PRIVACY POLICY

Last updated: August 2026

Controller

The operator of n00b.gg is responsible for data processing (see Legal Notice). For questions, contact us at the email address listed there.

What data we process

When you register, we store your email address and a username you choose. Optionally, you can link your Discord account (Discord ID, display name, avatar URL).

When you play, we store your guesses, results, streaks, XP, achievements, and settings (e.g. email reminders, accessibility options).

Technical data such as IP address and session cookies are required for operation, security, and login.

If you tick “Stay signed in” when logging in, we also set a login cookie so you don't have to request a new code on your next visit. It contains only an identifier and a random value, expires after a long period of inactivity, and becomes invalid when you log out.

Purposes & legal bases

We process data to provide the game, authenticate you, save your progress, and communicate with you (login codes, optional daily reminders).

Legal basis is contract performance (Art. 6(1)(b) GDPR) and our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Email reminders only with your consent (Art. 6(1)(a) GDPR), revocable anytime in Settings.

Reach measurement (cookie-free)

We count page views to see which content is used and how visitors find us. We set no cookies and use no external service — the analysis runs solely on our own server.

Stored per view: the page visited, a pseudonymous visitor hash, the referring domain (if any), device type and browser, and — if our server receives it — a two-letter country code. Your IP address is not stored.

The visitor hash is derived from IP address, browser string, the current date and a secret key. Because the date is part of it, the hash changes every night: views within one day can be grouped, recognition across several days is impossible.

As no information is stored on or read from your device, no consent under § 25 TDDDG is required. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6(1)(f) GDPR). The data is deleted automatically after 365 days at the latest.

Third parties

Game images and metadata come from RAWG (rawg.io) and IGDB (igdb.com, operated by Twitch Interactive). Importantly, we retrieve this data server-side only and store the images on our own server. Your browser never connects to RAWG or IGDB — neither your IP address nor any other data about you is transmitted to these providers.

Discord OAuth is used for optional sign-in. Email delivery uses the operator's configured mail provider.

We only share the data each service needs.

Discord bot (SUDO)

We operate an official Discord bot ("SUDO"). It runs exclusively on our official n00b.gg Discord server and is not operated on any other servers. There, it processes Discord user IDs, usernames, avatars, and channel and role IDs. Message content is inspected only transiently — for commands and moderation features (spam, raid, and spoiler protection, word filter) — and is not stored permanently. Rule violations may create an entry in the server's mod log (user, time, reason).

We only store our server's settings permanently (e.g. channel and role IDs for announcements, welcome messages, reaction roles) and — if you link your n00b.gg account — your Discord ID, display name, and avatar URL.

Legal basis is our legitimate interest in community features and moderation (Art. 6(1)(f) GDPR) and contract performance for linked accounts (Art. 6(1)(b) GDPR). You can unlink your account anytime in Settings and leave the server at any time; for access or deletion requests, contact us at the email address in the Legal Notice.

Discord itself (Discord Inc.) is an independent controller — Discord's own privacy policy additionally applies to your use of Discord.

Retention & deletion

Your account and game history remain stored until you delete your account in Settings or request deletion from us.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may lodge a complaint with the Austrian data protection authority.