EFFECTIVE SEPTEMBER 22, 2026
This Privacy Policy describes how the operator of getitgames.app (the “Service”) collects, uses, discloses, and retains personal information, and the rights available to you. In this Policy, “we,” “us,” and “our” mean the operator of the Service, and “you” means a user of the Service.
This Policy applies to personal information collected through the Service. It does not apply to any third-party website or service that you may reach from the Service, and it does not apply to Google’s own processing of your Google account, which is governed by the Google Privacy Policy.
Authentication is optional. The Service may be used in full without an account. If you elect to authenticate using Google Sign-In, Google transmits to us the following data elements from your Google account, in reliance on the consent you grant at the Google consent screen:
| Data element | Purpose |
|---|---|
| Name | Generation of an initial display name, which you may amend |
| Email address | Account identification and correspondence initiated by you |
| Profile picture URL | Display of your avatar within the Service |
| Google subject identifier | Stable identifier used to match you to your account on subsequent sign-ins |
We request only the openid, email, and profile scopes. We do not receive your Google password, and we have no access to any other content or service associated with your Google account, including Gmail, Contacts, Drive, and Calendar.
Where you are authenticated, the saved-game data that the relevant game writes to your browser’s local storage (including scores, progress, endings reached, and in-game preferences) is replicated to your account so that it may be retrieved on another device. Where you are not authenticated, this data remains in your browser and is not transmitted to us.
The Service does not operate analytics software, advertising technology, or third-party tracking of any kind. Our hosting provider processes technical data, including IP address, request headers, and timestamps, in the ordinary course of delivering, securing, and rate-limiting the Service. We do not use that data to identify you and do not combine it with your account.
Authentication sets one first-party cookie, gig_s, which contains your account identifier, an expiry timestamp, and a cryptographic signature. It is marked HttpOnly, Secure, and SameSite=Lax, and it expires after 400 days or upon sign-out. It is strictly necessary for the authenticated features of the Service and is used for no other purpose. The Service sets no advertising, analytics, or cross-site tracking cookies.
We process personal information solely to:
We do not use personal information for profiling, automated decision-making producing legal or similarly significant effects, targeted advertising, or marketing.
Where the General Data Protection Regulation or the UK GDPR applies, we rely on the following legal bases under Article 6(1):
We do not sell, rent, or trade personal information. We disclose personal information only as follows:
Account records, saved-game data, and leaderboard entries are retained for as long as your account remains open. Upon deletion of your account, the associated records are deleted and are not retained in backup form. Technical logs generated by our hosting provider are retained on that provider’s standard schedule.
Subject to applicable law, you may request access to, correction of, a portable copy of, restriction of processing of, or deletion of your personal information, and you may object to processing carried out on the basis of legitimate interests. You may exercise any of these rights by emailing ryan.a.husk@gmail.com from the address associated with your account. We do not charge a fee and do not discriminate against you for exercising a right.
You may withdraw consent and revoke the Service’s access to your Google account at any time from Google account connections. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and does not itself delete records already held; submit a deletion request for that purpose.
California residents. For the purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act, we do not “sell” personal information and do not “share” personal information for cross-context behavioural advertising, as those terms are defined. We collect no sensitive personal information as that term is defined. Your rights to know, delete, correct, and to non-discrimination may be exercised at the address above.
Residents of the EEA or the UK have the right to lodge a complaint with their supervisory authority.
Session cookies are signed using HMAC-SHA256 and verified in constant time; Google identity tokens are verified against Google’s published signing keys; and all traffic is served over TLS. No method of transmission or storage is entirely secure, and we make no guarantee of absolute security.
The Service is operated from the United States, and personal information is stored and processed there. If you access the Service from outside the United States, you transfer personal information to a jurisdiction that may not provide an equivalent level of protection to that of your own.
The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 within the meaning of the Children’s Online Privacy Protection Act. If you believe that a child under 13 has created an account, contact us at the address below and the account and associated records will be deleted.
We may amend this Policy. The effective date at the head of this page will be updated accordingly, and continued use of the Service following the effective date constitutes acceptance of the amended Policy.
The controller of personal information processed through the Service is the operator of getitgames.app, who may be contacted at ryan.a.husk@gmail.com.