GG Privacy Policy
Last updated: 27 October 2026
French is the primary, legally binding version of this policy (ggclips.lol/privacy?lang=fr); this English version is a faithful translation for convenience.
GG (ggclips.lol, the GG mobile app and, coming soon, the GG desktop app) is a social network for gamers. This policy explains what data we collect, why, and what rights you have.
1. Who is responsible for your data
The data controller is:
Seagull Studios, a French sole proprietorship (entreprise individuelle, EI) of Rémi Soubigou, SIREN 882 584 840, VAT number FR46882584840, registered in La Seyne-sur-Mer (83500), France. Postal address: 18 rue du Dragon, 75006 Paris, France. Phone: +33 7 66 42 52 05.
Privacy contact / data protection contact: contact@seagullstudios.fr
2. Data we collect
Account and sign-in. When you create an account: your email address and a password (handled by our authentication provider, never stored in plain text), or, if you sign in with Google, Apple or Discord, the information that provider gives us (an identifier, your email, and, for Apple, your name the first time only). We never see your Google, Apple or Discord password.
Profile. Handle, display name, search identifier, bio, avatar and banner images, profile theme, status, gaming setup, gaming platforms, gamer tags (your handles on other services), favorite and current games, gamer archetype, last-active timestamp, and your privacy settings (private profile or not, library/diary/setup/Discord-link visibility).
Content you post. Posts (text, images, video), comments, reactions ("GGs"), mentions, pinned or saved posts, share links.
Social graph. Follows and followers, follow requests (for private profiles), and blocks of other users. Today, blocking someone does not automatically remove any existing follow relationship between you.
Private messaging. One-to-one and group conversations: message text, images, replies, shared posts or games, reactions, read receipts, typing indicators. A message you delete is marked deleted and no longer shown; we briefly retain a technical record that it was deleted.
Presence and playing sessions. The game you are currently playing (if you share it), your session history, and signals used to show "playing now" to other players according to your privacy settings. This presence can come from three sources, each of which you turn on separately: what you declare yourself; your linked Steam account, whose current game we read at regular intervals if your Steam game details are public (coming soon); and the GG desktop app (coming soon), which looks at the list of open applications on your computer, locally and without sending it, to recognise a game, and only sends us the name of the recognised game, its start time and its end time, never the list of applications. A playtime total (per week and per game) may be computed from these sessions and shown on your profile with the same visibility as your presence (coming soon).
Desktop app (coming soon). If you install the GG app on your computer, we register that computer on your account (a device name, the operating system, the app version and a technical token), which you can revoke at any time from Settings > Computers. With your agreement, it reads once a day, on your computer, the files of your local Steam library (installed games, playtime, last played) to update your GG library, and only sends us what changed; you can turn this off in its menu. It can also watch the clip folders you choose (for example Steam's or OBS's) to offer to post a new clip: no file leaves your computer unless you click Post.
Library and game journal. Games you own or follow, and your private per-game journal entries (visibility configurable).
Looking-for-group ("LFG"). Listings you post to find teammates, your matching preferences, and play requests you send or receive.
Reports and moderation. Content and accounts you report, and, if your content is reported, its moderation status (visible, under review, hidden).
Referrals. If you join GG through an invite link, we record the code used, who invited you, and the source (direct link, Discord, or share).
Push notifications. Your device's push token, platform (iOS/Android), device locale and app build variant, so we can send you notifications through the Expo push service (see section 4); on the web, if you turn on browser notifications, the technical subscription your browser gives us (coming soon). You can turn everything off, or one type at a time, in Settings > Notifications. If you turn on the e-mail recap (coming soon), we send a weekly summary to your address through our e-mail provider (see section 4); every e-mail contains an unsubscribe link.
Activity moments. To send a notification at a good time, and never at night if you ask, we keep, for you alone, the hours at which you open GG (one counter per hour of the day, halved whenever the counters grow, so that your recent habits weigh more than old ones), your active days (only the last 28 days count; the list is pruned each time you open GG) and your device's time zone. Nothing else is read on your device: no location, no network, no sensors. A "quiet hours" option (off by default) holds non-urgent notifications between 11 pm and 9 am; after three days without opening GG, a single notification may sum up what is waiting for you.
Crash reports (coming soon). If the mobile or desktop app crashes, a technical report is sent to us through Sentry (see section 4): device model, operating system and app versions, and the error trace. It contains no account identifier, no e-mail address and none of your posts or messages, and is used only to fix the fault.
Analytics (optional). Product measurement is enabled only with your consent and verified age eligibility. Depending on the services configured for the website or app, Google Analytics and/or PostHog receive product events (e.g. viewing a feed or opening a post), an internal account identifier and technical or error context. These data can be linked to your account; they are not anonymous. Providers also receive the network information needed to process requests, including an IP address. You can withdraw consent at any time in Settings > Privacy. Withdrawal stops further measurement; it does not erase data already received by a provider.
With the same consent, PostHog also receives click heat maps on the website (where the pointer clicked on a screen, without the content of the screen). If you are an adult (18 or over), it also records your navigation on a few public screens (feed, explore, videos, leaderboard, profiles, game pages, posts and reviews) as a session replay: the layout and your clicks, with all text, form fields and images hidden. Messages, settings, sign-in, onboarding and share links are never recorded. Page addresses are reduced to the screen type, without usernames, identifiers, search terms or tokens. PostHog's servers are in the European Union.
Link previews. When a post or message contains a YouTube link or another URL, our servers fetch a thumbnail or preview before display, so the linked site never sees your device or browsing.
YouTube and Twitch players. To watch a YouTube or Twitch video in GG, that service's player is loaded directly from its servers: when you press play or, if you have agreed to it, as soon as the video appears in the feed (autoplay). YouTube (Google) or Twitch (Amazon) then receives your IP address and information about your device, and may set its own cookies or trackers under its own privacy policy. Autoplay stays off until you agree to it; you can withdraw at any time in Settings > Playback. This choice is stored for your account on the device you use.
Linked accounts and Discord. If you link a third-party account (e.g. Steam), we store the identifier and handle that service gives us, with a verification status, until you unlink it. If you connect Discord, we may store the Discord servers you share with other players (for matching), and a community admin may configure an outgoing Discord webhook to relay GG notifications to one of their servers.
Library import. If you import your library from another platform, we read, only when you ask, that account's games and what the platform says about them: playtime, last session, achievements, and depending on the platform level, points or gamerscore. Steam and itch.io use their own sign-in (for itch.io, the access token is kept encrypted on our servers and never sent back to your device); RetroAchievements and Xbox read the public profile of the name you give (for Xbox, through the third-party service OpenXBL), without marking it as verified. A file (Playnite, GOG Galaxy, CSV) is read on your device: only the games you confirm are sent to us. This data fills your library; nothing appears on your CV without your consent, and the machines suggested for your setup are only added if you accept them. Disconnecting a source deletes the linked account, its token and the data it brought; your games stay in your library unless you ask to remove them.
AI-assisted features. Compose-help and onboarding-help features send the text or image you submit to a third-party AI model (see section 4) to suggest field values; suggestions are never published without your explicit approval, field by field.
Apps waitlist. If you ask to hear when the GG apps come out (« Let me know »), we keep, without an account, your e-mail address or, with your GG account, just that request, along with the date and, where there is one, the link you arrived through (a flyer, for example). It is used only to send you one e-mail on release day, never shared or used for anything else, and that e-mail carries an unsubscribe link that erases your sign-up. Your IP address is used to limit abuse: only a hash of it is kept, then cleared after a day. You can also leave the list in Settings › Notifications or by writing to us.
Cookies and local storage (web). We use your browser's local storage to keep you signed in and remember interface preferences. No measurement or advertising cookie is set before your explicit consent.
3. Why we process this data (purposes and legal bases)
- Performance of a contract (running the service, your account, feed, messaging, notifications);
- Legitimate interest (security, fraud and abuse prevention, moderation, product improvement, reusing public posts to promote GG with credit to their author, see the Terms);
- Consent (analytics, AI assistance when you choose to use it, sharing your Discord servers for matching, the apps waitlist, autoplay of YouTube and Twitch videos);
- Legal obligation (responding to competent authorities where required).
4. Who we share data with
We never sell your data. We use the following processors and partners, each limited to the data their role requires:
- Hosting and database: Supabase, via Lovable Cloud (Supabase Inc., United States, through Lovable Cloud, Lovable AB, Sweden), on Amazon Web Services infrastructure.
- Push notifications: Expo (exp.host).
- E-mails (weekly recap, if you turn it on, coming soon): Resend (Resend, Inc.), which receives your address and the recap's content.
- Crash reports (coming soon): Sentry (Functional Software, Inc.), which receives the technical report described in section 2.
- Steam presence (if you turn it on, coming soon): Valve (Steam), queried for your current game using the identifier of the account you linked.
- Analytics (if you consent): PostHog and/or Google Analytics.
- Sign-in: Google, Apple, Discord (only if you choose these sign-in methods).
- AI assistance: the Lovable AI gateway (Google Gemini models), for compose and onboarding suggestions.
- Game catalog: IGDB (via Twitch) and the Steam store, for public game information — not your personal data.
- Library import (if you use it): Valve (Steam), itch.io, RetroAchievements and OpenXBL (for Xbox) receive the identifier of the account you connect or the name you give, so they can return your games.
- Link previews: YouTube (public thumbnails and metadata only), and the target site of a link you share.
- Video players: YouTube (Google) and Twitch (Amazon), loaded from their servers when you start a video or, if you have agreed to it, as soon as it appears.
We do not run advertising tracking: we do not use an advertising identifier (IDFA or equivalent) and do not share your data for targeted advertising.
5. International transfers
Several of our providers are based in, or may process data in, the United States: Supabase (hosting), Expo and Apple (push notifications), Google (sign-in, Google Analytics, the Gemini models behind AI assistance, the YouTube player), PostHog (analytics), Discord (sign-in), Twitch (video player), Amazon Web Services (infrastructure), Resend (e-mails, coming soon), Sentry (crash reports, coming soon) and, if you import your library or share your Steam presence, Valve (Steam), itch.io, RetroAchievements and OpenXBL. These transfers rely either on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for certified companies, or on the European Commission's standard contractual clauses included in these providers' data processing agreements. You can ask us for a copy.
6. Retention
Your account and profile data are kept as long as your account exists. Messages you delete are hidden immediately; expired playing sessions and looking-for-group listings are purged automatically. When you delete your account (section 8), your media is erased from our storage and your authentication account is permanently deleted. What remains, at most:
- 90 days in technical logs (security, diagnostics) and for crash reports (coming soon);
- your activity moments, as long as your account exists: only the last 28 active days count and the list is pruned each time you open GG (if you stop opening GG, the last recorded days stay until your next open or the deletion of the account); the hourly counters carry no date and are halved whenever they grow;
- 30 days in backups, which are overwritten automatically;
- 12 months after handling for reports and moderation decisions, to prevent repeat abuse;
- 25 months for pseudonymised analytics data (if you consented);
- until the GG apps' release e-mail, then 3 months at most, for the apps waitlist (or until you unsubscribe, if that comes first).
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, port, and object to processing of your data. You can exercise these rights directly in the app (export and account deletion, section 8) or by writing to contact@seagullstudios.fr.
You also have the right to lodge a complaint with the CNIL (the French data protection authority) — www.cnil.fr.
8. Account deletion and data export
You can export a copy of your data from the app's settings. Account deletion is available from Settings: it requires a recent sign-in (for security), erases your media, then permanently deletes your account. This action cannot be undone.
9. Minimum age
GG is intended for people aged 13 and up. We ask for your date of birth at sign-up: it is stored separately, never shown to other players, and used only to check your age. Under the GDPR, France sets 15 as the age at which a minor may consent alone to processing of their data; below that age, consent from a holder of parental authority is required. By creating an account you confirm you are at least 13 and, if you are under 15, that a parent agrees. Analytics and autoplay of YouTube and Twitch videos, which rely on consent, are only offered with that agreement. If we learn that an account belongs to someone under 13, we delete it.
10. Security
We take reasonable steps to protect your data (password hashing, per-account access control). No system is fully immune to risk; if a security breach affects your data, we will notify you as required by law.
11. Changes to this policy
We may update this policy. If we make a material change, we will notify you in the app before it takes effect.
12. Contact
Questions about this policy: contact@seagullstudios.fr.