Privacy Policy

The controller under the General Data Protection Regulation (GDPR) is:

For privacy questions or requests, email hello@gamorium.com. We answer within one month (Art. 12(3) GDPR), and sooner where we can.

We have not appointed a data protection officer; the thresholds in Art. 37 GDPR and § 38 BDSG are not met.

No. Nothing on Gamorium requires you to provide personal data. There is no statutory or contractual obligation to give us anything, and you are free to decline at every point. The only consequence is that the feature you declined does not run: with no account you keep everything in your browser, without connecting Steam or Discord you add games by hand, and without opting into play recording your portrait simply does not count what you play on Discord. Nothing is withheld from you for saying no, and there is no reduced version of the site for people who do.

The website and API run on DigitalOcean (EU-Region, Frankfurt); the database runs on Neon (EU-Region, Frankfurt). Traffic is encrypted with HTTPS. We use security headers, a Content Security Policy, access controls and pseudonymous identifiers where possible.

The reverse proxy keeps no access log. Size-limited application logs contain request method, path, status, timing, response size and user agent, but not IP addresses or request bodies. Those container logs rotate by SIZE and not by age, so there is no fixed number of days after which a line is gone - a quiet service keeps its last few megabytes longer than a busy one. Unhandled errors are stored for up to 30 days with their message, stack trace, method and path, without a user or session identifier.

The first time each distinct error occurs, an alert with the same message, stack trace, method and path is also posted to a private Discord channel of ours so we notice production failures. It carries no user, session or account identifier. Because an error message can quote text from the request that caused it, an alert can incidentally contain something you typed; credentials and tokens are stripped before sending.

Images loaded from third parties. Game cover art is not copied onto our servers - your browser fetches it directly from IGDB (images.igdb.com, operated by Twitch/Amazon), which happens on most pages that show a game, including the search suggestions on the home page. If you are signed in with Steam, your browser likewise fetches your Steam avatar directly from Valve. Those requests reach IGDB and Valve rather than us, and carry what any web request carries: your IP address, your browser's user agent, and the fact that the request came from gamorium.com. We send them nothing else, they set no cookies we rely on, and we receive nothing back about you. Legal basis: Art. 6(1)(f) GDPR - showing a game's cover is part of the page you asked for, and IGDB's terms ask us to link their images rather than rehost them. Every other asset - fonts, scripts, styles, icons - is served from our own servers, and there are no advertising, social or analytics third parties anywhere on the site.

We process IP addresses and, for Discord commands, one-way caller codes to enforce rate limits. The counter row does not hold your address. It holds a one-way digest of it, keyed with a secret only our server has, so the stored value cannot be turned back into an address by anyone who obtains it. Every counter is deleted once it is 26 hours old, whether it counted an hour or a day - 26 hours is simply what our longest limit needs. Deletion runs on the next bit of traffic, with a sweep every six hours behind it, so on a completely quiet site a counter could last 32 hours at the outside. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in security, availability and bounded operating cost.

Catalog scoring. If a searched game is not in the catalog, we send its title to Anthropic's Claude API (Anthropic Ireland, Limited). No user identifier or portrait is included. Claude may search the web for an unfamiliar title; we may retain the public source URLs with the final catalog score. Legal basis: Art. 6(1)(f) GDPR - our legitimate interest in building and maintaining the game catalog the site exists to provide. Only a game title leaves our system; no user identifier is involved.

Profile features. These run only when you press their button. The deep read sends your derived axis profile and six most-played game titles. "Your fit" sends the selected game, your derived portrait and eight most-played titles. "Picked for you" sends the target profile and titles you already own. We do not retain these inputs or generated profile responses on our servers after returning them. Results may be cached locally in your browser so they do not need to be regenerated unnecessarily. Legal basis: Art. 6(1)(b) GDPR.

Anthropic states that commercial API inputs and outputs are deleted within 30 days, that content flagged by its automated safety systems may be kept for up to two years, and that trust-and-safety classifier scores may be kept for up to seven years - see its commercial data-retention policy. It separately states that data from commercial products, including the API, is not used to train its models without permission, which we have not given - see is my data used for model training.

What an account is here. Saving anything creates a Gamorium account. Steam and Discord are ways of proving it is you, not accounts of their own on this site - one Gamorium account can have both connected, and then either sign-in reaches the same saved portrait. Connect the second one from your account page while signed in with the first. If you instead sign in fresh with the other provider and save, that starts a separate Gamorium account with its own portrait. Connecting it afterwards works only while that second account is still empty; once it holds a saved portrait or recorded play, the two cannot be combined and you would delete one of them. There is no registration step, no password and no email address - the account comes into being when you first save, and deleting it removes it entirely.

Steam and Discord sign-in are optional. Steam OpenID gives us your public SteamID; Discord OAuth gives us your Discord ID, username and avatar. We use the provider ID to derive a one-way internal account code and do not store the raw ID in our database. The signed 24-hour session cookie in your browser contains the provider and ID needed to keep you signed in. We store the connected account name so you can see which account is linked. Discord's avatar is not stored, and its access token is discarded after sign-in. We request Discord's identify scope only, never email.

Importing your library. When you import from Steam, our server asks Valve for your owned games and playtimes using your SteamID and passes the answer straight back to your browser. We do not keep that list unless you separately press Save my portrait. While you are signed in we also ask Valve for your display name and avatar so the account menu can show who you are; the name is stored, the avatar is not.

The signed session cookie is called gamorium_steam for historical reasons and is used for both providers. It expires after 24 hours or on sign-out. It is strictly necessary for the requested sign-in under section 25(2) no. 2 TDDDG. Connecting Discord does not enable play-activity recording.

Your portrait stays in your browser unless you are signed in and press Save my portrait. Saving keeps a server copy so you can restore it on another browser or device.

That copy holds two things. First, your 60 most-played games - for each one the title, hours played, recent hours, and the Steam app id where we have it. Second, every game you excluded, added by hand, or matched to a catalog entry yourself. Those are your own choices and we cannot rebuild them from Steam, so they are all kept, however many there are: a typical portrait stores 60 entries, and more if you have made a lot of manual corrections. We also store the four-axis snapshots we derive from it. The copy is linked to your one-way account code, not a stored SteamID or Discord ID.

We retain the server copy for as long as you choose to keep the portrait saved because it is needed to provide restoration. Disconnect and delete immediately and permanently deletes the saved inputs, snapshots and provider links, along with any recorded Discord play activity and your Discord command diagnostics; a legacy feedback ticket using the retired follow-up option is unlinked from you and survives only as an unattributed report. It then signs you out and clears the browser copy. Legal basis: Art. 6(1)(a) GDPR. You can withdraw consent at any time without affecting earlier lawful processing.

Play-activity recording is separate, optional and off until you explicitly enable it. If enabled, we store the game name and accompanying Discord activity text, Discord application ID, session times, catalog match, corrections and rules needed to maintain your private portrait. You can pause recording, correct or exclude a session, export tracked time, or withdraw consent and erase the stored history.

Installing the bot into a server is separate again, and involves no personal data of yours: we keep a one-way server code, a coarse member-count range and lifecycle timestamps so the bot can recognise its installations. That is set out for admins in the bot privacy notice, and it is what the last two rows of the retention table below refer to.

Discord sends presence events for members of a server where the bot is installed. Events for people who have not opted in are discarded in memory and are not logged or stored. The bot does not read messages, channels or friends lists. Full details for server members and admins are in the dedicated bot privacy notice; contractual rules are in the separate bot terms of use.

Gamorium uses browser localStorage for feature data such as your board, imported library, portrait, watchlist, preferences, cached results and whether you dismissed the notice bar. This stays on your device: it is not transmitted to us, and no key is an identifier we could recognise you by. Nothing is written until you use the feature that needs it - a first visit, or a visit that only reads pages, leaves your browser storage empty (verified on the live site, 2026-08-24). Storing it is strictly necessary to provide the features you asked for, so it is covered by section 25(2) no. 2 TDDDG and needs no consent. Two of them are worth naming separately: whether you dismissed this notice, which is stored only so the bar does not reappear on every page, and results from AI features you already ran, cached so pressing the button twice does not regenerate the same answer. Both stay on your device and neither is read by us. You can clear it through Gamorium or your browser. We set no advertising or analytics cookies and use no cross-site tracking.

We run Umami on our own EU infrastructure for cookie-free reach and feature-use measurement. To count a visit as one person rather than several, it derives a daily code from your IP address and browser that we cannot reverse and that changes every day, so it never follows you from one day to the next. No cookie is set, no cross-device profile is built, and your IP address is not stored.Most events contain only an event name. A few also carry a small detail about what you did: the title you searched for or analysed, the pair of games on a compare share card, the dominant axis of your own portrait when you generate a portrait share card, and counts such as how many games your library held. None of it is attached to your Gamorium account or leaves our servers, though events from one visit are linked to each other for that day by the code above. The measurement script writes nothing to your device; it only checks whether you have set a local opt-out flag before sending anything, which is itself covered by section 25(2) no. 2 TDDDG. Legal basis: Art. 6(1)(f) GDPR - our legitimate interest in understanding aggregate use well enough to run the site, using the least identifying measurement we could find.

A thumbs verdict, suggested score or optional comment is stored without an IP address, session identifier or account code. Free text may still contain personal data if the author enters it, so please do not include sensitive information. To remove a comment, contact us with enough detail to locate it. Anonymous portrait-percentile contributions contain only four rounded axis values and are stored as aggregate counts.

Discord feedback is separate from website contributions. Its private modal stores the report type, text, allowlisted surface, app version and time for 12 months. By default no account identifier is stored. A separate unchecked option can add you to the ticket's private Discord support thread for a direct conversation; choosing it makes your Discord account visible to the support staff in that thread, but does not store the raw ID in our database. See the bot privacy notice for the full Discord-specific description.

A suggested score is also posted as a private thread in our own Discord support server so we can review it, containing the game, the scores and your comment. Nothing identifying accompanies it - we hold no IP address, session or account code for a suggestion, so the post cannot be traced back to you.

If you email us, we use the message and contact details to answer you and delete them when the request is resolved unless a statutory tax or commercial retention period applies. Legal basis: Art. 6(1)(b) or (f) GDPR.

Our contracting party is Anthropic Ireland, Limited (6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland), so this processing stays inside the EU. If Anthropic ever passes data to its US parent, that transfer is covered by the Standard Contractual Clauses - a contract the European Commission wrote, which legally binds the US side to protect your data to EU standards. Anthropic's Data Processing Addendum is where those clauses are agreed to, and Art. 46 GDPR is what makes them a valid basis for the transfer. Any other transfer out of the EEA relies on the same clauses, or on an EU decision that the destination country already protects data adequately.

Where to find the safeguards. Each processor publishes the addendum it relies on, and these are the clauses that govern our accounts: Anthropic's Data Processing Addendum, DigitalOcean's and Databricks', which is the one that governs Neon (Neon, LLC is a Databricks company; its product schedule sits under the Databricks master agreement, and that agreement incorporates the addendum by reference).

We do not sell personal data, to anyone, in any form.

You may request:

• access to your personal data (Art. 15 GDPR)
• rectification (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability where applicable (Art. 20)
• withdrawal of consent at any time with future effect (Art. 7(3))

Your right to object (Art. 21 GDPR). Where we rely on legitimate interests - which here means operating and securing the site, measuring aggregate use, building the game catalog, and handling reports - you have the right to object to that processing at any time, on grounds relating to your particular situation. You do not need to justify the objection beyond describing your situation, and it costs you nothing. If you object we stop, unless we can show compelling legitimate grounds that override your interests. Email hello@gamorium.com with the word "objection" and what you want stopped.

Email hello@gamorium.com. For a saved portrait, signing in and using Disconnect and delete is the fastest erasure method. The account page also exports recorded play sessions as CSV. Where we deliberately hold no identifier, we may need enough information to locate the data.

Profiling and automated decisions. Your portrait is a profile in the sense of Art. 4(4) GDPR: it is derived automatically from the play data you provide, to describe how you play. It shapes what the site shows you and nothing else. We make no automated decision that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR) - the portrait is never used to judge you, to price anything, or to decide access. Profile features run only when you press their button, and objecting under Art. 21 or simply not using them stops the processing entirely.

You may complain to any competent EU supervisory authority. Ours is:

Gamorium is intended for adults aged 18 or older and knowingly collects no data from children. Contact us if you believe a minor has submitted personal data.

We update this notice when processing changes and publish the revision date at the top. Because we normally have no email contact channel for users, material changes are announced on the site. A saved portrait records the notice version accepted when saved.

Diese Kurzfassung fasst die wichtigsten Punkte zusammen. Maßgeblich ist der vollständige englische Text oben.