Privacy Policy

Effective Date: February 24, 2026

1. Controller (GDPR Art. 4 No. 7)

2. Data We Collect

Data You Provide

• Account Registration: Username, email address, and password (stored as bcrypt hash).
• User Preferences: Game watchlist entries and backlog status.
• Contact: Content of messages you send us.

Data Collected Automatically

• Session Cookie (gaimers_token): HttpOnly cookie for login state, valid for 30 days. Not readable via JavaScript.
• Server Logs: IP address, browser type, pages visited, timestamps — retained for security and error diagnosis.

Third-Party Services

• IGDB (Twitch Interactive, Inc.): Game titles, cover images, descriptions, and ratings. Your IP address may be transmitted to IGDB servers. igdb.com/api
• Twitch (Twitch Interactive, Inc.): Live stream and viewer data. Twitch Privacy Policy
• Amazon Associates: When you click an Amazon link, Amazon may set a cookie on your device to attribute the purchase to this site. Amazon is the data controller for this process. Amazon Privacy Policy
• Google Analytics (Google Ireland Limited): We use Google Analytics 4 to understand how users interact with our website. This involves collecting data such as IP addresses (anonymized), device information, pages visited, and time spent on site. This data is used to improve our website and user experience. Google Analytics cookies are only set with your explicit consent. Google Privacy Policy

3. Legal Basis for Processing (GDPR)

• Contract performance (Art. 6(1)(b) GDPR): Account management, backlog, and watchlist.
• Legitimate interests (Art. 6(1)(f) GDPR): Security, error diagnosis, fraud prevention.
• Consent (Art. 6(1)(a) GDPR): Google Analytics cookies and Amazon affiliate cookies (only set with your explicit consent).

4. Cookies

We use only technically necessary cookies:

• gaimers_token – Session cookie for login state (30 days, HttpOnly, Secure).
• Google Analytics Cookies – Used to collect anonymized data about website usage (e.g., `_ga`, `_gid`, `_gat`). Only set with your explicit consent.

We do not use tracking cookies or third-party advertising cookies. Amazon cookies are only set when you actively click an Amazon link on this site.

5. Data Retention

Your account data is retained for as long as your account is active. You may request deletion at any time (see Section 7). Server logs are retained for a maximum of 30 days.

6. Data Security

• Passwords stored exclusively as bcrypt hashes — never in plain text.
• All data transmitted via HTTPS (SSL/TLS).
• Session tokens set as HttpOnly cookies, not accessible via JavaScript.

7. Your Rights (GDPR Art. 15–22)

You have the following rights regarding your personal data:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure / "right to be forgotten" (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise any of these rights, contact us at contact@gaimers.net. You may also delete your account directly in your profile settings.

8. Third-Party Links

This site contains links to external websites (IGDB, Twitch, Steam, Amazon). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

9. Children's Privacy

This site is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced by updating the effective date above.

11. Contact

Serkan Sever
contact@gaimers.net

Last updated: February 24, 2026