Privacy policy
Last updated: 12 October 2026
This English translation is provided for convenience. In case of discrepancy, the French version prevails.
GameVote collects the minimum data needed to run votes, reviews and the Discord bot. No advertising, no data resale, no advertising trackers.
Data controller
WumpLabs, publisher of the website (see the legal notice). For any question about your data: [email protected].
Data collected and purposes
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Discord ID, username and avatar (via Discord login, "identify" scope only: no email, servers or messages) | Create and display your account | Performance of the service (contract) | Until your account is deleted |
| Google account (if you use it): Google ID, name, picture and email address confirmed by Google; or the email address entered to receive a login link | Create your account and log in without Discord or Steam | Performance of the service | Until your account is deleted. Login links (stored as a hash only) expire after 15 minutes and are erased within 24 hours |
| Financial support (if you support the site): Stripe customer ID, plan, payment amounts and dates. No card data | Manage your subscription or donation, show the Supporter badge, keep the accounts | Performance of the contract; legal obligation (accounting) | 10 years for accounting records; supporter status until the account is deleted |
| Votes, reviews, ratings, comments, followed games, page claims, published posts | The service itself: rankings, game pages, profiles | Performance of the service | Until deleted by you, by moderation, or with your account |
| Steam account (if you use it): Steam ID, username, avatar, account creation date, list of owned games and playtime at the time of an import | Login, anti-cheat (account age), filling "My list" at your request | Performance of the service; your request for the import | ID: until the account is deleted. The library is not kept: only the games added to your list are |
| "My list" (games to play, playing, completed, dropped) | Your personal tracking; shown on your profile if it is public | Performance of the service | Until you remove them or delete your account |
| Price alerts (game, threshold, recorded price) | Notify you by Discord DM when the price drops | Your request | Until the alert or the account is deleted |
| Email address (optional, confirmed by a link) and your choice to receive notifications by email | Send you your notifications (price alerts, releases, studio replies); never advertising | Your consent, which you can withdraw at any time (unsubscribe link in every email) | Until you remove it in the settings or delete your account |
| Players you follow, game lists, reactions to comments | Your friends feed, shareable lists, discussions | Performance of the service | Until you delete them or delete your account |
| Steam playtime per game (library import) and Steam wishlist (at your request) | Show your playtime on your reviews; fill "My list" and notify you of sales | Your request | Until the next import or account deletion (the wishlist itself is not kept) |
| A device's push notification subscription (technical address provided by the browser) | Send your notifications to that device | Your consent (button in the settings) | Until you disable it, the browser expires it, or you delete your account |
| Website notifications (alerts, releases, replies, news from followed games) | Show them in the bell and on the Notifications page | Performance of the service | Until the account is deleted |
| Bio, "public profile" choice, language and release alert preferences (settings) | Personalise your profile and the website | Performance of the service | Until changed or the account is deleted |
| Fingerprint of your IP address when voting (cryptographic hash: the address itself is never stored) | Detect cheating (multiple accounts, vote bursts) | Legitimate interest: fair rankings | 30 days, then automatically erased |
| Date of last visit | Activity statistics and fighting abandoned or fraudulent accounts | Legitimate interest | Until the account is deleted |
| Reports you send, moderation decisions | Moderate content, keep a record of decisions | Legitimate interest: community safety | As long as needed for moderation |
| Vote reminders requested on Discord (Discord ID, game) | Send you the reminder DM | Your request | Until the reminder is sent |
| Discord servers and channels subscribed to a game's news (/follow command) | Post announcements in the right channel | Performance of the service | Until unsubscribed or the bot is removed |
Studios: if you claim a page, the proof you provide (link, message) is read by the team to check that you represent the game. Your page's webhook URL and API keys are kept as long as you manage the page.
Cookies
Strictly necessary cookies, exempt from consent:
gv_session: keeps you logged in (signed, inaccessible to JavaScript), 30 days;gv_oauth,gv_steamandgv_google: protect Discord, Steam and Google logins against forgery, 10 minutes;gv_lang: remembers the language you chose (French or English), 1 year;gv_consent: remembers your choice about audience measurement, 13 months.
Audience measurement (GameVote's own tool, no third-party service): each page view is counted with its address, the site you came from (domain name only), your country (derived by our network provider, without storing your IP address), the device type, browser and language. If you accept it in the banner, the gv_vid cookie (random identifier, 13 months) also lets us count unique and returning visitors; without consent, no identifier is stored. This data is only used for GameVote's statistics and is deleted after 13 months. You can change your mind at any time with the "Cookies" link at the bottom of every page.
No advertising cookies. Fonts are served by the website itself. Trailers use YouTube's privacy-enhanced mode (youtube-nocookie.com) and only load if you click "play".
When you click a link to a store (Steam, GOG, Instant Gaming…), you leave GameVote: the store may then set its own cookies, including affiliate tracking cookies, under its own policy.
Recipients and processors
Your data is neither sold nor rented. It is accessible to the publisher and, for moderation, to the GameVote team. Technical providers:
- the website host: winheberg.com, which also hosts notification emails;
- the database: PostgreSQL server rented by the publisher, in the European Union;
- Discord: website login and bot operation (Discord's policy applies on Discord);
- Steam (Valve): Steam login and library import, if you use them;
- Google: login with a Google account, if you use it;
- Stripe: payment of support subscriptions and donations (Stripe handles your card details on its own page, under its privacy policy);
- your browser's notification service (Google, Mozilla, Apple or Microsoft): delivery of encrypted push notifications, if you enable them.
Game images are loaded from IGDB (images.igdb.com) and Steam servers: as with any image from a third-party site, these servers receive your IP address. Prices are collected by the GameVote server, without sending any data about you.
Some providers may be established outside the European Union (Discord, Valve, Google, Stripe and browser notification services in the United States); transfers are then covered by the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
What is public
Your username and avatar, your reviews and comments are visible to everyone. Your profile (statistics, favourite games, activity) is only public if you chose so in the settings. Your votes only appear individually on your profile (activity, favourite games, voting streak) and in the top voters of the month (vote count only), and only if your profile is public; elsewhere, only per-game totals are shown. On the official Discord server, members who voted during the month get the "Voter of the Month" role.
Your rights
Under the GDPR and the French Data Protection Act, you can:
- download all your data (right of access and portability) from the settings;
- delete your account and all associated data from the settings, immediately and permanently;
- correct your information (bio, public profile) in the settings; username and avatar are updated from Discord or Steam when you log in;
- object to processing or request its restriction by writing to [email protected].
We reply within one month at most. If you believe your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority) or your local supervisory authority.
Security
Encrypted connections (HTTPS), signed session inaccessible to JavaScript, IP addresses never stored in clear text, administration access restricted to the team and logged.
Minors
The website is intended for people aged 15 or over, or who meet the age required by the login service used (Discord, Steam, Google) in their country. GameVote does not knowingly collect data about younger children; a parent can request the deletion of an account at [email protected].