Skip to main content
🔒

Privacy policy

Last updated: 2026-10-05

GAME圈 (at gcgame.cc, "we" or "us") values your privacy. In accordance with Taiwan's Personal Data Protection Act, this policy explains what data we collect, why we collect it, how we protect it, and your rights. Our principle: we collect only the minimum data needed to provide the service, and we never sell your personal data.

1. Data we collect

Logging in with Google or Discord

This service uses Google or Discord accounts for login. We never obtain or store your passwords for these platforms. When you log in, we receive only basic information:

  • Email address: used for account identification and important notices (such as account security and appeal results); never shown publicly.
  • Name: used as your default display name; you can change it anytime.
  • Profile picture URL: used as your default avatar; you can change it anytime.
  • Account identifier: used to confirm it's the same person on the next login and to link multiple login methods.

Data you provide

  • Username, display name, bio, region, platforms you play on, and game preferences.
  • Birthday: used only to determine whether you're an adult (which decides whether you can enable 18+ and gambling-related content); never shown publicly.
  • Posts, comments, images, videos, ratings, polls, wiki edits, library, bookmarks, price alerts, and teammate listings you publish.
  • Message content: visible only to the people in the conversation; admins view only what's necessary when handling reports or when required by law.
  • Names, email addresses, and message content provided through "Contact us" or report forms, used to reply to and handle your issue.

Data generated automatically when you use the service

  • Login device records: IP address, browser and operating system, login and last-activity times, so you can view and log out other devices in "Device management".
  • Security and anti-abuse records: posting rate limits, reports, appeals, and moderation action records.
  • Search keywords: used to compile popular searches and improve search results; popular searches show only the keywords themselves.
  • Browsing statistics: aggregate data such as post view counts and daily visitors.
  • Push subscription data: when you enable web push notifications, the push endpoint and encryption keys provided by your browser, used to send the notifications you chose to receive.

2. How we use data

  • To provide features such as login, posting, comments, messages, finding teammates, notifications, push notifications, library, and price alerts.
  • To recommend content based on your follows and preferences ("For you").
  • To protect minors, filter spam, handle reports and appeals, and maintain system and account security.
  • To analyze statistics to improve service quality and site performance.
  • To comply with requests from competent authorities or judicial bodies as required by law.

3. Cookies, local storage, and analytics

  • Essential cookies: we use a session cookie (gq_session) to keep you logged in, together with a CSRF token to prevent forged requests. These cookies are required for the service to work, are set as HttpOnly, and are encrypted in transit over HTTPS. The server stores only a hash of the login token.
  • Local storage: interface preferences such as light/dark mode and editor mode, as well as unsent post drafts, are stored in your browser (localStorage) and are never sent to us.
  • Analytics: we use Google Analytics (and may use Cloudflare's web analytics) to understand site traffic, popular pages, and devices used, in order to improve the service. These services may use cookies or similar technologies to collect de-identified browsing data (such as pages viewed, device type, and approximate region), and do not obtain personal data such as your account or email. You can block cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on.
  • We currently do not use third-party advertising or retargeting tracking. If we add any in the future, we will update this policy first.

4. Image and video storage

  • Images and videos you upload go directly from your browser to Cloudflare R2 cloud storage and are served through Cloudflare's network. The server only issues one-time upload URLs and checks file formats.
  • Once published, uploaded files are public, and anyone can view them via their URL. Please make sure uploads contain no personal data, and we recommend removing location data (EXIF) from photos.
  • Unused uploaded files are cleaned up automatically on a regular basis. Deleted posts are no longer shown publicly; if you need a specific file fully deleted, email us its URL and we'll help. We cannot control copies already downloaded or reposted by others.

5. Data sharing and international transfers

We do not sell or rent your personal data. We share it with third parties only in the following cases:

  • Vendors that help us provide the service, limited to what's necessary: Google and Discord (login authentication), Google (email delivery and analytics), Cloudflare (content delivery, file storage, and analytics), browser push services (sending push notifications), and our hosting provider.
  • When required by law, or when requested by judicial, prosecutorial, or police authorities through legal procedures.
  • In emergencies, to protect the life, body, or property of you or others.

The servers of these vendors may be located outside Taiwan; we choose providers with appropriate data protection measures.

6. Data retention

  • Account data is kept while you use the service; after you delete your account, personal data is handled as described in section 8 below.
  • Login device records, security records, and moderation records are kept for as long as needed for their purpose, or for the period required by law, then deleted. Search history is kept for 90 days, and read notifications for 180 days.
  • Expired push subscriptions are deleted automatically.

7. Your rights

Under Article 3 of the Personal Data Protection Act, you may exercise the following rights over your personal data: to inquire about or review it, to request a copy, to request supplements or corrections, to request that collection, processing, or use stop, and to request deletion. You can edit most data yourself in "Member center › Settings"; for other requests, email [email protected] and we will process them within 30 days after verifying your identity. If you don't provide necessary data (such as login data), you won't be able to use features that require logging in.

  • In "Privacy & content" you can choose whether your profile and library are public, whether to show your online status, and whether to blur 18+ images first. Before viewing 18+ content or posting or commenting on gambling-related games, you need to enter your birthday to confirm your age (used only for age checks and never shown publicly).
  • In "Notification settings" you can choose which notifications to receive, and you can turn off push notifications at any time.
  • You can post and comment anonymously: other users will only see "Anonymous player", while moderators and admins can still see the real author in order to handle reports.

8. Deactivating and deleting your account

  • Deactivate account: your profile will be temporarily hidden; log in again to restore it.
  • Permanently delete account: request it in "Member center › Account". After deletion, we erase your email, birthday, avatar, bio, and other personal data along with login connections, and remove follow relationships, price alerts, and push subscriptions. Your posts and comments can either be deleted as well, or kept and shown as "Deleted member".
  • Deletion cannot be undone. Logging in again with the same login account later will create a new account.

9. Protection of minors

18+ and gambling-related content is hidden by default and can only be viewed by members who are logged in, confirmed as adults by their birthday, and have turned on the setting themselves. Users under 18 should use this service with the consent and supervision of a parent or guardian.

10. Data security

We use reasonable technical and administrative measures to protect your data, including site-wide HTTPS encryption, parameterized database queries, CSRF protection, a Content Security Policy (CSP), hashed storage of login tokens, and tiered access controls. However, no transmission over the internet is 100% secure. In the event of a data breach or similar incident, we will notify you as required by law and take remedial action.

11. Changes to this policy

This policy may be revised due to legal or service changes. Revisions will be posted on this page with an updated date; significant changes will also be announced on the site or via notification.

12. Contact us

If you have any questions about this policy or your personal data, please use the "Contact us" form or email [email protected].