Privacy
What Moymo collects, why, who else sees it, and what you can require us to do about it.
Last updated 25 August 2026
Written in English. The Czech version is a translation provided for convenience; where the two differ, the English text governs.
1. Who is responsible for your data
Moymo is operated by an individual, not a company. Under the GDPR that person is the controller of the personal data described here - running a public service is not the household activity that would take it outside the regulation, and having no company and taking no payments does not change that.
Controller: [NAME] · [POSTAL ADDRESS] · [COUNTRY]
For anything about your data, including the rights set out below, write to [PRIVACY EMAIL].
The bracketed details above must be filled in with the operator's real name and a contact address before this page goes live. A privacy notice that does not identify its controller does not meet Article 13, and an unreachable contact address makes every right below unusable.
2. What this covers
This notice covers moymo.net, its subdomains, the Moymo desktop companion, and the API behind them.
It does not cover the sites we link to. Opening a game on a store, following somebody's channel, or signing in through another service puts you under that service's own terms.
3. What is collected
| Data | Examples | Where it comes from |
|---|---|---|
| Account | Email address, username, display name, password (stored only as an Argon2id hash, never readable), account status and role, sign-in timestamps, failed sign-in count | You, when you register |
| Linked accounts | The provider's identifier for you at Google, Discord or Steam, and for connected channels at Twitch, YouTube, Kick, Patreon or Snapchat. Never a password. | You, when you link them |
| Profile | Biography, avatar, background image, chosen typeface and colours, visibility settings | You |
| Library and activity | Games you own or import, playtime, play sessions recorded by the desktop app, playthroughs, ratings, reviews, reactions, lists, goals | You, and the Steam library you choose to import |
| Social | Who you follow, who follows you, profile visit counts, notifications, reports you file | You and other members |
| Recommendation signals | Which recommendations were shown to you, in what position, with what score, and whether you opened them | Generated as you use the site |
| Technical | A hash of your IP address in the security log, rate-limit counters, session and device pairing records, browser-reported language | Automatic, and required to run the service safely |
| Analytics | Page views, the section of the site, and your account id - only if you agree | Google Analytics, after consent |
Your IP address is stored in the security log as a one-way hash, not in the clear. It is enough to recognise that two sign-in attempts came from the same place and not enough to reconstruct where that was.
4. Why, and on what legal basis
Where the basis is legitimate interests you can object at any time, and we have to stop unless there is a reason that overrides your objection. Where the basis is consent you can withdraw it at any time, and withdrawing is as easy as giving.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and running your account, showing your library, publishing what you write | Performance of a contract - Art. 6(1)(b) |
| Sending the emails the account needs: verification, password reset, deletion confirmation | Performance of a contract - Art. 6(1)(b) |
| Keeping the service secure: rate limits, lockouts, the audit log, moderation | Legitimate interests - Art. 6(1)(f), in keeping the service usable and its members safe |
| Recommending games and finding similar ones | Legitimate interests - Art. 6(1)(f), and performance of a contract where you asked for them |
| Analytics | Consent - Art. 6(1)(a). Refusing costs you nothing and changes nothing about the site. |
| Complying with a legal obligation when one applies | Legal obligation - Art. 6(1)(c) |
5. Recommendations, and what the system infers about you
Moymo builds a picture of what you like from what you rate, play, keep and ignore, and uses it to order what you are shown. That is profiling, and you are entitled to know how it works rather than to be told it is clever.
The intended design measures games against named, human-anchored properties - how much a game leans on its story, how much it asks of your reflexes, why people stop playing it - and then compares those measurements with what your own history suggests you want. Nothing about you is inferred from your name, your country, or anything you did not do on the site.
Today the ordering runs on a text model over the catalogue rather than on those measurements. The measured version is still being built.
No decision with a legal or similarly significant effect is made about you automatically. Recommendations change the order of a list of games; they do not decide anything about your account. Moderation decisions are made by a person, not a model.
8. Where your data goes
The servers are in the European Union.
Google Analytics involves a transfer to the United States. That is one of the reasons it is behind consent: if you refuse, nothing about you is sent there. Google LLC participates in the EU-US Data Privacy Framework, and standard contractual clauses apply where it does not.
Linking a Steam, Discord or Google account, or connecting a channel, sends data to those services under their own terms and in their own countries. That happens only because you chose to link them, and unlinking stops it.
9. How long it is kept
Deleting your account removes your profile, your content and your linked accounts. A small number of records are kept where they must be: the fact that a moderation decision was taken, and entries in the security log until they age out. Those hold no readable identifier of you.
- Account data: until you delete the account.
- Reviews, ratings and lists: until you delete them, or until the account is deleted.
- Security log entries, including hashed IPs: 12 months.
- Unverified registrations: purged automatically shortly after they expire.
- Sign-in and pairing tokens: until they expire, which is a matter of hours or days.
- Analytics: retained by Google under the property's own retention setting, and only for people who agreed.
10. Your rights
If the GDPR applies to you, all of the following are yours, they are free, and we answer within one month:
- Access - a copy of what is held about you, and what it is used for.
- Rectification - correction of anything wrong.
- Erasure - deletion, which you can also do yourself from your account settings.
- Restriction - a pause on processing while something is disputed.
- Portability - the data you gave us, in a machine-readable form.
- Objection - to anything done on the basis of legitimate interests.
- Withdrawal of consent - at any time, without affecting what was lawful before you withdrew it.
Write to the contact address in section 1. We may have to ask you to confirm you are who you say you are, because handing your data to somebody claiming to be you would be the worse failure.
You can also complain to your data protection authority. If you are in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz); elsewhere in the EU or EEA it is your own country's authority.
Deleting your account works today. A self-service export does not exist yet - until it does, an access or portability request is fulfilled by hand at the contact address above, within the same one-month deadline.
11. Age
Moymo is for people aged 16 and over. Accounts are not knowingly created for anyone younger, and no attempt is made to collect data from children.
If you believe someone under 16 has an account, write to the contact address and it will be removed.
12. If you are in the United States
Residents of California and of other states with comparable laws have the right to know what is collected, to have it deleted, to correct it, and not to be treated differently for asking. The same contact address serves all of them.
Moymo does not sell personal information and does not share it for cross-context behavioural advertising, as those terms are defined in the CCPA as amended. There is no opt-out to offer because there is nothing to opt out of.
Global Privacy Control and similar browser signals are honoured: a browser sending one is treated as having refused analytics.
13. How it is protected
No service can promise it will never be breached. If personal data here is exposed in a way likely to put you at risk, you will be told, and the supervisory authority will be notified within 72 hours as the GDPR requires.
- Passwords are stored as Argon2id hashes and are never readable, including by the operator.
- IP addresses in the security log are hashed rather than stored.
- Traffic is encrypted in transit.
- Sign-in attempts are rate limited and accounts lock after repeated failures.
- Changing your password or signing out everywhere invalidates every existing session immediately.
14. Changes to this notice
The date at the top changes whenever this page does. If a change means collecting something new, or using what is already held for something different, you will be told before it takes effect - by email or in the product, not by quietly editing this page.
A change to what is loaded on your device asks the consent question again rather than inheriting an answer you gave about something else.