Privacy Policy

Last updated: March 2026

This Privacy Policy describes how OldSchoolGames.eu ("we", "us", "our") collects, uses, and protects your personal data when you use this website. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable EU/Czech data protection law.

1. Data Controller

The data controller responsible for this website is:
Robert Libsanský
Czech Republic
Email: contact@oldschoolgames.eu

2. What Data We Collect

a) Account data (if you register)

If you create an account, we collect your email address and username. Your password is stored as a secure hash (bcrypt) — we never store plain-text passwords. Account data is required to enable commenting and is used solely for authentication purposes.

b) Comments

When you post a comment, we store the comment text, your username, and a timestamp. Comments are publicly visible.

c) Usage data (Google Analytics)

We use Google Analytics 4 to understand how visitors use the site. This service collects anonymized information including pages visited, time spent on pages, device type, and approximate geographic location (country/region level). IP addresses are anonymized. Google Analytics sets cookies in your browser. For more information, see Google's Privacy Policy.

d) Session cookies

We use a session cookie to keep you logged in between visits. This cookie is httpOnly, secure, and SameSite=Strict. It expires after 365 days of inactivity.

e) Browser-local storage (favorites & recently played)

Your favorite games and recently played games are stored in your browser's localStorage. This data never leaves your device and we have no access to it.

3. Legal Basis for Processing

  • Account data: Contract (necessary to provide the service you requested)
  • Google Analytics: Legitimate interest (improving and understanding usage of the site)
  • Session cookie: Contract (necessary to keep you logged in)

4. Data Sharing

We do not sell or rent your personal data. We share anonymized usage data with Google via Google Analytics. No other third parties receive your personal data.

5. Data Retention

  • Account data: Retained until you request account deletion.
  • Comments: Retained until you or an administrator delete them.
  • Google Analytics: Retained for 14 months per Google's default settings.

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right of access — request a copy of your personal data
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your personal data ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing based on legitimate interest

To exercise any of these rights, contact us at contact@oldschoolgames.eu. We will respond within 30 days.

You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (UOOU).

7. Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. We take reasonable technical and organisational measures to protect your data against unauthorised access.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the revised policy.

9. Contact

For any privacy-related questions or requests, email us at contact@oldschoolgames.eu.