This Privacy Policy explains how ggwhatnext.com ("we", "us", "our") collects, uses, and protects your personal data when you visit our website and use our services. We are committed to handling your information transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
01 Who we are
For the purposes of applicable data protection law, the data controller responsible for your personal data is ggwhatnext.com. If you have any questions about this policy or how we handle your data, you can reach us at ggwhatnext@gmail.com.
02 Scope of this policy
This policy applies to personal data we collect through our website, the game-recommendation tools and voting features we provide, and any related communications. It does not cover third-party websites or services that may be linked from our site — those are governed by their own privacy policies, which we encourage you to review.
03 Data we collect
We aim to collect as little personal data as possible. Depending on how you use the site, this may include:
| Category | Examples | Source |
|---|---|---|
| Preferences (functional) | Your self-declared age preference and display/theme settings, stored in your browser's local storage on your device | Stored on your device |
| Server & technical data | Standard information our hosting provider logs to deliver and secure the site, such as IP address, browser type, and time of request | Collected automatically by our host |
| Information you provide | The content of any message you send us (e.g. support or feedback emails) | Provided directly by you |
We do not require you to create an account or log in to use the core features of the site, and we do not knowingly collect special category data (such as health, religious, or biometric data).
05 Analytics
GGWhatNext uses privacy-friendly, cookieless analytics. We use Vercel Web Analytics to understand aggregate usage — for example how many people visit, which pages and steps are used, and where visitors drop off — so we can improve the site. It is cookieless: it sets no cookies, stores nothing on your device, and does not use a persistent or cross-site identifier. It does not build advertising profiles, and we do not sell or share personal data for advertising.
The analytics collects only coarse, aggregated information (such as page or screen views, referrer, approximate region, device type, and anonymous in-app events like reaching a setup step or opening a game). This data is not used to identify you and cannot, on its own, be linked back to you. We do not use Google Analytics or any advertising/tracking service. Our hosting provider also keeps standard server logs (for example overall traffic volume and errors) to deliver and secure the site.
Because this analytics is cookieless and sets no non-essential cookies, no consent banner is required. If we ever introduce analytics or other technology that does require consent, we will update this policy first and ask for your consent before any non-essential cookies are set.
06 Lawful basis for processing
Under the UK GDPR, we rely on the following lawful bases to process your personal data:
- Legitimate interests — for operating essential, privacy-preserving functionality (such as remembering your age and display preferences), measuring aggregate usage through cookieless analytics to improve the site, keeping our site secure, and preventing abuse, where this is not overridden by your rights.
- Consent — we do not currently rely on consent because our analytics is cookieless and we set no non-essential cookies. If we introduce technology that requires consent, we will ask for it first and you will be able to withdraw it at any time.
- Legal obligation — where we are required to process or retain data to comply with the law.
07 How we use your data
We use the personal data we collect to:
- Provide, operate, and maintain the website and its features;
- Understand and analyse how the site is used so we can improve performance and content;
- Remember your preferences and settings;
- Detect, prevent, and address technical issues, security incidents, and abuse;
- Respond to your enquiries and provide support.
We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects about you.
09 Affiliate links & third-party content
GGWhatNext does not currently use affiliate links. If we add them in future, clicking one and making a purchase may earn us a commission from the retailer at no additional cost to you, and we will update our Affiliate Disclosure accordingly.
Affiliate partners and other third-party websites may collect information in accordance with their own privacy policies and terms. GGWhatNext does not control how third-party websites process personal data, and we encourage you to review the privacy policy of any third-party website you visit.
Game ratings, descriptions, images, classifications, and other metadata displayed on GGWhatNext may be provided by third-party sources. While we aim to present accurate information, we do not create or independently verify all such content and cannot guarantee that it is complete, accurate, or up to date.
10 Steam & third-party links
GGWhatNext may provide links to third-party websites, including Steam store pages, to help users discover games.
GGWhatNext does not currently offer Steam account sign-in and does not collect, request, or store Steam usernames, Steam passwords, SteamIDs, Steam libraries, Steam playtime, Steam achievements, or other Steam account data.
If you click a Steam or other third-party link, you will be taken to an external website. Your use of that external website is subject to its own privacy policy and terms.
GGWhatNext is not affiliated with, endorsed by, or sponsored by Valve Corporation or Steam. Steam and the Steam logo are trademarks of Valve Corporation.
11 International data transfers
Some of our service providers may process data outside the United Kingdom. Where personal data is transferred internationally, we ensure an appropriate safeguard is in place — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to a country covered by UK adequacy regulations — so that your data continues to receive an equivalent level of protection.
12 Data retention
We keep personal data only for as long as necessary for the purposes set out in this policy. Functional preferences are stored on your own device and expire automatically (your age preference after about 30 days), and you can clear them at any time via your browser. Correspondence you send us is kept only as long as needed to handle your request and any follow-up.
13 Your rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right to be informed — about how we use your data (this policy).
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure — to ask us to delete your personal data in certain circumstances.
- Right to restrict processing — to ask us to limit how we use your data.
- Right to data portability — to receive your data in a portable format.
- Right to object — to processing based on legitimate interests.
- Right to withdraw consent — at any time, where we rely on consent (we do not currently set any cookies that require it).
To exercise any of these rights, contact us at ggwhatnext@gmail.com. We will respond within one month, as required by law.
14 Children's privacy
Our service is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will take steps to delete it.
15 Age preference & content filtering
GGWhatNext allows users to choose whether they are aged 18 or over or under 18. This choice is a self-declared preference and GGWhatNext does not verify a user's age.
This preference is used solely to tailor the content displayed on the website. When a user selects "under 18", games classified as PEGI 18 may be hidden from recommendations, search results, and other areas of the website where age-based filtering is supported. Users who select "18 or over" may be shown games with any PEGI rating, including PEGI 18.
Your selection is remembered on your device for up to 30 days using the functional preference described in Cookies & similar technologies. Users can update or change their age preference at any time using the age preference controls available on the website.
16 Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
17 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
18 Contact & complaints
If you have any questions, requests, or concerns about this policy or how we handle your personal data, please contact us at ggwhatnext@gmail.com.
You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), if you believe we have not handled your data properly. You can contact the ICO at ico.org.uk or by calling their helpline. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please consider contacting us first.