Privacy Policy

Last updated: 18 October 2026

This policy explains what personal data GoNewGames ("GNG", "we", "us") processes, why, who sees it and what rights you have under the EU General Data Protection Regulation (GDPR) and Polish law.

1. The short version

We collect as little as we can. If you only browse, we keep nothing about you beyond ordinary technical logs and anonymous statistics. If you create an account, we keep who you are to the provider you signed in with and the two lists you build. We do not sell personal data, we do not build advertising profiles, and we do not send marketing email.

2. What we process, why, and on what basis

• Visiting the site. Your IP address, browser and device type, the page requested and the time. This is handled by Cloudflare, which hosts the site, and by Supabase when your browser loads game data from our database. Purpose: showing you the site, keeping it secure and stopping abuse. Basis: our legitimate interest in running a safe website (Art. 6(1)(f) GDPR).
• Anonymous statistics. We use Cloudflare Web Analytics to count visits and measure page speed. It does not use cookies, does not follow you across sites and does not build a profile of you. Basis: legitimate interest in understanding how the site performs.
• Store link clicks. When you click a Buy now button or a link to a store, we count the click anonymously: which game, which store and the time. We do not use cookies or record your IP address for this count, and it is not linked to you or to your account. Purpose: seeing which games interest visitors and checking affiliate reports. Basis: legitimate interest in understanding how the site is used.
• Your account. If you sign in with Google, Discord or Twitch, we receive your email address (if the provider shares it), your name or username and an identifier of your account with that provider. The provider may also share a link to your profile picture. Our login service records it with your account, but we do not display or use it. We also keep the games you add to your favorites and wishlist, with the date you added each one. Purpose: running the account features you asked for. Basis: performing our agreement with you (Art. 6(1)(b) GDPR).
• Keeping you signed in. After you log in, a session token is stored in your browser, and our login provider keeps technical records of sign-ins (such as time and IP address) for security. Basis: the same agreement, and legitimate interest in account security.
• Messages to us. Whatever you put in an email to us, for example your name, address and what you ask. Purpose: answering you. Basis: steps you requested before an agreement, or our legitimate interest in replying to enquiries (Art. 6(1)(b) and (f)).
• Partner tracking, only if you accept it. If you choose "Accept all" in the cookie settings, a script from our affiliate network Impact.com is loaded. It may set cookies or similar identifiers for the network's own optional measurement of impressions and clicks on affiliate links. Basis: your consent (Art. 6(1)(a) GDPR and Art. 173 of the Polish Telecommunications Law). You can withdraw it at any time with "Cookie settings" in the footer.
• Legal claims and compliance. If a dispute or a legal obligation arises, we may keep the data needed to establish, exercise or defend a claim or to comply with the law. Basis: legitimate interest and legal obligation (Art. 6(1)(c) and (f)).

We do not currently run a newsletter or send marketing email. If we ever do, we will ask for your separate consent first and update this policy.

3. Cookies and similar storage in your browser

The site uses your browser's local storage rather than ordinary cookies for its own needs:

• gng_cookie_consent (local storage): remembers your cookie choice. Necessary. Stays until you clear your browser data.
• A key ending in "auth-token" (local storage): your login session. Created only if you log in, removed when you log out. Necessary.
• gng-vid and keys starting with gng-ref- (local storage): created only if you open a friend's invitation link (a link with "?ref=" in it). gng-vid is a random identifier that contains no personal data. It is sent to our database together with the invitation code so that each person is counted only once for the friend who invited you. If you are logged in, your account is used for this instead. Necessary for the invitation feature, and it stays until you clear your browser data.
• gng-lang (local storage): remembers the language you picked in the language menu, so the site opens in it next time. Created only if you choose a language. Necessary for that feature, and it stays until you clear your browser data.
• gng-xp-day (local storage): remembers on this device that your daily login EXP was already collected today, so the site does not ask again. Created only if you log in. Necessary.
• gng_pending_action (session storage): remembers which favorite or wishlist button you pressed before logging in, so we can finish the action when you come back. Necessary, and deleted when you close the tab.
• Impact.com (cookies or similar identifiers): only after you choose "Accept all". Impact decides what it sets and handles it under its own privacy policy.

Cloudflare, which hosts and protects the site, may also set or read technical cookies for security and performance, for example to tell visitors from automated traffic. We do not use advertising cookies, and no ad network runs on the site today. If that changes, we will ask first.

You can change your choice at any time with the "Cookie settings" link in the footer of every page. Switching back to "Necessary only" reloads the page and stops the partner script from loading.

4. Who receives your data

We do not sell personal data. We share it only with providers we need to run the site, and with you only what is yours:

• Cloudflare: hosting, content delivery, DNS, security and anonymous statistics.
• Supabase: our database and login service, where account data and your lists are stored. Our project runs in Frankfurt, Germany, in the European Union.
• Google, Discord or Twitch: only the one you choose to sign in with. It learns that you are signing in to GoNewGames and processes that under its own privacy policy.
• Impact.com: only if you accepted partner tracking.
• Google (Gmail): our mailbox, which holds the messages you send us.
• jsDelivr (open-source code delivery) and image hosts such as RAWG or game stores: when your browser loads a code library or a cover image directly from them, they see your IP address and browser details, as with any web request.
• Public authorities, where the law requires it.

5. Transfers outside the European Economic Area

Your account data and lists are stored in the European Union (Frankfurt, Germany). Some of our other providers, such as Cloudflare, Google, Discord, Twitch and Impact.com, are based in, or process data in, the United States or other countries outside the EEA, and the companies behind our hosting and login services may also access data from outside the EEA for support or security. Where that happens, the transfer relies on an adequacy decision (for example the EU-US Data Privacy Framework for certified companies) or on the standard contractual clauses approved by the European Commission.

6. How long we keep data

• Account, favorites and wishlist: until you delete your account. Deleting is done on the My account page and is immediate and permanent. Backups kept by our provider are overwritten in the course of their normal rotation.
• Technical and security logs: kept by Cloudflare and Supabase for the short periods set in their own policies.
• Messages to us: as long as needed to deal with the matter, and then up to two years in case of follow-up, unless the law requires longer.
• Your cookie choice: in your browser until you clear it.

7. Your rights

You have the right to access your data, correct it, have it erased, restrict or object to its processing (in particular where we rely on legitimate interest), receive it in a portable format, and withdraw consent at any time without affecting what happened before. Deleting your account is available directly on the My account page. If you want a copy of your lists, email us and we will send it in a common format (CSV or JSON). We answer within one month.

You can also complain to the supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. If you live elsewhere in the EU, you can contact your local authority.

To use any of these rights, write to gonewgames.contact@gmail.com. We may ask you to confirm who you are before we act.

8. Is giving us data required?

No. You can use the site without an account and without giving us any personal data. If you want an account, we need the sign-in details described above, otherwise we cannot provide it. We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not profile you.

9. Children

GNG is not aimed at children. Accounts are for people aged 16 and over, or younger users with the permission of a parent or guardian. If we learn that we hold data of a child without that permission, we will delete it. Some games listed on the site are rated for adults and marked accordingly.

10. How we protect data

The site is served over HTTPS. We never see or store passwords, because sign-in is handled by Google, Discord or Twitch. Access rules in the database allow each account to read and change only its own lists, and we keep only what the features need. No system is perfectly secure, and if a breach is likely to put you at risk we will inform you and the authority as the law requires.

11. Changes to this policy

We update this policy when the site or the law changes, and the date at the top shows the latest version. For significant changes that affect account holders we will give notice on the site or by email.

12. Contact

For any privacy question or request, email gonewgames.contact@gmail.com or use our Contact page.