Privacy
How MMOHUB.GG handles personal data: what we collect, why, who we share it with and how long we keep it. We don’t sell data or show personalised ads.
What we collect
Only what the site needs to work.
- account: email, nickname, password hash (never the password itself), language, time zone and notification settings
- sign-in with Discord, Google, Telegram or Steam: your ID and name there, plus the email from Discord and Google
- sign-in sessions: IP address, browser and approximate location (country and city by IP)
- activity: votes (with the IP address, against cheating), ratings and reviews, favorites, follows, comments, the character name for a vote reward
- for voting without an account — a random device ID in a cookie
- Telegram: your chat ID, if you turned on Telegram notifications
- Steam: your playtime in the game you review, if Steam is linked
- project owners: card data, placement orders and messages with moderators
Why
So you can sign in and keep your settings; to count votes fairly and protect the top and reviews from cheating; to send the emails and notifications you turned on; to answer requests and handle reports. To check reviews for cheating we keep a hash of the IP address, not the address.
Who we share it with
Only services the site can’t work without, and only what they need. Some of them are outside Russia, which is a cross-border transfer of data. We find the sign-in location by IP on our side with the MaxMind database: addresses are not sent anywhere.
- Resend — sending email
- Cloudflare — storing pictures (R2) and the “not a robot” check (Turnstile)
- Telegram — bot messages, if you connected the bot
- Steam — checking a Steam sign-in and your playtime for a review, if Steam is linked
- server owners — only the character name, server and time of a vote, if you voted for a reward
- authorities — only on a lawful request
How long we keep it
Account data — as long as the account exists. A sign-in session expires after 30 days without activity (a day without «Remember me») and no later than 90 days after sign-in. Notifications are kept for 90 days, the email and Telegram queue for 30 days.
Your rights
In your account you can change your nickname and password, set up notifications, unlink sign-in services and end other sessions. You can stop newsletters in the settings or by the link in an email. To change your email, get a copy of your data or delete your account, write to us — see the «Contacts» page.
Changes
If this policy changes, we’ll update this page and tell you about significant changes by email or a notification on the site.