Skip to content
enes

Privacy policy

What data OpenPortsGames stores, why, and how to delete it.

Data we store

  • Account: the OAuth provider account id, the display name and the avatar URL returned by Google, Discord or GitHub.
  • Email: the auth library requires an email to create an account. It is stored but never shown in the interface and never returned by any API response.
  • Ratings: the hearts you give to a port, tied to your account.
  • Comments: the text you post, tied to your account and subject to moderation.

Why we store it

  • Account data exists only to sign you in and to show your name and avatar next to your ratings and comments.
  • Ratings and comments are the only purpose of the account; there is no profiling, advertising or analytics.

Cookies

  • We set a single session cookie so you stay signed in. It is HttpOnly, SameSite=Lax and Secure over HTTPS.
  • There are no tracking, advertising or third-party analytics cookies.
  • Language and theme preferences stay in your browser's local storage and never leave your device.

Third parties

  • Sign-in: Google, Discord and GitHub process your authentication under their own privacy policies.
  • Hosting: Cloudflare Pages serves the site, Cloudflare Workers runs the API and Cloudflare D1 stores the database.
  • Abuse protection: Cloudflare Turnstile verifies the comment form without a tracking cookie.

Retention

  • Your account and its ratings and comments are kept until you delete your account; deletion is immediate and removes every record tied to it.
  • Reports you have filed are removed with your account as well.

Your rights

  • Under the EU GDPR you may access, rectify, export or erase your data, restrict processing and object to it.
  • Under Mexico's LFPDPPP you may exercise your ARCO rights (access, rectification, cancellation and objection).
  • In practice you can change or delete your own ratings and comments, and erase everything at once by deleting your account.

How to delete your account

Open the account menu in the header and choose “Delete my account”. The action is permanent: your account, ratings and comments are erased and you are signed out.

Contact

For any privacy request, write to

[email protected]

Draft: this text needs human and legal review before it is considered final.