About this notice
This notice describes personal information processed when you browse GameGrocer or use a GameGrocer account. It covers the current website and account features. A separate notice will be provided if new services introduce additional uses of personal information.
Information we collect
When you create an account with email and password, we store your name, email address, email verification status, account creation and update times, and a password hash. We do not store your password in plain text.
Session records include a session identifier, expiry time, and may include your IP address and browser information. Authentication rate limits and operational logs help us identify failures and prevent abuse. Do not send passwords or payment details in account profile fields.
Resend delivers account verification and password recovery emails using your email address and a short-lived link. Delivery records are held temporarily for retries and deleted after delivery or expiry. GameGrocer does not send your password to Resend.
How information is used
Account information is used to create and maintain your account, authenticate you, display your profile, and protect the website against unauthorized access and abuse. Operational data is used to diagnose errors and maintain service reliability.
When checkout is enabled, we record your account ID, seller, product version, price, Stripe transaction references, accepted purchase terms and EULA, delivery acknowledgement, payment status and download events. Stripe collects payment and billing information on its own hosted page. GameGrocer does not store complete payment-card numbers.
Cookies and local storage
A necessary session cookie keeps you signed in. Production session cookies use Secure, HttpOnly and SameSite protections. Application sessions expire after seven days and may be renewed while you use your account. Signing out revokes the active session.
Your basket and wishlist are saved as product identifiers in this browser’s local storage. They are not saved to your account or synchronized between devices. Clearing local storage removes those saved items. Blocking cookies may prevent account features from working. The current application does not install advertising or analytics cookies.
Optional services are off until you allow them. Cookie preferences in the footer lets you accept, reject or change optional permissions. Your choices, their version and the time saved are stored in this browser’s local storage for 180 days; they are not linked to your account or shared across devices. Expired or incompatible choices are requested again. Necessary account, basket and wishlist functions remain available when optional services are rejected.
On storefront product pages, YouTube players load only after you allow External media and select a video in the product gallery. The player contacts YouTube, which receives your IP address and browser information and may use its own storage under its privacy notice. Withdrawing permission unloads the player and blocks further loads on GameGrocer; it cannot erase data already sent to YouTube. No optional advertising or browser analytics provider is currently enabled.
Hosting and optional Google sign-in
Cloudflare provides website hosting, the account database, traffic protection and operational infrastructure. Information may be processed through its global infrastructure.
If Google sign-in is available and you choose it, Google handles authentication and provides the profile information required to create or identify your GameGrocer account, such as your name, email address and profile image. GameGrocer does not receive your Google password. Google handles its own services under its privacy policy. The Google option remains unavailable until configured.
Publisher submissions and private files
If you use the publisher portal, profile information, product submissions, license text, media and review history are stored for private administrative review. Uploaded images and packages are held in private Cloudflare R2 storage. Authorized owner and support administrators can review these records and download submitted files. Approved publisher profiles, including their name, slug, introduction, about text, website, icon and cover, have public previews. Approved product names, summaries, descriptions, features, prices, license text and marketing images are public on GameGrocer. Pending revisions and product packages remain private; authorized purchasers can download the reviewed package after payment is verified. Packages have no permanent public R2 URL. Administrators may grant or remove a Verified badge. Suspended publisher profiles and their products are unavailable publicly.
The publisher portal uses its own host-only account session and stores upload identifiers in your browser to resume uploads. Unfinished uploads expire after 24 hours; files linked to retained review versions remain stored and count toward your quota. YouTube players contact YouTube only after you choose to load a video.
Stripe payments and publisher earnings
Stripe processes payment and billing information, fraud checks, tax calculations and refunds under its own privacy notice. GameGrocer stores transaction references, tax totals and delivery records. Publishers provide their legal name, country and contact email for sales authorization; GameGrocer records publisher earnings and external payout references. Publishers do not connect a Stripe account.
Purchase, license-acceptance and financial records may need to be retained for legal, accounting, fraud-prevention and dispute purposes. Retention requirements depend on the operator’s and seller’s countries; those business details must be completed before live payments begin.
Retention and protection
Account records are retained while the account exists. Session records have expiry times; security and operational records may be retained when necessary to protect and operate the service. The current application has no automatic account-deletion or inactivity-deletion feature.
We use HTTPS, hashed passwords, server-side session checks and access controls. No storage or transmission method can guarantee absolute security.
Your choices and updates
You can change optional service permissions using Cookie preferences in the footer, sign out, control cookies in your browser, and remove the locally saved basket and wishlist by clearing site storage. Clearing browser data also resets your consent choices; it does not delete server-side account records. Any statutory privacy rights that apply to you remain unaffected.
Changes to this notice will appear on this page with an updated date. Additional operator and contact information will be added when the business details are finalized.