Privacy notice

1. Who is responsible for your data

Moymo is run by two private individuals, David Staněk and Nicolas Milan Ficnar, as a free, non-commercial project. They are joint controllers of the personal data described here (GDPR Art. 26).

The essence of their arrangement: they decide together why and how personal data is processed on Moymo; requests and questions about your data go to one address, info@moymo.net, and either of them handles them; and each of them is responsible to you for the processing described in this notice. You can exercise your rights in respect of and against each of them (GDPR Art. 26(3)).

For anything about your data, including the rights described below, write to info@moymo.net. We do not publish a postal address or a phone number; e-mail reaches both of us. You will get an answer from a person, in Czech or English.

Moymo has not appointed a data protection officer. More about who runs Moymo is on the Legal information page.

2. What this notice covers

moymo.net and its subdomains, member pages on members' own domains, the Moymo desktop companion, the Moymo Discord bot, the e-mails we send, and the API behind all of them.

It does not cover services we link to or that you link to Moymo. When you open a store page, play an embedded video or sign in with another service, that service's own privacy policy applies to what it collects. Studios that run giveaways are responsible for what they do with entrant data - see Giveaways.

3. What we collect

IP addresses are not stored in the clear in the database. Each one is replaced by a keyed hash (HMAC-SHA256 with a secret key). That is pseudonymisation, not anonymisation: it still lets us recognise that two events came from the same address - repeated sign-in attempts, for example, or two invited accounts signing in from the same place - so the hash is personal data and we protect and delete it like any other. Server logs can contain IP addresses in the clear and are deleted after 30 days.

What you publish - reviews, lists, ratings and your profile - is shown to other people according to your visibility settings. New accounts start with library, ratings and activity set to private until you choose otherwise. Private ratings are not shown to anyone, but they still count, without your name, in a game's average rating and Moymo Index and in the similarity between games.

4. Why, and on what legal basis

Where the basis is legitimate interests you can object at any time (see Your rights). Where it is consent you can withdraw it at any time in the cookie settings, and withdrawing is as easy as giving.

An e-mail address and a password, or a linked Google or Discord account, are needed to create an account; without them we cannot provide it. Everything else is optional.

5. Linked accounts

Linking another service is always your choice, and you can unlink it at any time in your settings. Unlinking stops every refresh and deletes the stored link, including any tokens; games already added to your library stay there until you remove them.

Twitch and Patreon give us a refresh token so the data can be updated without asking you again. It is stored encrypted and deleted when you unlink. The Twitch connection also gives access to your Twitch e-mail address; Moymo does not store it.

Some names are not verified: a PlayStation online ID, a Chess.com username, a YouTube channel and a Riot ID are taken as you type them. Linking an account that is not yours is against the Terms.

Moymo uses YouTube API Services. What Google does with data is described in the Google Privacy Policy: https://policies.google.com/privacy.

6. The desktop companion

The companion is an optional program you pair with your account by entering a code on the website. It reads the game launchers installed on that computer - Steam, Epic Games, Riot, GOG and Ubisoft - and sends us:

• the games installed through each launcher, and whether each one is installed on that computer;
• from Steam, the lifetime playtime and last-played date that Steam keeps on your disk;
• play sessions: which game, when it started and ended, and for how many of those minutes somebody was at the computer - counted from whether there was any keyboard or mouse input, never what was typed or clicked;
• the game being played right now, for ‘now playing’ on your profile;
• ratings you give in the companion after a session;
• the name you give the device, its operating system and app version, and when it was last seen.

That is everything the API accepts from the companion.

The companion also connects to two places on its own: moymo.net, to check for new versions of itself and download them, and Steam's store (store.steampowered.com), to show which languages a game supports. That second request goes from your computer, so Valve receives your IP address, as when you open a store page; it carries only the game's number.

You can unpair a computer at any time in your settings, and its token stops working at once. Play sessions are part of your library and are erased with your account; the current game is deleted 24 hours after its last update.

7. Profile visits

When you open a member's profile, one visit a day is counted for that profile. If you are not signed in, your browser gets the moymo_visitor cookie - a random key that expires at midnight UTC - so that opening the same profile twice that day counts once. Signed-in members get no such cookie.

If you are signed in, the profile's owner sees you by name in their list of recent visitors only if you have chosen, in your privacy settings, to appear in profile visits. It is off by default. With it off, your visit is counted under a key that cannot be linked back to you.

Visit records are deleted after 90 days; only the all-time total on the profile remains.

The views leaderboard ranks profiles by these counts. Every active member's profile is on it by default; it shows everyone your username, display name, avatar, Moymo+ tier and number of views - what your public profile page shows, plus the number. You can switch it off in your privacy settings at any time, and you disappear from it within a few minutes.

You can ask for the views your profile earned on another platform to be added to the count visitors see. For that we keep the link to that profile, the number you claim and a screenshot of that platform's dashboard that you upload. Only moderators see the screenshot, and it is deleted as soon as they decide; the request, with the decision and its reason, stays with your account.

8. Moymo+, Moymo MAX and invitations

Moymo+ is given automatically while your Discord account is linked and you are a member of the Moymo Discord server, and taken away when either stops being true. That is why we check your server membership with Discord regularly.

When you invite someone, your invite code travels in the link and is held only in their browser's memory during the visit. If they sign up with Google or Discord, it is kept for up to an hour in the moymo_ref cookie so that it survives the trip to the provider. When an account is created through your invitation, we record who invited whom.

As an inviter you see, for each person you invited: their username, display name and avatar, how old the account is, how many games they have rated, whether they have linked Discord and Steam, and, while the invitation does not count yet, the reason. If you join through somebody's invitation, that is what they see about you.

Before an invitation counts, it is checked automatically for signs of fake accounts: the account must be at least seven days old, its ratings must be spread over at least three days, and accounts invited by the same member must not sign in from the same IP address (compared as keyed hashes). An invitation that fails a check is held back, not rejected, and counts once the check passes. These checks only decide when a free reward is granted and have no other effect on anyone's account.

9. Studios and creators

• If you apply to the creator programme, we keep your application - pitch, evidence and website - and staff notes on the decision.
• In a studio, we keep your membership and roles, the two-factor secret for the studio panel (encrypted) and hashes of your backup codes, studio sign-in sessions with a keyed hash of the IP address and the browser's user agent, and messages exchanged with Moymo staff in the studio chat, including attachments and internal staff notes.
• A studio can invite somebody by e-mail address. That person receives one e-mail with the studio's name and a link valid for seven days; the invitation, with the address, is deleted 30 days after it is accepted, withdrawn or expires.
• Studios see aggregate statistics for their games and the public names of reviewers - never e-mail addresses, and nothing a signed-out visitor could not see - except for giveaway winners, described below.

10. Giveaways

A giveaway is run by the studio named on it, which is its organiser. Before the draw the studio sees only how many people entered. If you win, it sees your username, display name and avatar and when you entered, so that it can deliver the prize; for that the studio is a separate controller, and its contact details are shown on the giveaway.

Winners are drawn at random by Moymo when the giveaway closes. If the prize is a code, it is shown to the winner in Moymo.

If you did not win, your entry is deleted 30 days after the draw, or 30 days after the giveaway was cancelled, and only the number of entries is kept. Winners' entries are kept as long as the giveaway and the winner's account exist.

11. Custom domains

If you connect your own domain to your profile, we store the domain name and its verification record, and a certificate for it is issued by Let's Encrypt. Certificates are recorded in public Certificate Transparency logs, so the domain name becomes publicly associated with the certificate.

If you use the automatic Cloudflare setup, the API token you paste is used only to create the DNS records in your Cloudflare account during that setup and is never stored.

Where your DNS provider supports Domain Connect, Moymo can instead send you to the provider with a signed link that asks it to create the records. You sign in and confirm there, and nothing about your account at the provider reaches us.

12. Conquiz

Conquiz (conquiz.moymo.net) is a quiz duel for two that you can play without an account. To play you give a nickname. The room - the two nicknames, the answers and the score - exists only in the server's memory and disappears at the latest 30 minutes after the last move, or when the server restarts; nothing of it is written to the database.

Your browser keeps the nickname and a secret seat token in local storage, so that a reload brings you back to your match; see Cookies and storage. Your IP address is used, in memory only, to limit how many requests can come from one address. The legal basis is our legitimate interest in running the game and protecting it from abuse (GDPR Art. 6(1)(f)).

13. Recommendations and profiling

Unless you object, Moymo uses what you do on the site to decide the order of what it shows you. That is profiling (GDPR Art. 4(4)), and this is how it works.

Inputs: your ratings; your library shelves (playing, finished, wishlist and so on); games you mark as not interested; and playtime from linked accounts and the desktop companion (short sessions are ignored). Nothing is inferred from your name, e-mail address, country, or anything you did outside Moymo.

Outputs: lists put in order for you each time they are shown - the picks and the ‘Because you liked’ rails on the home page, ‘For you’ sorting in the catalogue and the matches in Discovery. Moymo also records which recommendations it showed you and whether you opened or dismissed them.

Moymo is also developing a more detailed taste profile, Gamer DNA: numbers describing your taste and your affinity for game tags, including tags you seem to dislike. It is only being tested by staff; it is not shown to members and does not change what they see. Staff who maintain the catalogue can compute it for a member and look at it when investigating a wrong recommendation.

Your ratings, library shelves and playtime also count, together with everyone else's and whatever your visibility settings, towards which games are similar to each other, and your public ratings count towards what is trending. That is aggregated: the result says only which games go together and contains nothing about you. If you object, your data is left out of the next rebuild of the similarity between games, within six hours.

To object, switch off personalised recommendations in your privacy settings. We then stop personalising what you see, delete your Gamer DNA and tag affinities if any were computed, delete your recommendation clicks and dismissals, unlink past recommendation records from your account, and show you the same non-personalised lists as visitors who are not signed in. Your own ratings and library are not touched, and you can switch it back on at any time.

No decision with legal or similarly significant effects is made about you solely by automated means (GDPR Art. 22). Recommendations change the order of lists of games. The automated invitation checks only delay a free reward. Moderation decisions are always made by a person.

14. Cookies and similar storage

Necessary cookies keep you signed in, protect forms and remember your language and your cookie choices. Analytics and external media - embedded players and widgets from other services - are used only if you allow them. If your browser sends a Global Privacy Control signal, it is taken as a refusal of analytics. The full list, with lifetimes, is on the Cookies page. Pictures that your browser loads from other services are not cookies, but the services that send them can set or read their own; see Pictures from other services.

15. Pictures from other services

Many pictures on Moymo are not stored on our servers. Your browser loads them directly from the servers of the services they come from, as soon as a page that shows them opens, without asking first. With each such request the service receives your IP address, information about your browser (such as its type, version and language) and the address of the site you are on - only the site, for example moymo.net or a member's own subdomain or domain, not the page. The service may log these requests, and set or read its own cookies, under its own privacy policy. Moymo learns nothing from these requests.

In the current version of Moymo this applies to:

• game covers, hero images, logos, screenshots and trailers from Steam (Valve Corporation; delivered through content delivery networks such as Akamai and Cloudflare), IGDB (Twitch Interactive, Inc.) and SteamGridDB, and placeholder pictures from placehold.co for games that have no artwork;
• pictures from accounts that members link or sign in with: avatars, banners, stream and video thumbnails, badges, Bitmoji and server icons from Steam, Discord, YouTube and Google, Twitch, Kick, Patreon, Snapchat (Snap Inc.), Chess.com and Xbox (Microsoft);
• pictures of free games from GamerPower, store logos from CheapShark and album covers from Deezer;
• pictures and videos from other websites that a member or a studio has put on their page, unless Moymo already keeps its own copy.

One feature does the same with sound. The daily soundtrack game is built on Deezer's 30-second previews, so opening it makes your browser load the day's previews and their album covers from Deezer's servers (Deezer S.A.) without asking first. Everywhere else on Moymo, Deezer previews play only after you allow external media. Icons and typefaces are part of the site and are not loaded from other services.

The legal basis is our legitimate interest (GDPR Art. 6(1)(f)) in showing the catalogue and members' pages with their pictures, and in playing the soundtrack game you opened. Your browser cannot fetch a picture or a sound without telling the server where to send it, so your IP address is necessary for that. Most of these services are based in the USA; where a service is certified under the EU-US Data Privacy Framework, the European Commission's adequacy decision applies. These connections are made by your browser and are not covered by a contract between us and those services, so their own privacy policies apply.

We plan to serve these pictures from our own servers, so that your browser no longer contacts other services to show them. This notice will change when that happens.

If you do not want your browser to contact these services, you can block images from other sites in your browser or with a content blocker. Moymo keeps working, only without those pictures.

16. Who else receives data

Moymo describes games with the help of a language model, Google's Gemini, used through the Gemini API (Google LLC, USA; certified under the EU-US Data Privacy Framework). Google receives only information about games: store texts, achievement names and statistics, and short excerpts of public Steam user reviews, from which the reviewer's name and account are removed before they are stored. Nothing about Moymo members - nothing you write, rate or do here - is sent to it. The review excerpts are deleted once the game has been analysed, and at the latest 30 days after they were collected; what remains is the review's identifier on Steam, its language, dates, verdict and votes, the reviewer's playtime and the length of the text. Games are also compared with text embeddings, which are computed only from catalogue information about the games and contain nothing about people.

Pictures from other services are not copied to our servers yet: your browser loads them from those services directly, as described in Pictures from other services.

Moymo does not sell personal data and does not share it for advertising. There are no advertising cookies.

17. Transfers outside the EU

Our servers are in the EU, in AWS region eu-north-1 (Stockholm, Sweden), and our backups are in Amazon S3, also in the EU. Personal data leaves the EU only in the cases listed above: the e-mails Moymo sends through Resend, Google Analytics if you allow it, the services you link, embedded players you choose to load, the pictures your browser loads directly from other services, and the review excerpts sent to Google's Gemini API.

For transfers to the USA we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework of 10 July 2023 where the recipient is certified, on standard contractual clauses in our processor contracts, and for services you ask us to link, on GDPR Art. 49(1)(b). You can ask us for a copy of the safeguards.

18. How long we keep it

Deleting your account, once you confirm it with the link we e-mail you, erases it straight away. The account and everything attached to it - profile, library, ratings, reviews, linked accounts, devices, sessions, taste profile, visits, notifications, invitations, gear and domains - are deleted together, and your uploaded files are removed. Copies in backups disappear when the backups expire, within 30 days; so that a restored backup cannot bring the account back, a one-way hash of its id is kept for 40 days and the account is erased again after any restore.

A few things are not deleted because they are not only yours: messages in a studio's conversation with staff stay with the studio without your name, notices and moderation records lose the link to your account and are kept for the period above, the security log keeps a record that an account was erased without saying whose, and totals other people see, such as a game's number of ratings, are recalculated. If an authority has asked us to preserve an account's data, the account is deactivated at once and erased when that obligation ends.

19. Your rights

Under the GDPR you have the following rights. Using them is free, and we answer within one month; in complex cases we may extend this by two more months and will tell you why.

• Access (Art. 15) - what we hold about you and how it is used. Your account settings let you download a copy straight away.
• Portability (Art. 20) - the same download is a machine-readable JSON file you can take elsewhere.
• Rectification (Art. 16) - most things you can correct yourself in your settings; for anything else, write to us.
• Erasure (Art. 17) - delete your account in your settings. If you cannot sign in, you can ask for a deletion link on the Delete account page, or write to us.
• Restriction (Art. 18) - a pause on processing while something is disputed.
• Objection (Art. 21) - to processing based on legitimate interests. For profiling for recommendations, switching off personalised recommendations in your privacy settings does it immediately.
• Withdrawal of consent (Art. 7(3)) - at any time in the cookie settings, without affecting what was done before.
• Not to be subject to a decision based solely on automated processing that has legal or similarly significant effects (Art. 22) - Moymo makes no such decisions.

Write to info@moymo.net from the address on your account, or include enough to identify the account. We may ask you to confirm who you are, because giving your data to someone pretending to be you would be the worse failure.

You can complain to a supervisory authority. In the Czech Republic it is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, https://www.uoou.cz. In another EU country you can also complain to the authority there.

20. Age

Moymo is for people aged 15 and over. In the Czech Republic a child can consent to information society services on their own from the age of 15 (Act No. 110/2019 Coll., Section 7). When you sign up you confirm that you are 15 or older.

If we learn that an account belongs to someone younger, we delete it. If you believe that is the case, write to us or use the notice form.

21. If you are in the United States

Residents of California and of other states with comparable laws have the right to know what is collected, to have it deleted, to correct it, and not to be treated differently for asking. The same contact address serves all of them.

Moymo does not sell personal information and does not share it for cross-context behavioural advertising, as those terms are defined in the CCPA as amended. There is no opt-out to offer because there is nothing to opt out of.

22. How it is protected

• Passwords are stored as Argon2id hashes and cannot be read, including by us.
• IP addresses are stored in the database only as keyed hashes.
• Tokens that give access to other services (Twitch and Patreon refresh tokens) and the two-factor secrets for the studio panel are stored encrypted.
• All traffic is encrypted in transit.
• Sign-in attempts are limited: after eight failed attempts within 15 minutes from one address, further attempts to sign in to that account from that address are refused for a while. Sign-up and other sensitive actions ask your browser to solve a small proof-of-work puzzle instead of a third-party CAPTCHA.
• Changing your password or signing out everywhere ends every other session immediately.

No service can promise it will never be breached. If a breach is likely to put your rights at risk, we notify the Office for Personal Data Protection within 72 hours, and if the risk is high we tell you directly. Security problems can be reported as described on the Legal information page.

23. Changes to this notice

The date and version at the top change whenever this notice does. If a change means collecting something new or using data for a new purpose, you will be told before it applies - by e-mail or in Moymo, not only by editing this page.

A change to what is stored on your device asks the cookie question again rather than relying on an answer you gave about something else.