Privacy Policy

Last updated: October 2026

ParryStack ("we", "us", "our") operates parrystack.com, including the optional ParryStack Community at parrystack.com/community. This Privacy Policy explains which personal data we process when you visit the website or use the community, why, and what rights you have.

Data Controller

The controller responsible for your personal data under the GDPR is:

Ibrahim Ramadhani
Bonner Str. 1
80804 München
Germany
Email: contact@parrystack.com

Visiting the Website

• Server logs: When you load a page, our hosting provider's web server processes your IP address, the requested page, date and time, browser type and referring URL to deliver the page and to protect the server against attacks (Art. 6(1)(f) GDPR — legitimate interest in a secure, working website).
• Analytics: We use Google Analytics 4 in "Consent Mode" with analytics and advertising storage denied by default. In this mode no analytics cookies are set; Google receives cookieless measurement pings (e.g. page viewed, approximate time, browser type) that we use only in aggregated form to see which pages are useful (Art. 6(1)(f) GDPR). We do not use advertising.
• localStorage on your device: Saved games, saved guides, guide progress and recently viewed games are stored in your browser. They stay on your device unless you sign in to the ParryStack Community — then your saved games and guides are also stored in your account (see below). Recently viewed games and guide progress always stay on your device.
• Cookies: See our Cookie Policy.

Contact Form and Email

If you use the contact form, your name, email address, subject and message are sent to us through FormSubmit (formsubmit.co), which forwards them to our inbox. If you email us directly, we receive your email address and message. We use this only to answer you (Art. 6(1)(b) and (f) GDPR) and delete it when the matter is closed, unless we must keep it for legal reasons.

Price Alerts

If you request a price-drop alert we store your email address, the game and (optionally) your target price on our own server. We only email you after you confirm via a link we send you (double opt-in), at most once per deal. Every alert email contains a one-click link to stop that alert or delete all your alerts. Unconfirmed requests are deleted after 7 days; alerts are deleted immediately when you unsubscribe. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. We do not share these addresses with third parties. Current prices are fetched from IsThereAnyDeal by our server, so your browser does not contact them for this.

Merch Shop

If you buy from our merch shop, we process your name, address, email address and order details to fulfil the order (Art. 6(1)(b) GDPR) and keep invoices as required by tax law (Art. 6(1)(c) GDPR). Payments are processed by Stripe; we do not see or store your full card details. Products are printed and shipped by Printful, which receives the shipping data it needs.

ParryStack Community (member accounts)

Reading the community does not require an account. If you create one, we process the following data:

• Account: email address, username and password (stored only as a salted hash); confirmation that you are 16 or older and accepted the Terms (with date). Purpose: creating and securing your account, sign-in, password reset and account emails. Legal basis: Art. 6(1)(b) GDPR (contract).
• Profile and settings: bio, optional avatar (available to Trusted Members), favourite and followed games, saved games, guides and discussions, privacy and notification settings. Purpose: showing your profile and personalising the community as you choose. Art. 6(1)(b) GDPR.
• Your activity: posts, replies, tags, votes, bookmarks, followed discussions, reports and appeals; reputation, badges and trust level calculated from your activity. Purpose: running the community features you use and protecting against spam and vote manipulation. Art. 6(1)(b) and (f) GDPR.
• Security data: a keyed hash of your IP address (rotated monthly), the network part of your IP address (IPv4 /24, IPv6 /48) and browser type for each signed-in session, failed sign-in counters, and a "known device" cookie (see Cookie Policy). Our security plugin (Wordfence, running on our own server) logs sign-in attempts with IP addresses. Purpose: preventing abuse, account takeover, brute-force attacks and spam, and showing you your active sessions. Art. 6(1)(f) GDPR (legitimate interest in a secure, spam-free service).
• Moderation records: reports (including name and email address if you report as a guest), moderator decisions and their reasons, appeals. Purpose: handling reports and illegal content, informing you about decisions, and defending legal claims. Art. 6(1)(c) GDPR together with the EU Digital Services Act, and Art. 6(1)(f) GDPR.
• Notification emails: emails about replies, answers, mentions, followed games and similar activity, which you can switch on or off for each type in Settings → Notifications or with the one-click link in every email. Art. 6(1)(b) GDPR.

We do not use community data for advertising, we do not sell it, and we do not send your posts to AI services or other third parties. Automatic checks (links, repeated text, blocked words, limits for new accounts) only hold content for review by a person; they never remove content or restrict an account on their own.

Who can see what: your username, avatar, bio, join date, public posts, reputation and badges are public. Followed games and your activity list follow your privacy settings (public, members only, or only you). Your email address, IP data, sessions and moderation records are never shown publicly. Approved discussions are publicly readable, and some may be shown in search engines; member profiles, settings and search pages are never offered to search engines.

How long we keep community data

• Account and profile: until you delete your account.
• Your posts and replies: until you delete them or your account. If others have replied, the text is removed and shown as "[deleted]" so the conversation stays readable.
• Votes, follows, bookmarks and settings: deleted together with your account.
• Read notifications: 12 months. Server-saved drafts: 90 days after the last change.
• Sent-email log: 30 days (failed deliveries: 90 days). Security counters: 2 days. One-time links: 7 days after use or expiry.
• Audit log of security and administrative actions: 12 months.
• Content that was reported and then deleted: a copy is kept for 6 months for legal claims and complaints, then deleted. Moderation decisions about deleted accounts are unlinked from the account after 6 months.
• Backups: deleted data can remain in server backups until they are overwritten in the normal backup cycle.

Do it yourself: in Settings → Privacy & data you can download all your community data (JSON), change who can see your profile and activity, and delete your account.

Game Submissions from Developers

If you submit a game via Submit Your Game, we process the details you enter: game title, developer or studio name, your email address, links, genre, description, platforms and development status, your confirmation that you hold the rights to supplied media, your generative-AI disclosure, and any optional information (trailer or press-kit link, features, roadmap, notes, and a review or demo key if you provide one). Purpose: reviewing your submission, replying to you and, if you ask for it, correcting the details later. Legal basis: Art. 6(1)(b) GDPR (steps at your request) and Art. 6(1)(f) GDPR (legitimate interest in running an editorial review queue and preventing spam).

• Private by default: submissions are stored in a private review queue that only the site owner can open. They are not published, not shown to search engines and not passed on to third parties. Nothing you send is published automatically.
• Email address and review keys: never shown publicly. A review or demo key is stored encrypted, shown only to the site owner, and never included in emails.
• Emails: we send you a confirmation containing a private link with which you can send corrections. Anyone who holds that link can send corrections for your submission (they are never applied without review), so keep it private. The link expires after 90 days and can be revoked on request.
• Security data: to limit spam we store a keyed hash of your IP address (not the address itself) and short-lived rate-limit counters (deleted after 3 days).
• Retention: declined submissions, and submissions that stayed unanswered, are deleted automatically 12 months after their last change. Accepted submissions are kept while the game is covered. You can ask us to delete your submission at any time via the contact form; backups may keep deleted data until they are overwritten in the normal cycle.
• Independence: submitting a game, or providing a demo or key, does not guarantee coverage and does not influence reviews. See our Editorial Standards.

Hosting and Service Providers

• Hostinger International Ltd. (hosting, database, web server, email delivery from noreply@parrystack.com and contact@parrystack.com) — processes data on our behalf (Art. 28 GDPR data processing agreement).
• Google Ireland Ltd. — Google Analytics 4 (see above). Google Privacy Policy
• FormSubmit — forwarding of the contact form.
• Stripe and Printful — merch shop payments and fulfilment only.
• Valve (Steam CDN) — game cover images are loaded from Steam's image servers, so your browser connects to them and transmits your IP address.
• YouTube (Google Ireland Ltd.) — game pages embed trailers in YouTube's privacy-enhanced mode (youtube-nocookie.com). When the video area comes into view, your browser loads the player from YouTube, which receives your IP address; YouTube says it stores information on your device only once you play the video.

Some of these providers may process data outside the EU (e.g. in the USA). Where they do, transfers are based on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

Your Rights (GDPR)

• Right to access your personal data (Art. 15)
• Right to rectification of inaccurate data (Art. 16)
• Right to erasure (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing based on legitimate interests (Art. 21)
• Right to withdraw consent at any time, with effect for the future

To exercise these rights, contact us at contact@parrystack.com. We respond within one month. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

Children and Age

ParryStack is intended for users aged 16 and over. Many games covered on ParryStack carry PEGI 18 or ESRB M (Mature) ratings, and our content discusses violence and mature themes as part of editorial game coverage. Community accounts can only be created by people aged 16 or older. If you believe a child has given us personal data, contact us and we will delete it.

Changes to This Policy

We update this Privacy Policy when our services or the law change and show the date of the last update above.

Contact

For privacy questions or to exercise your rights, contact the data controller at:
Ibrahim Ramadhani
Bonner Str. 1, 80804 München, Germany
Email: contact@parrystack.com
Website: parrystack.com/contact