so the conversation remains available to both people. We don't read your chats. Only if one of the two people reports the other may we review the conversation between them to handle that report.
- Invitation requests: if you request an invitation from "I want my invitation", we store your email (and the IP address you request it from, only to prevent abuse) to send you the invitation. You can ask us to delete it at any time.
- Shelf scanning: if you use this feature, the photo is sent to Google Cloud Vision solely to read the titles on the spines. The photo (the first one, if you take several) is also saved as the shelf photo on your profile, visible to other users; you can change it from your profile without affecting your games.
- Email alerts: only if you turn them on in your profile. You can turn them off from your profile or with the link included in every email.
- Language: the language you use GameGu in is stored in your profile so that your emails reach you in that language.
- Reports and blocks: who reports or blocks whom and the reason, in order to moderate the platform.
Legal basis
We process your data because it is necessary to provide the service you accept when you sign up (performance of a contract, Art. 6(1)(b) GDPR); email alerts, because you turn them on (consent, Art. 6(1)(a)); and the review of reports and the security of the platform, based on our legitimate interest in keeping it free of abuse and on the obligations of the Digital Services Act (Art. 6(1)(c) and 6(1)(f)).Who else receives data
We don't sell your data or use it for advertising. The following providers process it on behalf of GameGu, solely to provide the service:- Supabase — database and files (servers in the European Union, Ireland).
- Vercel — website hosting and cookie-free visit statistics (United States).
- Resend — sending emails (United States).
- Google Cloud Vision — reading photos for shelf scanning (United States).
When the map and the covers load, your browser connects to OpenFreeMap (maps) and IGDB (images), which receive your IP address like any website you visit.
Transfers to the United States are covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
Cookies and storage in your browser
GameGu only uses what is strictly necessary to work: the session cookie that keeps you logged in, temporary technical cookies when you register a passkey, the cookie with the language you choose in the selector (if you don't choose one, your browser's language is used and nothing is stored) and, in your browser, your display preference for the sample accounts. GameGu doesn't use its own advertising or tracking cookies, and the visit statistics don't use cookies. That's why we don't ask for your consent for GameGu's cookies.
YouTube trailers: the trailers on game pages play in the YouTube (Google) player. It only loads when you tap "Watch trailer"; from that moment on, YouTube may set its own cookies and collect data about your browsing, under its own privacy policy (policies.google.com/privacy). If you don't tap "Watch trailer", nothing from YouTube is loaded.
How long we keep it
For as long as you have the account. If you delete it from your profile, your account, your collection, your messages and the rest of your data are deleted. Our providers' technical logs (for example, the IP of each login, kept for security) are deleted automatically after a limited time. We may keep what is strictly necessary for the legal periods if an authority requires it or to deal with an ongoing claim.Your rights
You can access, rectify or erase your data, object to or restrict its processing, and request its portability, by writing to [contact email]. You can also delete your account yourself from your profile. If you think we haven't handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).Minors
GameGu is only for people aged 18 or over. If we detect an account belonging to a minor, we will delete it.Changes
If we change this policy in a significant way, we'll let you know within the app.