What GamesByAI stores about you
GamesByAI has no accounts and keeps very little: your ratings, a few hashes that expire, and your email only if you submit a game.
Updated September 30, 2026
Who is responsible
GamesByAI (“we”) is responsible for this site and for the data described on this page. Questions about your data, and requests to see or delete it, go to hello@gamesbyai.win.
What we store and for how long
You can browse, play and read without giving us anything. Rating a game or submitting one stores the following.
| What | Why | How long |
|---|---|---|
| A random device code and the ratings you gave, in your browser (local storage keys gba:token and gba:votes), plus a code for the current tab (gba:session) | So each device has one vote per game and you see your own rating | Until you clear this site’s data in your browser |
| Per rating on our server: a one-way hash of your device code, the stars and the time | To count one vote per device and keep ratings honest | While the game is listed |
| A hash of your network address (for ratings, also of your browser), keyed with a random value that changes every day. Never the address itself | To stop one network from flooding votes, plays or submissions | The daily key is deleted after two days; ratings drop the hash the next day |
| Plays: that daily hash, the day, and whether the game ran here or on its creator’s site | To count plays for the rankings | Eight days, then only a total per game |
| When you submit a game: your email address and the game’s link | To tell you what happened to your submission | 30 days after the decision, and 90 days at most |
| Screenshots you send with a submission, in private storage | To use as the game’s cover and screenshots | 30 days. If the game is listed, they show on its page while it’s listed |
Everything else you enter in the submission form (the game’s name, links, creator name and how you made it) becomes a public issue in the open catalog on GitHub. Your email address never does. Don’t put anything in the form that you want kept private.
Analytics without cookies
We count visits with PostHog’s EU cloud in its cookieless mode: it sets no cookies and stores nothing on your device. PostHog uses your network address and browser to work out a daily visitor hash and a rough location on its servers, and doesn’t keep the address.
Besides page views, we record these actions:
- starting a game here, or opening it on its creator’s site
- rating a game
- searching
- starting and sending a submission
- opening a game’s source code
- the referral code in a link you arrived from
Cloudflare Web Analytics also counts page views, without cookies. We use these numbers to see what people play and read, never to identify you.
Advertising
Pages with ads (the home page, lists, hubs and game pages) use Google AdSense. The submission form, this page and the other policy pages have none.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet. You can opt out of personalized advertising in Google’s Ads Settings, and read how Google uses information from sites that use its services.
Visitors in the EEA, the UK and Switzerland see Google’s consent message first, and ads stay non-personalized until they agree. On pages with ads, the Privacy choices button in the footer reopens that message so you can change your answer.
Bot checks, hosting and email
- When you rate or submit, Cloudflare Turnstile checks that a person is behind the browser. Cloudflare processes browser signals for that check.
- Cloudflare hosts the site and its database. Every request passes through Cloudflare, which processes your network address to deliver and protect the site. We keep no access logs of our own.
- Mail to hello@gamesbyai.win and takedown@gamesbyai.win is forwarded by Cloudflare Email Routing to the operator’s inbox. The emails we send about submissions go out through Resend.
Games from other sites
A listed game runs on its creator’s site. It loads in a frame on our page only after you press Play, or on the creator’s site when you follow the link. That site has its own privacy practices, which we don’t control. Game screenshots come from our own media server.
Who else processes data
- Cloudflare: hosting, database, Turnstile, email forwarding, cookieless page counts.
- PostHog (EU cloud): cookieless product analytics.
- Resend: sends the submission emails.
- Google: ads and the consent message on pages with ads.
- GitHub: hosts the open catalog, where submissions become public issues.
Some of these companies are based in the US. Transfers of data from the EU to them rely on their data processing terms, which use the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Why we’re allowed to
Counting votes and plays, keeping ratings honest, analytics without cookies and running the site rest on our legitimate interest in a working, fair directory. Submission emails are sent because you asked for a review. Personalized ads in the EEA, the UK and Switzerland need your consent, which you can withdraw at any time.
Your rights
You can ask for a copy of the data we hold about you, and ask us to correct or delete it or to stop using it. Write to hello@gamesbyai.win; for a submission, send from the address you used. Clearing this site’s data in your browser removes your device code, and without it nobody can link your ratings to you. You can also complain to the data protection authority where you live.
Children
GamesByAI is not directed at children under 13, and we don’t knowingly collect their data.
Changes
When this policy changes, we update this page and the date at the top. The terms of use cover everything that isn’t about data.