Legal Center

1. Information We Collect

Your privacy is critically important to us. GameLib operates in compliance with the General Data Protection Regulation (GDPR). When you interact with our platform, we collect the following types of data:

• Account Data: Your email address, username, and authentication tokens provided during registration.
• Transaction Data: Records of your purchases and downloaded library. Note: Sensitive payment details (like credit card numbers) are processed directly by our secure payment provider (Lemon Squeezy) and are never touched or stored by GameLib servers.
• Usage & Technical Data: IP addresses, browser types, interaction logs, and generalized location data used for analytics, security, and calculating applicable taxes.

2. How We Use Your Information

We use your data strictly to operate our business and improve your experience. We use it to:

• Provide access to your purchased assets and maintain your user library.
• Analyze store statistics, fix technical bugs, and optimize platform performance.
• Prevent fraud, abuse, and secure the platform against unauthorized access (e.g., rate limiting IP addresses).
• Send you transactional emails (receipts, password resets) and, ONLY if you explicitly opted-in, marketing newsletters.

3. Cookie Policy (Strictly Necessary Cookies)

GameLib respects your digital footprint. We do NOT use intrusive third-party advertising cookies, marketing trackers, or cross-site tracking pixels (like Facebook Pixel) that require a consent banner under the ePrivacy Directive.

We use only "Strictly Necessary Cookies" which are exempt from consent requirements because they are vital for the core functionality of the website. These include:

• Session & Authentication Cookies: Used to keep you securely logged into your account.
• Security Tokens (Cloudflare Turnstile): Used entirely anonymously to protect our login forms and checkout processes from spam bots and malicious attacks.

4. Data Sharing & Third Parties

We do not sell your personal data to anyone. We only share necessary data with trusted, GDPR-compliant service providers required to operate the platform, such as hosting providers (Cloudflare), database services, and our Merchant of Record (Lemon Squeezy).

5. Your Rights (GDPR & CCPA)

You have full control over your data. Depending on your location, you have the right to access, correct, export, or delete your personal data. You can initiate a complete and permanent deletion of your account and associated data directly from the "Security Settings" tab in your user dashboard. Upon deletion, all your personal records are scrubbed from our active databases.