Privacy Policy

Who is responsible

TrueCoopGames is an independent online project operated from Spain by a self-employed creator.

For privacy enquiries and rights requests, email info@truecoopgames.com.

Website analytics

Analytics is optional and starts only after you accept. Rejecting it does not limit any TCG feature. You can withdraw consent here at any time; withdrawal stops future collection in this browser and does not affect the lawfulness of earlier processing.

We use Umami, hosted by us on AWS in the United States, to understand how our public pages help people find games. We measure public page views, visits to store links, confirmed saves and completed Finder searches.

Analytics includes page paths, referral origins, browser and device information, and approximate location. Technical network information is used to estimate visits. We do not attach My TCG account IDs, emails, search text or private page URLs.

Analytics does not use tracking cookies. We respect Do Not Track. Your choice, its date and the notice version are saved in this browser's local storage for 180 days, separately from your account.

Analytics notice updated: 2026-09-10.

Account data we use

My TCG stores your verified email, account and consent dates, discovery preferences, saved games, and the technical records needed to keep you signed in and protect your account.

Login codes and links are single-use. We store protected representations of them for verification. IP addresses and browser identifiers used in account security records are also stored in a protected form rather than as plain text.

Contact and game submissions

Contact us collects your email, topic, subject, message and any name you provide so we can handle your enquiry. The message is sent to our inbox; the contact form does not save it in the website database.

Submit a Game collects the game information, corrections or release updates you send for manual review. We save the proposal in our database and send an email notification. Your contact email is included in that email, but is excluded from the proposal's database fields. Personal information you write in notes or other free-text fields may still be saved with the proposal.

Required fields are marked with an asterisk; without them we cannot process the form. Contact email is optional for community submissions and required for developer or publisher submissions so we can follow up and verify details. Sending either form does not subscribe you to marketing emails.

Purposes and legal bases

Provide login, synchronized saved games, preferences, and account deletion as necessary to perform the service you request.
Prevent abuse, protect authentication, and keep a proportionate audit trail under our legitimate interest in service security.
Handle general enquiries and review game submissions under our legitimate interest in responding to requests and maintaining an accurate catalogue. If you ask about a potential contract or collaboration, we process the necessary information to take steps at your request before entering into a contract.
Measure use of public pages and game discovery based on your consent.
Send optional game picks only when you give marketing consent. You can withdraw it in Preferences at any time.

Retention

Account data: kept while the account is active. Confirmed deletion removes saved games, sign-in identities, sessions and login codes, and clears email and preferences from the account record. A record of the deletion and security events remains subject to the security retention period.
Login codes and links: used or expired records enter scheduled cleanup once they are more than 7 days old.
Sessions: scheduled cleanup removes records more than 30 days after expiry or revocation.
Account security events: scheduled cleanup removes records more than 180 days old.
Analytics: detailed data is kept for 24 months to compare two years of activity. Rotating backup copies may remain for up to 30 additional days.
Enquiries and submissions: correspondence and personal details are retained for handling the request, related follow-up and any applicable legal obligations or claims. Reviewed game information may remain in the catalogue; this does not require keeping your contact email.

Providers and transfers

We use hosting, database, content-delivery and email providers to operate the website, deliver sign-in messages and handle enquiries and game submissions. Email providers process message content and contact details; excluding an email from the submissions database does not remove it from the inbox.

Our Umami analytics service is hosted in AWS's US East (Northern Virginia) region, outside the European Economic Area. AWS incorporates a data processing agreement into its service terms, including standard contractual clauses for transfers where applicable. You can consult the AWS Data Processing Addendum.

For information about providers, processing locations and the safeguards applicable to your data, contact info@truecoopgames.com.

Cookies and local storage

My TCG uses a secure HTTP-only session cookie and short-lived browser state needed for login handoff and interface preferences. We do not store passwords or login credentials in local storage. Saved games created before sign-in remain local until you choose to import them.

Your choices and rights

You can change discovery and marketing preferences or delete your account from My TCG. You can withdraw optional consent at any time; this does not affect processing that was lawful before withdrawal.

You may request access, correction, erasure, restriction, objection or portability, where applicable, by emailing info@truecoopgames.com. This also applies to personal data in enquiries and submissions; you do not need a My TCG account to make a request.

You may lodge a complaint with the Spanish Data Protection Agency (AEPD) or the data protection authority responsible in your country.