Privacy Policy
SICR Gaming is a small community site. This page explains in plain language what we collect, why, and who can see it.
Last updated: 8 October 2026
What we collect
- Account details: your username, email address, password (stored hashed, never in readable form), and optionally a bio and an avatar image URL.
- Google sign-in: if you sign in with Google, from Google we keep only your Google account ID, your email address and whether Google verified it. We discard your name and profile photo.
- Your activity: challenges and games you submit, your attempts (runs), their metrics, the YouTube or Twitch links you attach, who you follow, and the activity that results.
- Moderation records: when a moderator approves or rejects a submission, we log the decision and any notes.
- Cookies: we use a session cookie to keep you logged in and a CSRF cookie to protect forms. We do not use analytics, advertising or tracking scripts.
What is public
Your username, bio, avatar, attempts, follows and activity are public. Your email address is never shown to other users. Please do not put personal information in your bio or in notes on your runs.
How we use your data
- To run your account and show your runs and profile.
- To send emails: address verification, password resets, and decisions on your submissions.
- To moderate content and keep the site safe.
We do not sell your data or use it for advertising.
Third parties
- Amazon Web Services (AWS): hosts the site and its database in the US (Ohio, us-east-2) and sends our email through Amazon SES.
- Cloudflare: provides DNS for our domain and forwards mail sent to our admin address.
- Google: if you choose Google sign-in, Google handles that login under its own privacy policy. We also load fonts from Google Fonts.
- jsDelivr: we load Bootstrap (styling and scripts) from the jsDelivr CDN.
- YouTube and Twitch: attempt pages can embed videos from YouTube (using the youtube-nocookie.com domain) and Twitch. Playing or loading these may set cookies and share data with those services under their policies.
- Image hosts: avatars and game images are links to images hosted elsewhere, chosen by users. Your browser fetches them directly from those hosts, which can see your IP address.
When your browser loads fonts, Bootstrap, embedded videos or linked images, it contacts those services directly and they receive your IP address and browser details.
Keeping and deleting your data
You can delete your own attempts at any time. There is currently no self-serve account deletion: to have your account and personal data deleted, email admin@sicrgaming.com. We keep data for as long as your account exists; some moderation records and backups may persist a little longer.
Security
The site is served over HTTPS and passwords are hashed. No system is perfectly secure, so please use a unique password.
Children
SICR Gaming is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Changes to this policy
We may update this page. The date at the top shows when it last changed.
Contact
Questions or requests: admin@sicrgaming.com. See also our Terms.