GGMauk is a fan-built network of game wikis. We collect the minimum data we need to let you sign in, save things, and submit content. We don't run ads. We don't sell or share your data. We don't use third-party analytics or tracking pixels. Everything we do collect is listed below.
What we collect
When you sign in
Via Steam — your public SteamID, persona name, avatar URL, and country code (if your Steam profile is public). We use these to identify your account and display your profile.
Via osu! — your osu! user id, username, and avatar URL. Same purpose.
Via email — the email address you provide and a hashed password (managed by Supabase Auth).
A session cookie set by Supabase so you stay signed in.
When you use the site
Profile fields you choose to fill in: username, bio, country, avatar.
Content you submit: CS2 lineups, comments, votes.
Bookmarks you save (the “Saved” section in your dashboard).
Your linked-account ids if you connect Steam or osu! to an existing account.
What we DON'T collect
No analytics or tracking pixels — no Google Analytics, no Meta Pixel, no third-party trackers.
No advertising identifiers.
No payment information — there is nothing to pay for.
No real-name verification or government id.
No persistent cookies beyond the Supabase auth session cookie and a short-lived OAuth state cookie (used for security during sign-in).
How we use it
To let you sign in and recognise your account across visits.
To display your profile, submissions, comments, and saves to you.
To display public content (lineups, comments) to other visitors when you publish it.
To let other signed-in users see your public username and avatar on content you post.
To send you email confirmation if you sign up via email (handled by Supabase).
We do not sell, rent, or share your data with advertisers.
Third-party services we send data to
To make the site work, your data is processed by these providers:
Supabase — hosts our database and authentication. Your profile and content are stored on their infrastructure. Supabase privacy.
Steam Web API (Valve) — if you sign in with Steam, we exchange your SteamID with Valve to look up your public profile. Valve privacy.
osu! API v2 (peppy) — if you sign in with osu!, we exchange an OAuth token with osu! to look up your public profile. osu! privacy.
For public-data lookups (champion icons, weapon skins, beatmap covers, Fortnite cosmetics), we hit: Riot Data Dragon, Valorant-API, Fortnite-API. These run server-side and don't send your personal data anywhere — just public game data is fetched back to us.
Cookies
GGMauk uses two cookies, both essential for the site to function:
A Supabase auth session cookie so you stay signed in.
A short-lived OAuth state cookie (10 minutes, httpOnly) used during Steam/osu! sign-in to prevent CSRF attacks. Deleted immediately after use.
No advertising or analytics cookies. No third-party tracking.
Your rights
You can edit your profile fields any time from your dashboard.
You can remove individual saves and submissions at any time.
You can disconnect a linked OAuth provider by request to support.
You can request deletion of your account and all associated data by emailing the address below.
You can request an export of your data by the same channel.
Children
GGMauk is not directed at children under 13. If you are under 13, do not create an account. If we learn we've collected data from a child under 13 without parental consent, we'll delete it.
Changes
If we change this policy in a meaningful way, we'll update the “Last updated” date and, when appropriate, notify signed-in users on the site. Continuing to use GGMauk after a change means you accept it.
Contact
Questions, requests, or concerns: .
GGMauk is a fan-built project. We are not Valve, Riot, Epic Games or peppy. All trademarks belong to their respective owners.