Privacy Policy

This policy explains what data GameHub collects, why, and your rights under the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

Last updated: May 2026

1. Data Controller

This GameHub instance is operated by the site owner as a private, self-hosted service. It is not operated by a company, and no personal data is shared with or sold to any third party, except where explicitly stated below.

2. Cookies & Local Storage

gamehub_sessionStrictly necessary

Maintains your admin session. Set only after successful login.

Retention: 30 daysBasis: Legitimate interest (security)

gh_consent_v1Strictly necessary

Stores your cookie preference (accept / necessary only). Stored in localStorage.

Retention: Persistent (until you clear browser data)Basis: Legitimate interest (remembering your preference)

gh_visitedAnalytics

Prevents counting the same browser session as multiple visits. Stored in sessionStorage, cleared when you close the tab.

Retention: Session onlyBasis: Consent

3. Server-Side Data Collection

The following data is logged server-side when you interact with GameHub. This is equivalent to a standard web server access log and is processed under the basis of legitimate interest (security, abuse prevention, operational monitoring).

Data point	Why	Retention
IP address	Security, rate limiting, abuse prevention	7 days (request log)
Request path & method	Usage analytics, error detection	7 days
HTTP status code	Error monitoring	7 days
Response time	Performance monitoring	7 days
User-Agent string	Device / browser analytics	7 days
Country, city, ISP (geo-lookup)	Understand geographic usage	24 h cache, then re-fetched
Search query	Improve library search	30 days (search log)
File downloaded, file size	Usage analytics, rate limiting	90 days (download log)

4. Third-Party Services

ip-api.comTheir privacy policy →

Resolves IP addresses to country, city and ISP for the admin traffic dashboard.

Your IP address is sent to ip-api.com for each new unique visitor. Results are cached for 24 hours to minimise lookups.

RAWG.io (optional)Their privacy policy →

Fetches game metadata (titles, covers, descriptions) for the admin CMS.

Game title search queries are sent to RAWG. No personal data is transmitted.

5. Your Rights (GDPR)

›Right of access: You can ask what data is held about your IP / session.
›Right to erasure: You can request deletion of your request logs, search logs and geo-cache entry.
›Right to object: You can object to analytics processing by selecting "Necessary only" in the cookie banner.
›Right to withdraw consent: Clear the gh_consent_v1 key from your browser's localStorage at any time to reset your choice.

To exercise any right, contact the site owner directly.

6. Data Security

All data is stored locally in an SQLite database on the server. Admin access is protected by a password-based session. The session cookie is marked HttpOnly and SameSite=Lax. No data is transmitted to external parties beyond the services listed in section 4.

7. Changes to This Policy

If this policy changes materially, the "Last updated" date above will be revised. Continued use of GameHub after a policy change constitutes acceptance of the updated terms.