1. Overview

This Privacy Policy outlines how WhatALaunch ("we," "us," or "our") collects, uses, processes, and protects your personal data when you access or use our website and services (collectively, the "Services"). By using the Services, you acknowledge the processing of your information in accordance with this policy.

2. Categories of Data Processed

A. Public Game Data

We aggregate publicly accessible game data and metrics from third-party platforms (such as Steam) to compute analytical scores, rankings, historical charts, and dedicated game directory pages. This information does not constitute personal data.

B. Authentication Data

Discord Authentication: When you authenticate using your Discord account via OAuth2, we collect and store your Discord username, user ID, avatar URL, and optional email address. This data is required to associate your account with user activities, including launch prediction votes and watched games. Additionally, we record timestamp data regarding your last active session to display updated activity feeds ("since last visit").

Steam Authentication: Authentication via Steam is facilitated through Valve's OpenID protocol. We do not receive or store your Steam account credentials, private friend lists, inventory data, or game library details. We collect and retain your public SteamID, display name, and avatar URL to maintain state for account activities (such as votes and followed titles), along with last-visit session timestamps.

C. Community & Interaction Data

Launch Prediction Votes: Votes registered by authenticated users are tied directly to their user account. For unauthenticated users, vote uniqueness is enforced by assigning a randomized identifier stored in your web browser's local storage (localStorage) alongside a technical session cookie. This configuration restricts duplicate submissions per browser without collecting personally identifying network information.

Inquiries & Communications: If you communicate with us via our Contact Form, we process the information supplied (such as your name, email address, and message payload) solely to evaluate and respond to your request.

D. Subscriptions & Notifications

If you subscribe to updates (e.g., blog notifications), we collect and store the designated email address or Discord webhook URL provided. Email subscriptions require an explicit double opt-in confirmation. You may terminate subscriptions at any time via the unsubscribe links contained within the communications.

E. Technical & Diagnostic Information

When accessing the site, standard server infrastructure logs process limited request parameters, including IP addresses, browser types, and timestamp data. This data is processed strictly for network security, abuse mitigation, DDoS protection, and system rate limiting.

3. Cookies and Local Storage

We utilize essential cookies and browser storage technologies (localStorage) to maintain session state and platform functionality:

• Session Cookies: Required to maintain your logged-in status and execute secure third-party authentication flows (Discord/Steam).
• Local Storage: Used for functional preferences and features such as display currency, anonymous vote uniqueness, GPU estimate cache (only after you opt in to detection), and similar client-side state. Clearing your browser cache or site data removes this information.

4. Third-Party Integrations and Data Processors

We engage trusted third-party service providers to facilitate essential platform operations:

• Identity Providers: Discord Inc. and Valve Corporation handle user authentication flows.
• Data Ingestion: Public operational data and broadcast details are periodically fetched via public APIs provided by Steam and Twitch.
• Communication Services: Submitted contact forms and system emails are dispatched using dedicated transactional email delivery platforms.
• Financial Transactions: External donation services (e.g., Buy Me a Coffee, cryptocurrency network processors) process contributions directly. We do not store, process, or transmit financial account details or credit card information on our servers.
• Advertising: We do not execute third-party ad networks, behavioral tracking pixels, or retargeting technologies on our platform.

5. Legal Basis and Purpose of Data Processing

We process personal data under the following legal frameworks:

• Contractual Performance / Service Delivery: Account creation, account association, user preference persistence, and delivery of watched game notifications.
• Legitimate Interests: Platform defense, network security, abuse prevention, rate limiting, and response to direct user inquiries.
• Consent: Opt-in newsletter subscriptions and localized browser storage flags.

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the operational purposes outlined in Section 5, or as mandated by legal and regulatory requirements. Account-associated activity remains active until you request account closure or data deletion.

7. Data Subject Rights & Options

Depending on your jurisdiction (such as the EU/EEA under the GDPR), you hold specific rights regarding your personal data:

• Access and Portability: You may request details regarding the personal information we maintain about your account.
• Erasure ("Right to be Forgotten"): You may request the deletion of your account, cast votes, watched games lists, or historic communication records.
• Opt-Out & Session Termination: You may log out at any time via your account settings. Clearing site storage via browser controls removes preferences, anonymous vote identifiers, and other client-side features that rely on cookies or browser storage.

To submit a data protection request or exercise your legal rights, please contact us using the channel specified below.

8. Revisions to This Policy

We reserve the right to modify this Privacy Policy at any time. Any updates will be reflected on this page. Continued access to or use of the Services following an update constitutes acceptance of the modified policy.

9. Contact Information

For privacy inquiries, data deletion requests, or formal communications regarding data processing, please use the Contact Us page.