Assassin's Creed III
Ubisoft Montreal
Privacy Policy
Last updated: 29 June 2026
1. Who We Are and How to Contact Us
everygame.gg is a game discovery and pricing platform operated by an individual sole trader based in Sofia, Bulgaria. We are the data controller for the personal information we process in connection with the Service.
For any privacy-related question, or to exercise your data protection rights, contact us at: [email protected]
2. The Data We Collect
We collect and process the following categories of personal data:
Account Data
- Email address
- Password (stored in hashed, irreversible form - we never store your plain-text password)
- Username / display name
Social Login Data
When you register or sign in via Google or Steam, we receive limited profile information from that provider (such as your display name, profile picture URL, and a unique provider identifier). We do not receive your password from any third-party provider.
Content You Create
- Game reviews and ratings you submit
- Lists and collections you create
- Comments and other community interactions
Usage and Technical Data
- Pages you visit and features you use
- Session timestamps and durations
- IP address
- Approximate country (derived from your network, via our content delivery network) used only to pre-select a default display currency and pricing region, which you can change at any time
- Browser type and version, operating system, device type
- Referring URL
3. How We Collect Your Data
- Directly from you - when you register, log in, update your profile, or submit content.
- Automatically - through cookies, server logs, and similar technologies when you browse the Service. See our Cookie Policy for details.
- From third parties - from OAuth providers (Google, Steam) when you choose to authenticate via them.
4. Legal Bases for Processing (GDPR)
We process your personal data under the following legal bases pursuant to Article 6 of the GDPR:
| Processing Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Performance of a contract (Art. 6(1)(b)) |
| Displaying your User Content to other users | Performance of a contract (Art. 6(1)(b)) |
| Sending account-related emails (e.g. password reset, email verification) | Performance of a contract (Art. 6(1)(b)) |
| Analysing usage to improve the Service | Legitimate interests (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interests (Art. 6(1)(f)) |
| Analytics cookies (Google Analytics) | Your consent (Art. 6(1)(a)) |
| Product analytics & session replay (PostHog) | Your consent (Art. 6(1)(a)) |
| Preference / functional cookies | Your consent (Art. 6(1)(a)) |
| Displaying personalised advertising | Your consent (Art. 6(1)(a)) |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and have determined that our interests are not overridden. Where we rely on consent, you may withdraw it at any time - see Section 9.
5. How We Use Your Data
We use your personal data to:
- Provide, maintain, operate, and improve the Service;
- Authenticate you and keep your account secure;
- Display your User Content to other users of the Service;
- Send transactional emails, including email verification and password reset messages;
- Analyse how users interact with the Service to improve features and user experience;
- Detect, investigate, and prevent fraud, abuse, and security incidents;
- Comply with our legal and regulatory obligations.
6. Who We Share Your Data With
We do not sell your personal data. We may share it with the following categories of recipients:
Analytics - Google LLC
We use Google Analytics 4 to understand how users interact with the Service. Google processes analytics data on our behalf. Data may be transferred to the United States under Standard Contractual Clauses approved by the European Commission. For more information, see Google's Privacy Policy and Google Analytics Data Processing Terms.
Product Analytics & Session Replay - PostHog
With your consent, we use PostHog to understand how users interact with the Service through product analytics, feature flags, surveys, heatmaps, and session replay. PostHog acts as our processor under a data processing agreement. We use PostHog Cloud EU, so this data is stored on servers located within the European Union and is not transferred outside the EEA by PostHog in the ordinary course.
Session replay reconstructs anonymised interactions (such as clicks, navigation, and scrolling) to help us diagnose issues and improve usability. We configure replay to mask all text inputs and form fields, so sensitive information you type is not recorded. You can decline or withdraw consent at any time via our cookie consent banner or our Cookie Policy. For more information, see the PostHog Privacy Policy and PostHog Data Processing Agreement.
Authentication Providers
When you sign in via Google or Steam, the relevant provider processes your authentication and shares limited profile data with us. Each provider operates under its own privacy policy:
Advertising Partners
With your consent, advertising partners may receive limited technical data (such as IP address, device and browser information, and cookie identifiers) to serve relevant advertisements. You can withdraw this consent at any time via our cookie consent banner or by visiting our Cookie Policy.
Bot Protection - Cloudflare, Inc.
We use Cloudflare Turnstile on certain forms (account registration, password reset, and contact) to distinguish human users from automated bots. Turnstile may process your IP address and browser characteristics to assess whether a submission is genuine. Cloudflare processes this data as an independent data controller under its own privacy policy. For details, see the Cloudflare Privacy Policy and the Cloudflare Turnstile Privacy Addendum.
Infrastructure and Hosting Providers
Our hosting, content delivery, and email delivery providers process data on our behalf under data processing agreements that require them to protect your data in accordance with applicable law.
Legal and Regulatory Authorities
We may disclose your personal data where required to do so by law, court order, or at the request of a governmental or regulatory authority.
7. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA). Where we transfer personal data to countries that do not provide an equivalent level of data protection, we rely on appropriate safeguards, such as the Standard Contractual Clauses (SCCs) adopted by the European Commission (Decision 2021/914), to ensure your data is protected.
You may request a copy of the relevant transfer mechanism by contacting us at [email protected].
8. Data Retention
We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account data (email, password hash, username) | Until account deletion, then up to 30 days |
| User Content (reviews, lists, comments) | Until you delete the content or your account |
| Server and access logs | Up to 12 months |
| Google Analytics data | As configured in Google Analytics (default: 14 months) |
| PostHog product analytics & session recordings | As configured in PostHog (default: up to 12 months; recordings up to 1 month) |
We may retain certain data for longer where required by law (for example, financial and tax records) or to resolve disputes and enforce our agreements.
9. Your Rights Under GDPR
As a data subject in the EEA or UK, you have the following rights. To exercise any of them, contact us at [email protected]. We will respond within 30 days of receiving a valid request.
Right of Access (Art. 15)
You may request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification (Art. 16)
You may request that we correct inaccurate or incomplete personal data we hold about you.
Right to Erasure / "Right to Be Forgotten" (Art. 17)
You may request that we delete your personal data. This right is not absolute - we may retain data where required by law or for legitimate purposes such as fraud prevention.
Right to Restriction of Processing (Art. 18)
You may request that we limit how we process your data in certain circumstances (for example, while the accuracy of data is contested).
Right to Data Portability (Art. 20)
Where processing is based on your consent or a contract and is carried out by automated means, you may receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object (Art. 21)
You may object to processing based on our legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent (Art. 7(3))
Where we rely on your consent to process your data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Bulgarian supervisory authority:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Tel: +359 2 91 53 518
www.cpdp.bg
If you are located in another EU/EEA member state, you may also lodge a complaint with the data protection authority of your country of residence.
10. Children's Privacy
The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected personal data from a child under 16, please contact us at [email protected] and we will delete such data promptly.
11. Cookies
We use cookies and similar technologies to operate the Service, remember your preferences, and analyse usage. For full details, including how to manage your preferences, please read our Cookie Policy.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Where changes are significant, we may provide additional notice via email.
13. Contact
For any questions about this Privacy Policy or to exercise your data protection rights, contact us at: [email protected]