Privacy policy

Game Night Hollow · last updated 30 September 2026

1. Who is responsible for your data

Game Night Hollow is run by [OPERATOR_NAME not set], the Netherlands. [OPERATOR_NAME not set] is the "controller" of your personal data under the General Data Protection Regulation (GDPR, in Dutch the AVG).

Questions, requests or complaints: gamenight@pubknightstudios.com.

2. What we collect and why

Your account

• Username, display name and avatar (an emoji and a color you choose). Needed to log you in and to show who you are in your groups.
• Password, if you set one. We only store a scrambled version (a salted scrypt hash). Nobody, including us, can read your actual password.
• If you use "Continue with Google": the ID number Google gives your account and your email address. We use these only to log you in. We don't receive your Google password, contacts, profile photo or anything else from your Google account.
• When you created your account, and whether you're the server admin.

Your groups and game nights

• The groups you're in, their names, your role (owner or member) and when you joined.
• The games on each group's shelf: title, price, release information and store details from the Steam store, whether the group owns it, and who added it.
• Tonight's pick and who spun the wheel, and the weekly price and release report.
• Invites: which group, who sent it, and for invites by username, who it's for.

Technical data

• Login cookie (gnh_session): keeps you logged in for up to 60 days after you last used the app.
• Sign-in cookie (gnh_nonce): a one-time security code used during Google sign-in, deleted after 15 minutes at most.
• IP address: used only in the server's memory to block password guessing and spam (for example, too many login attempts). It is not written to disk and is forgotten within about an hour. The web server is configured not to keep access logs.
• Settings on your device: your sound setting, last opened group, wheel choice and which weekly report you've seen are stored in your browser's local storage on your own device. They are never sent to us.

These cookies and settings are strictly necessary for the app to work, which is why the app doesn't ask for cookie consent. We use no tracking or advertising cookies.

3. Legal basis

• Providing the service you signed up for (GDPR article 6(1)(b)): your account, groups, shelves, invites and the wheel.
• Legitimate interests (article 6(1)(f)): keeping the service secure and available, for example blocking password guessing and making backups.

We don't use your data for marketing, profiling or automated decisions about you.

4. Who can see your data

• Members of your groups see your display name, username and avatar, which games you added, and when you spun the wheel.
• People with an account on this server can send you an invite if they know your username. They don't see anything else about you unless you join their group.
• The server admin ([OPERATOR_NAME not set]) has technical access to the database to run and fix the service, and only uses it for that.

5. Other companies involved

• Hosting: STRATO GmbH runs the server in Germany. They process data only on our instructions, under a data processing agreement.
• Steam (Valve Corporation): our server looks up game details in the Steam store. No personal data is sent for this. Game pictures are shown directly from Steam's servers, which means your device loads them from Steam, and Steam can see your IP address when it does. Links to the Steam store open Steam's own website, which has its own privacy policy. If you use Import my Steam library, our server sends the Steam profile you enter to Valve's Steam Web API to read your list of games. We don't store your Steam profile; only the games you choose to import are saved on your group's shelf.
• GG.deals: to compare prices with other stores, our server sends the Steam numbers of games on wishlists to GG.deals. No personal data is sent. Links to other stores and keyshops open GG.deals' website, which has its own privacy policy and may use affiliate links.
• Google: if you choose "Continue with Google", Google handles that sign-in under Google's privacy policy. The login screen and account menu load Google's sign-in button from Google's servers, so Google can see your IP address there. Google LLC may process data in the United States under the EU-US Data Privacy Framework.

Apart from these, we don't share your data with anyone, unless the law requires us to.

6. How long we keep it

• Your account and profile: until you delete your account.
• Groups and their shelves: as long as the group exists. If you delete your account, games you added stay on the group's shelf for the other members, but your name is removed from them.
• Invite links: 7 days. Invites by username: 30 days, or until accepted or declined.
• Login sessions: 60 days after your last visit, or until you log out.
• Backups: the database is backed up to protect against data loss. Backups are kept for at most 14 days, so deleted data disappears from backups within that time.

7. Your rights

Under the GDPR you have these rights, and you can use most of them yourself in the app, under your avatar at the top right:

• See and download your data: tap Download my data in the account menu.
• Correct your data: change your name, username, avatar and password in the account menu.
• Delete your data: tap Delete account in the account menu. See also how account deletion works.
• Object to or restrict processing, or anything else: email gamenight@pubknightstudios.com. We answer within one month.

If you're not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your own EU country.

8. Security

All traffic uses encrypted HTTPS connections. Passwords are stored as salted hashes, login attempts are limited, sign-ins with Google are checked against Google's signature, and the server is kept up to date. No system is perfect: if something goes wrong that puts your data at risk, we'll tell you and the authorities as the law requires.

9. Age

Game Night Hollow is meant for people aged 16 and older. If you're younger, ask a parent or guardian before creating an account. If you think a child under 16 created an account without permission, email us and we'll delete it.

10. Changes to this policy

If we change this policy, we'll update the date at the top. For important changes, we'll also let you know in the app.