Introduction

At Gaming Magazine, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, protect, and transfer your personal data when you access or use our website (the "Site"), services, and content (collectively, "Services").

This Policy complies with the General Data Protection Regulation (GDPR) for users in the European Union (EU) and European Economic Area (EEA), and the California Consumer Privacy Act (CCPA) for users in California, USA. Last updated: January 1, 2024. This policy applies to all users of our Site, including visitors, subscribers, registered members, and form submitters.

Data Controller Identification

For purposes of the GDPR, **Data Controller** of your personal information is:

• Legal Entity: Gaming Magazine Media LLC
• Business Email: [email protected]

The Data Controller is responsible for deciding how your personal data is collected and used in accordance with this Policy.

Information We Collect

Personal Information

• Name and Contact Details: When you register, subscribe, submit forms, or contact our support team
• Email Address: For newsletter subscriptions, account creation, and service communications
• Payment Information: For premium subscriptions (processed securely by third-party payment processors; we do not store raw payment data)
• Profile Information: Username, avatar, gaming preferences, platform information, and any other data you voluntarily provide

Technical Information

• IP Address: To monitor traffic patterns, prevent fraud, and improve Site performance
• Browser Information: Type, version, and operating system for compatibility and security
• Device Information: Mobile device identifiers, screen resolution, and hardware specifications
• Cookies and Similar Technologies: For personalization, analytics, and basic Site functionality (see Cookies Policy below)

Usage Data

• Pages Visited: To understand content popularity and optimize Site navigation
• Time Spent: To improve user experience and engagement with our content
• Search Queries: To enhance our search functionality and deliver relevant content
• Click Patterns: To optimize content placement and Site usability

Voluntary Submissions

• Comments, reviews, and forum posts you submit to Site
• Entries for contests, giveaways, or promotional activities
• Any other information you choose to share with us

Legal Basis for Data Processing (GDPR)

Under the GDPR, we process your personal data only when we have a valid legal basis to do so. Our legal bases for processing are as follows:

• Consent: You have given explicit consent for a specific purpose (e.g., newsletter subscriptions, cookie usage, marketing communications).
• Performance of a Contract: To fulfill our contractual obligations to you (e.g., providing premium subscription services, processing your orders).
• Legitimate Interests: Our legitimate business interests (e.g., improving our Services, analyzing traffic, preventing fraud) that do not override your fundamental rights and freedoms.
• Legal Obligation: To comply with applicable laws, regulations, or legal processes (e.g., tax requirements, court orders).

You have the right to withdraw your consent for data processing at any time (see Your Rights and Choices below). Withdrawal of Consent does not affect the lawfulness of processing based on consent before its withdrawal.

How We Use Your Information

Service Provision

• Provide access to our gaming content, reviews, and premium Services
• Send newsletters, updates, and service communications you have subscribed to
• Respond to your inquiries, support requests, and feedback
• Process and fulfill payments for premium features and subscriptions
• Manage your account and profile settings

Personalization

• Customize content and recommendations based on your gaming preferences and usage history
• Remember your Site settings, preferences, and login information
• Deliver location-specific content where applicable (with your consent)
• Optimize your experience across different devices

Analytics and Improvement

• Analyze website traffic, user behavior, and content performance
• Improve the quality, relevance, and accuracy of our content and Services
• Optimize Site performance, loading speed, and technical functionality
• Develop new features, services, and gaming-related content
• Test and refine new Site designs and functionalities

Marketing and Communications (With Consent)

• Send promotional communications about our Services, new content, and gaming-related offers (only if you have opted in).
• Deliver targeted advertisements based on your interests (you can opt out at any time).
• Inform you about contests, giveaways, and special promotions.
• Deliver personalized advertising via Google AdSense and third-party advertising partners.

Security and Compliance

• Prevent fraud, unauthorized access, and other security breaches.
• Enforce our Terms of Service and this Privacy Policy.
• Comply with applicable laws, regulations, and legal processes.
• Protect the rights, property, and safety of Gaming Magazine, our users, and the public.

Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. We will delete or anonymize your personal data once the retention period expires or the purpose for collection is no longer valid. Our specific retention periods are as follows:

• Account Information: Retained for the duration of your account plus 12 months after account deletion (to resolve outstanding issues).
• Email Address (Newsletters): Retained until you unsubscribe or request deletion.
• Payment Information: Processed data retained for 7 years (to comply with tax and accounting laws; raw payment data is not stored).
• Usage/Technical Data: Anonymized data retained indefinitely for analytics; personal usage data retained for 24 months.
• Form Submissions/Inquiries: Retained for 12 months after the last response to your inquiry.
• Voluntary Content (Comments/Reviews): Retained indefinitely unless you request deletion (subject to Site Terms of Service).
• Cookie Data: Retained for the period specified in our Cookie Policy (or until you clear your cookies).

We may retain anonymized or aggregated data (which cannot be used to identify you) indefinitely for business and analytics purposes.

Data Sharing and Disclosure

We Do Not Sell Your Personal Information (CCPA/GDPR)

We will never sell, rent, lease, or trade your personal information to third parties for direct marketing purposes. This includes compliance with the CCPA's "Do Not Sell My Personal Information" requirement.

When We May Share Information

• Trusted Service Providers: With third-party service providers who assist us in operating the Site and providing Services (e.g., payment processors, email marketing platforms, analytics tools). These providers are contractually required to protect your data and only use it to perform the services we request.
• Legal Requirements: When required by applicable law, court order, government regulation, or legal process (e.g., responding to a subpoena or investigation).
• Safety and Security: To protect the rights, property, or safety of Gaming Magazine, our users, or the public (e.g., preventing fraud, addressing security breaches, or responding to emergency situations).
• Business Transfers: In connection with a merger, acquisition, sale of assets, bankruptcy, or other business transfer. We will notify you via email and/or a prominent notice on our Site if your data is transferred and becomes subject to a different privacy policy.
• With Your Consent: When you explicitly consent to the sharing of your personal data for a specific purpose.

Aggregated/Anonymized Data

We may share aggregated, anonymized, or de-identified data (which cannot be used to identify you) with third parties for marketing, analytics, or research purposes.

Data Security Measures

We implement appropriate technical, organizational, and administrative security measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. However, no electronic transmission or storage system is 100% secure, and we cannot guarantee absolute security of your data.

Technical Protection

• SSL/TLS 1.3 encryption for all data transmissions between your device and our Site
• Secure cloud storage with end-to-end encryption for sensitive personal data
• Regular security audits, vulnerability assessments, and penetration testing
• Firewall protection, intrusion detection/prevention systems (IDS/IPS), and malware scanning
• Data pseudonymization and anonymization where possible

Organizational Protection

• Regular employee training on data protection, GDPR, CCPA, and information security
• Role-based access controls limiting data access to only authorized personnel
• Confidentiality and non-disclosure agreements (NDAs) with all staff and contractors
• Regular privacy and security compliance reviews and audits
• Incident response plan for data breaches and security incidents

Third-Party Security

We only work with third-party service providers that maintain industry-standard security measures and comply with GDPR/CCPA requirements. We conduct regular due diligence to ensure our providers protect your data appropriately.

Cookies and Tracking Technologies

Cookies are small text files stored on your device when you access a website. We use cookies and similar tracking technologies (e.g., web beacons, pixel tags) to provide basic Site functionality, personalize your experience, and analyze Site traffic. This section complies with the EU ePrivacy Directive and GDPR cookie requirements.

Types of Cookies We Use

• Essential (Necessary) Cookies: Required for basic Site functionality (e.g., login authentication, navigation). These cookies cannot be disabled, as the Site cannot function properly without them. Retention period: Session-only (deleted when you close your browser).
• Performance/Analytics Cookies: Collect anonymous information about how you use our Site (e.g., pages visited, time spent). We use this data to improve Site performance and content. Retention period: 24 months. Non-essential - you can reject these.
• Functional Cookies: Remember your preferences and choices (e.g., language, layout) to personalize your experience. Retention period: 12 months. Non-essential - you can reject these.
• Targeting/Advertising Cookies: Deliver relevant advertisements and track the effectiveness of marketing campaigns. These cookies may be set by third-party ad networks. Retention period: 18 months. Non-essential - you can reject these.

Third-Party Cookies & Google AdSense Advertising

We use third-party advertising services, including Google AdSense, to serve personalized ads on our website.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites.

You may opt out of personalized advertising by visiting:

• Google Ad Settings
• NAI Opt-Out Page

For more information about how Google uses data from partner sites, please visit: Google’s Partner Sites Privacy Policy

Managing Cookies

• Use the cookie consent popup on our Site to Accept All or Reject Non-Essential cookies (your choice is stored on your device).
• Control or delete cookies through your browser settings (e.g., Chrome, Firefox, Safari). Instructions for managing cookies can be found on your browser's official website.
• Clear your browser cache and cookies at any time to delete existing cookie data.

Note: Disabling non-essential cookies may affect certain Site functionalities (e.g., personalization, analytics) but will not prevent you from accessing the core content of our Site.

User Rights and Choices (GDPR/CCPA)

Under the GDPR (for EU/EEA users) and CCPA (for California users), you have specific rights regarding your personal information. We will respond to all valid requests in accordance with applicable law, free of charge (unless the request is excessive or repetitive).

GDPR Rights (EU/EEA Users)

You have the right to exercise the following rights by contacting our Data Protection Officer (DPO) (see contact details below):

• Right to Access: Request a copy of personal data we hold about you and information about how we process it.
• Right to Rectification: Request correction of inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data where it is no longer necessary for the purpose of collection.
• Right to Restriction of Processing: Request that we restrict the processing of your personal data in certain circumstances (e.g., if you contest the accuracy of data).
• Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format (for data you provided with consent or for contract performance).
• Right to Object: Object to the processing of your personal data for legitimate interests or direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time (without affecting the lawfulness of processing before withdrawal).
• Right to Lodge a Complaint: Lodge a complaint with a supervisory authority (e.g., your national data protection authority) if you believe we have violated the GDPR.

CCPA Rights (California Users)

California residents have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about personal data we have collected, used, disclosed, and sold about you (we do not sell your personal data).
• Right to Delete: Request deletion of your personal data (subject to certain exceptions under CCPA).
• Right to Opt-Out: Opt out of the sale of your personal data (we do not sell your data, so this right applies to third-party advertising).
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights (e.g., we will not charge you higher fees or provide lower-quality services).
• Right to Correct: Request correction of inaccurate personal data we hold about you.

How to Exercise Your Rights

To exercise your GDPR/CCPA rights, submit a request to our Data Protection Officer (DPO) via the contact details below. We may require proof of identity to verify your request (to protect your personal data from unauthorized access). We will respond to your request within 30 days of receipt (or within 45 days for complex requests, with written notification).

Marketing Communications Opt-Out

• Unsubscribe from our newsletters by clicking the "Unsubscribe" link at the bottom of any newsletter email.
• Opt out of promotional communications by contacting our DPO or updating your account settings.
• Manage your notification preferences in your account settings on our Site.

Data Protection Officer (DPO) Contact Information

We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws (GDPR/CCPA). Your DPO is the primary point of contact for all privacy-related inquiries, requests to exercise your rights, and privacy complaints.

For urgent privacy concerns, mark your email subject line as "URGENT: Privacy Request/Complaint" for priority processing.

International Data Transfers

Our Site and data storage facilities are located in the United States. Your personal data may be transferred to, and processed in, countries outside your country of residence (including the US), which may have different data protection laws than your jurisdiction. For EU/EEA users, this includes transfers to a third country outside the EU/EEA.

For GDPR-compliant international data transfers, we implement the following appropriate safeguards to protect your personal data:

• Standard Contractual Clauses (SCCs) approved by the European Commission (for transfers to third-party service providers).
• Binding Corporate Rules (BCRs) for intra-organizational data transfers (if applicable).
• Compliance with the EU-US Data Privacy Framework (DPF) and Swiss-US Data Privacy Framework.
• Anonymization/pseudonymization of personal data for international analytics transfers.

You may request a copy of the safeguards we use for international data transfers by contacting our DPO.

Children's Privacy (COPPA/GDPR)

Our Site and Services are not intended for children under the age of 13 (COPPA) and we do not knowingly collect personal information from children under 13. For EU/EEA users, we comply with the GDPR's provisions for children's data (no data collection from children under 16 without parental consent).

If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete such information from our systems. Parents or legal guardians who believe their child has provided personal information to our Site should contact our DPO immediately to request deletion.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operations. We will notify you of material changes to this Policy by:

• Posting the updated Policy on our Site with a new "Last updated" date.
• Sending an email notification to registered users and newsletter subscribers.
• Displaying a prominent notice on our Site's homepage for a minimum of 30 days after the update.

Your continued use of our Site and Services after the effective date of the updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Minor changes (e.g., correcting typos, updating contact details) will be posted on our Site with a new "Last updated" date and do not require separate notification.

General Privacy Inquiries

If you have any questions, concerns, or comments about this Privacy Policy or our data protection practices (that are not covered by the DPO contact details), please contact us using the information below:

We will respond to all general privacy inquiries within 30 days of receipt. For requests to exercise your GDPR/CCPA rights, please contact our DPO directly (see above).

Effective Date

This Privacy Policy is effective as of January 1, 2026, and will remain in effect except as otherwise stated in any updated versions of this Policy. All previous versions of this Privacy Policy are superseded by this current version.