What data we collect

• ›Account data — email address and name, provided via Google or Facebook sign-in through AWS Cognito
• ›Profile data — display name, designation, bio, social links, and profile visibility preference
• ›Gamification data — experience points, levels, achievements, and titles earned through site activity
• ›Comments and upvotes — content you post and interactions you make
• ›Game ratings — ratings you submit for games in our library
• ›Newsletter email — if you subscribe to our newsletter (processed by Brevo)
• ›Analytics data — pages visited, session duration, and general usage patterns (via Google Analytics, with your consent)
• ›Server logs — IP address, browser type, and timestamps (collected automatically by CloudFront)

How we collect it

• ›Directly from you — when you create a profile, post comments, rate games, or subscribe to the newsletter
• ›From sign-in providers — Google and Facebook share your email and name when you authenticate
• ›Automatically — Google Analytics cookies (with your consent) and CloudFront server logs

Legal bases for processing (GDPR)

• ›Consent — analytics cookies and newsletter subscription. You can withdraw consent at any time.
• ›Contract — processing necessary to provide your account, profile, and gamification features
• ›Legitimate interest — security, abuse prevention, and server log analysis

Cookies and local storage

We use Google Analytics cookies to understand how visitors use the site. These cookies are only set after you give consent via our cookie banner. See our Cookie Policy for full details.

We also use your browser's local storage (not cookies) to keep you signed in. This is essential for the site to function and does not require consent. CloudFront server logs are collected server-side and do not involve cookies.

Third-party processors

We share data with the following services to operate the site:

• ›Amazon Web Services (US) — authentication, hosting, content delivery, and serverless functions
• ›Google Analytics (US) — website analytics (with consent)
• ›Neon (US) — PostgreSQL database hosting
• ›Brevo (EU) — newsletter delivery
• ›Facebook / Meta (US) — sign-in provider

International data transfers

Ignis Umbra LLC is based in the United States. If you are located in the EU, UK, or Australia, your data is transferred to the US for processing. Our third-party processors rely on standard contractual clauses and/or applicable adequacy decisions to safeguard these transfers.

Your rights

Under the GDPR, UK GDPR, and Australian Privacy Act, you have the right to:

• ›Access the personal data we hold about you
• ›Rectify inaccurate or incomplete data
• ›Erase your data ("right to be forgotten")
• ›Export your data in a portable format
• ›Withdraw consent for analytics or newsletter at any time
• ›Object to processing based on legitimate interest
• ›Lodge a complaint with your local supervisory authority

To exercise any of these rights, email privacy@greywizardgaming.com. We will respond within 30 days.

Data retention

• ›Account and profile data — retained until you request deletion
• ›Analytics data — retained per Google Analytics default settings
• ›Server logs — retained per AWS CloudFront defaults
• ›Newsletter email — retained until you unsubscribe

Children

Grey Wizard Gaming is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via a notice on the site.