Your data,
in plain words.

GGMauk is a fan-built network of game hubs. We collect the minimum data we need to let you sign in, save things, and submit content. privacy-friendly analytics (Vercel), and we use cookies for sign-in and your consent choice. In the EU/EEA, ad and analytics cookies stay off until you accept them in the cookie banner. We don't sell your data. You can request a copy or deletion of everything we hold any time.

GGMauk (“we”, “us”) is the operator and data controller for this site. For any privacy request or question, contact support@ggmauk.com.

When you sign in

• Via Steam - your public SteamID, persona name, avatar URL and country code (if your profile is public).
• Via osu! - your osu! user id, username and avatar URL.
• Via email - your email address and a hashed password (managed by Supabase Auth).
• A session cookie set by Supabase so you stay signed in.

When you use the site

• Profile fields you fill in: username, bio, country, avatar, linked-account ids.
• Content you submit: CS2 lineups, osu! skins, comments, votes, saved items.
• Anything you send via the contact form (your name, email and message).

Collected automatically

• Basic technical data (IP address, browser/device, pages viewed), Via our analytics providers below, and standard server logs.
• In the mobile app: your device's ID if you allow notifications, a push token used only to deliver alerts to your device.

We use Vercel Analytics to understand aggregate traffic (page views, performance). It's privacy-friendly and does not build cross-site advertising profiles of you. Vercel privacy.

The GGMauk app (Android) signs you into the same account and shows the same content as this site, so everything above applies. A few things are specific to the app:

• Linked game accounts - you can connect osu!, Steam (CS2), Riot (Valorant) and Battle.net (Overwatch). We store the public account id / username so the app can show your stats. You can disconnect any of them at any time.
• Push notifications - if you allow them, we store an anonymous push token (via Expo) to send you alerts such as osu! milestones and game patch updates. Turn them off in your device settings any time and the token is unbound.

• To let you sign in and recognise your account across visits.
• To display your profile, submissions, comments and saves.
• To show public content (lineups, comments) and your public username/avatar to other visitors when you publish.
• To send email confirmations and password resets, and to reply to contact-form messages.
• To keep the site secure and prevent abuse.

We do not sell or rent your personal data.

To run the site, data is processed by these providers:

• Supabase - database, authentication and file storage (your profile, content, avatar). Privacy.
• Vercel - hosting and analytics. Privacy.
• Expo - delivers the app's push notifications (stores an anonymous device push token). Privacy.
• Resend - sends our emails (confirmations, password resets, contact-form delivery). Privacy.
• Steam Web API (Valve) / osu! API (ppy) - to look up your public profile when you sign in with that provider.
• Valorant data provider - when Valorant stats are shown, the Riot ID involved is sent to a third-party Valorant data service to fetch public match data.

For public game-data lookups (champion art, weapon skins, beatmap covers) we call Riot Data Dragon, Valorant-API and the osu! API server-side - these receive no personal data, just the public item being requested.

We use cookies in two groups:

• Essential (always on) - a Supabase auth session cookie so you stay signed in, and a short-lived (10-minute, httpOnly) OAuth state cookie that protects sign-in against CSRF.
• Analytics (consent-based) - set by Vercel only after you accept. In the EU/EEA they stay off until then.

You can change your choice any time by clearing this site's cookies (which re-shows the banner), or via your browser settings.

• Contract - account, sign-in, and the features you use.
• Consent - Analytics cookies (given via the banner, withdrawable any time).
• Legitimate interests - keeping the site secure, preventing abuse, and basic operation.

You can, at any time:

• Edit your profile and remove your saves/submissions from your dashboard.
• Withdraw consent for ad/analytics cookies (clear cookies → banner reappears).
• Request access to, correction of, or deletion of your account and all associated data.
• Request a copy (export) of your data.
• Object to processing, or lodge a complaint with your local data-protection authority.

Email support@ggmauk.com to exercise any of these - we'll respond within 30 days.

Our providers (Supabase, Vercel, Google, Resend) may process data in the EU and the US under appropriate safeguards (Data Processing Agreements / Standard Contractual Clauses). We keep your account data while your account exists; when you ask us to delete it, we remove it (backups roll off within a short window).

GGMauk is not directed at children under 13. If you are under 13, do not create an account. If we learn we've collected data from a child under 13 without parental consent, we'll delete it.

If we change this policy in a meaningful way, we'll update the “Last updated” date and, when appropriate, notify signed-in users on the site. Continuing to use GGMauk after a change means you accept it.

Questions, requests, or concerns: support@ggmauk.com.

GGMauk is a fan-built project. We are not Valve, Riot Games, Epic Games or ppy. All trademarks belong to their respective owners.