GameDropz^™ ← Back to app

Privacy Policy

Last updated: 16 June 2026

This Privacy Policy explains what personal data GameDropz™ ("we", "the service") collects from you, why we collect it, and how we handle it. We follow the EU General Data Protection Regulation (GDPR) and Czech Act No. 110/2019 Coll.

1. Who is the data controller

The service is operated as a personal project by an individual operator based in the Czech Republic. Contact: [email protected]. We do not run a business operation; the service is offered free of charge.

2. What data we collect

If you use GameDropz without an account, no personal data is sent to our servers — your wishlist and preferences live only in your browser's local storage on your device.

If you create an account, we collect and store:

• Email address — used as your login identifier.
• Hashed password — never stored in plain text; we use a one-way cryptographic hash.
• Wishlist data — the IDs of games you have added to your wishlist.
• Profile data — an optional display name you set yourself.
• Session tokens — a random identifier stored on your device to keep you logged in.
• Basic technical data — IP address and User-Agent, logged transiently by Cloudflare for security and abuse prevention. We do not store or analyze these ourselves.

3. Why we process this data (legal basis)

• Performance of a contract (Art. 6(1)(b) GDPR) — to provide you with an account, store your wishlist, and let you access it across devices.
• Legitimate interest (Art. 6(1)(f) GDPR) — to keep the service secure, prevent abuse, and maintain system stability.

We do not use your data for marketing, profiling, advertising, or sell it to third parties.

4. Where your data is stored

Account data and wishlists are stored in Cloudflare D1 (a managed SQLite database) hosted on Cloudflare's global infrastructure. Cloudflare acts as our data processor under a Data Processing Addendum that complies with GDPR. Data may be processed in data centers outside the European Economic Area (EEA); Cloudflare uses Standard Contractual Clauses to ensure equivalent protection.

See Cloudflare's privacy practices: cloudflare.com/privacypolicy.

5. Third-party services

• IGDB / Twitch API — we fetch game metadata (titles, covers, release dates) from IGDB. Your personal data is never sent to IGDB; the request goes through our server using our own credentials.
• Google Fonts — the Inter font is loaded from fonts.googleapis.com. Google may log your IP address for the purpose of serving the font. If you wish to avoid this, use a font-blocking browser extension.
• IGN RSS feed — news headlines are fetched server-side, then served to your browser. No personal data is shared with IGN.

We use no analytics, no tracking pixels, no advertising networks, and no social-media trackers.

6. Cookies and local storage

GameDropz does not use cookies for tracking. We use the browser's local storage (a similar but separate mechanism) for:

• Storing your session token (only if you sign in).
• Saving UI preferences (theme, dismissed banners).
• Caching your wishlist locally for offline access.

All of this is strictly necessary for the service to work, so no consent banner is required under ePrivacy rules.

7. How long we keep your data

Your account and wishlist data are kept as long as your account exists. You can delete your account at any time from the profile menu; once deleted, all your personal data is removed from our database immediately and is not recoverable.

8. Your rights

Under GDPR you have the right to:

• Access your personal data and receive a copy.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

To exercise any of these rights, contact [email protected]. We respond within 30 days.

9. Security

All traffic to GameDropz is encrypted using TLS. Passwords are hashed before being stored. Session tokens are randomly generated and bound to your device. We take reasonable technical and organizational measures to protect your data, but no system on the internet is 100% secure.

10. Children

GameDropz is not directed at children under 15. We do not knowingly collect data from minors. If you believe a child has created an account, please contact us and we will delete it.

11. Changes to this policy

If we materially change this policy, we will post the new version here and update the "Last updated" date. For significant changes affecting registered users, we will also notify you by email.