Privacy Policy

Last updated: June 2026

1. Information We Collect

When you create a GamesWrite account, we collect the information you provide directly:

  • Account information: email address, username, display name, and password (hashed, never stored in plain text).
  • Profile information: avatar image, bio, and preferences you choose to set.
  • Social login data: if you sign in via Google, Facebook, or X (Twitter), we receive your name, email, and profile picture from that provider. We never store your provider passwords or access tokens.
  • Usage data: pages visited, content viewed, likes, and comments.
  • Technical data: IP address, browser type, device type, and operating system — used for security and abuse prevention.

2. How We Use Your Information

  • Provide and maintain the GamesWrite platform.
  • Authenticate your identity and secure your account.
  • Send transactional emails (verification, password reset, security alerts).
  • Personalize your feed and content recommendations.
  • Detect and prevent abuse, spam, and unauthorized access.

3. Information Sharing

We do not sell your personal information. We may share data with:

  • Service providers: AWS (hosting, email delivery), Cloudflare (security, CDN, bot protection) — under strict data processing agreements.
  • Legal requirements: when required by law or to protect our rights.

Third-Party Processors

Cloudflare Turnstile. We use Cloudflare Turnstile on sign-in, registration, and password-recovery forms to distinguish legitimate users from automated bots. Turnstile may collect and process your IP address, browser configuration, and interaction signals. This data is processed by Cloudflare, Inc. under their Privacy Policy. No personal data is shared with Cloudflare beyond what is necessary for bot detection.

4. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), encrypted session cookies (AES-256-GCM), and regular security audits. No system is 100% secure — we encourage you to use a strong, unique password.

5. Your Rights

You have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Export your data in a portable format.
  • Withdraw consent for data processing at any time.

Account Deletion and Data Retention

You can delete your account at any time from your account settings, and you can download a copy of your data before you do. Deletion starts a 30-day grace period during which you can restore your account by signing back in; after that, your personal data is permanently erased. Your comments remain visible, attributed to “[deleted user]”.

Moderation records. Records relating to moderation — reports and enforcement history — are retained after your account is deleted. We keep them on the basis of our legitimate interest in preventing abuse and ban evasion.

Banned accounts. If your account is banned, you cannot sign in to use the self-serve deletion flow. To exercise your right to erasure, contact us at support@gameswrite.com; we honor these requests within the statutory response window.

6. Cookies

We use a single encrypted session cookie (__gw_session) for authentication. We do not use advertising or tracking cookies. The Cloudflare Turnstile bot protection may set a functional cookie as part of its challenge verification.

7. Children

GamesWrite is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email.

9. Contact

For privacy-related questions or requests, contact us at support@gameswrite.com.