Privacy policy
This page explains which personal data Playalike processes, for what purpose, and what rights you have. Personal data is any information that can be used to identify you personally.
Playalike does not use any analytics, tracking or advertising tools and does not load content from third-party servers when you visit. The data involved in the individual features (account, Steam, AI description, release radar, feedback) is described further down under “What data Playalike processes in detail”.
2. Controller
The controller responsible for data processing on this website is:
Andreas Kort
Hohe Mark 6
48734 Reken
Germany
Email: hello@playalike.de
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
3. Hosting and server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (“All-Inkl”). The website, the database and the email mailbox are located there, and the website’s emails are also sent via All-Inkl. We have a data processing agreement with All-Inkl in accordance with Art. 28 GDPR, which ensures that your data is processed only on our instructions and in compliance with the GDPR.
Each time the website is accessed, the server automatically records information that your browser transmits in so-called server log files: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. This data is not combined with other data sources. The processing is based on Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free and secure operation of the website. Details, including how long the log files are kept, can be found in All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/
4. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as your login details, this site uses SSL/TLS encryption. You can recognise it by “https://” in the address bar and the padlock symbol in your browser. When encryption is active, the data you send to us cannot be read by third parties.
5. Legal bases
We only process personal data where there is a legal basis:
your consent (Art. 6(1)(a) GDPR), e.g. for the release radar,
the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), e.g. for your user account and features you use yourself,
a legal obligation (Art. 6(1)(c) GDPR),
our legitimate interest (Art. 6(1)(f) GDPR), e.g. in the secure operation of the website.
Storing information in your browser (cookies, localStorage) is additionally governed by Section 25 of the German TDDDG. We only store what is strictly necessary for the site to work (Section 25(2) no. 2 TDDDG); the overview can be found below under “Cookies and browser storage”.
The legal basis that applies in each case is stated with the respective feature further down.
6. Recipients and transfers to third countries
We only pass on personal data where this is necessary for the respective feature, where we are legally obliged to do so or where another legal basis permits it. Recipients are our host All-Inkl (processor) and – only if you use the corresponding feature – Valve (Steam sign-in and Steam library) and Anthropic (analysis of descriptions in your own words). Valve and Anthropic are based in the USA; details and the basis for the transfer are given with the respective feature further down.
7. Storage period
Unless a more specific storage period is stated for the respective feature, we only keep personal data for as long as is necessary for the purpose. If you make a justified request for deletion or withdraw your consent, we delete your data unless statutory retention obligations prevent this; in that case we delete it once those reasons no longer apply.
8. Your rights
You have the right at any time:
to access the data we hold about you, its origin, recipients and the purpose of processing (Art. 15 GDPR),
to have inaccurate data corrected (Art. 16 GDPR),
to have your data erased (Art. 17 GDPR) – you can also delete your account yourself under “Account”,
to restrict processing (Art. 18 GDPR),
to data portability, i.e. to receive your data in a common, machine-readable format (Art. 20 GDPR),
to withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out before the withdrawal.
Right to object (Art. 21 GDPR): Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
An email to hello@playalike.de is all it takes for any of these requests.
Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (www.ldi.nrw.de).
9. No automated decision-making
Game recommendations are generated automatically from the information you provide (favourite games, library, description). They are only suggestions and have no legal effect on you; there is no automated decision-making within the meaning of Art. 22 GDPR.
This translation is provided for information; the German version is legally binding.
What data Playalike processes in detail
User account
For an account we store your email address, your password (only as a non-reversible hash), your display name, your language and whatever you set in your account: favourite games, your wishlist, games marked as played (with your "Was it a fit?" rating) or hidden, and your release radar setting. Links for confirming your email address and resetting your password are valid for 24 hours and one hour respectively and can only be used once. The legal basis is providing the account you created (Art. 6(1)(b) GDPR). The data is kept until you delete your account; you can do this yourself at any time under “Account”, which removes the account, favourites, marks and library immediately.
We also store when you created your account and when you were last active while logged in (to within 15 minutes), to see whether and how the account features are used. The legal basis is our legitimate interest in developing the site (Art. 6(1)(f) GDPR). This information is also removed when you delete your account.
Signing in with Steam and your Steam library
When you sign in with Steam or link Steam, you sign in on Steam’s own page (Valve Corporation, USA). We only receive your Steam ID. We then use the Steam interface to request your profile name, your profile picture and – if your game details are public on Steam – your games with playtime. We store the profile picture on our own server so that nothing is loaded from Steam when it is displayed. The legal basis is Art. 6(1)(b) GDPR, because you use this feature yourself. The data is kept until you unlink Steam in your account or delete your account. Valve’s privacy policy applies to signing in with Steam: https://store.steampowered.com/privacy_agreement/
Combined analysis for better recommendations
Once a week we count across all accounts which games are often liked together. This is based on the most-played games from linked Steam libraries, favourites and played games marked as enjoyed. We only store how many people like a pair of games, and only once at least three people do; no link to individual accounts is kept. Likewise, we count thumbs on recommendations per game pair only, without any link to you. The legal basis is our legitimate interest in relevant recommendations (Art. 6(1)(f) GDPR). Hidden games are never included.
Library from a screenshot (AI)
If you are signed in and upload a screenshot of your game library under “Library” in your account, we scale the image down, strip embedded metadata and send it to Anthropic PBC (USA), the provider of the AI model Claude, for recognition. We get back the store and the game titles found. We do not store the image itself. Only after you confirm do we save the added games with their store to your account, until you remove them or delete your account, plus the time of your requests for the daily limit (for two days). The legal basis is Art. 6(1)(b) GDPR, because you request the analysis yourself. The transfer to the USA is based on Anthropic’s data processing agreement with EU standard contractual clauses (Art. 46(2)(c) GDPR). Screenshots often show user names or profile pictures; please crop them out first. More: https://www.anthropic.com/legal/privacy
Describing your taste in your own words (AI)
If you use the “Describe it in your own words” feature while signed in, we send your text for analysis to Anthropic PBC (USA), the provider of the AI model Claude. What comes back is a classification of your taste, from which we calculate recommendations. We do not store your text; we only keep a non-reversible check value (hash) of the text together with the result, so that identical descriptions do not have to be analysed again, and the times of your requests for the daily limit (for two days). The legal basis is Art. 6(1)(b) GDPR, because you request the analysis yourself. The transfer to the USA is based on Anthropic’s data processing agreement with EU standard contractual clauses (Art. 46(2)(c) GDPR). Please do not include anything in the description that could identify you personally. More information: https://www.anthropic.com/legal/privacy
Public taste profile
When signing up or later in your account you can switch on a public profile under an address of your choice. It shows your display name, your Steam avatar, your favourite games and the defining traits calculated from them; only if you also switch it on, a link to your Steam profile (it contains your Steam ID), the number of your Steam games, your total playtime and your five most-played games. Email address and played and hidden games stay private. Signed-in visitors also see how well their taste matches yours; this comparison is calculated on each visit and not stored. Profiles are blocked for search engines (noindex). The legal basis is your consent (Art. 6(1)(a) GDPR); you can switch the profile off in your account at any time, and it becomes unavailable immediately.
Link Discord
When you link Discord in your account, you sign in on Discord's site (Discord Inc., USA) and grant us the "identify" permission there. We only receive and store your Discord ID and username; no email address, no servers, no messages. We use the access token only for this one request and do not store it. Your username only appears on your public profile if you also switch that on. The legal basis is your consent (Art. 6(1)(a) GDPR). "Unlink Discord" or deleting your account removes the data immediately. Discord's privacy policy applies to signing in there: https://discord.com/privacy
Release radar (email notifications)
You switch on the release radar yourself in your account. We then email you when a game comes out that matches your taste. For this we store when you gave your consent and which games we have already told you about, so nothing arrives twice. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or in your account; after that you will not receive any more radar emails.
Radar emails contain game covers that your email program loads from our server when you open them. This only produces the usual server log data, as with any page view. We do not include tracking pixels or tracking links and do not analyse whether or when you open an email or which links you click.
Feedback form
Through the feedback form we store the type of feedback, your message, the page you came from, the time, your account if you are signed in and – only if you provide it – your email address for follow-up questions. We receive a notification about it by email. The legal basis is our legitimate interest in improving the site based on feedback and in replying to you (Art. 6(1)(f) GDPR). We delete feedback once it has been dealt with, or immediately if you ask us to.
Emails and contact
We send emails about your account (confirmation, password, notices) and from the release radar via our host’s mail server. If you email us, we store your address and your message in order to reply (Art. 6(1)(f) GDPR, or (b) if it concerns your account), and delete them once the matter has been resolved and no retention obligations apply.
Visitor statistics
To understand how the site is used and where visitors come from, we count page views ourselves – without cookies, without third-party scripts and without storing your IP address. We store the page viewed, the domain of the previous page (e.g. “google”), campaign details from the link, whether it is a mobile device, the language, the time and individual actions such as “recommendations shown” or “registered”. To tell visits apart, we create a shortened check value from your IP address and browser identifier using a random key that is generated anew every day and then discarded. This makes it impossible to trace it back to you or to recognise a visit on the next day. If your browser sends “Do Not Track” or “Global Privacy Control”, we do not count you at all. The legal basis is our legitimate interest in improving the site (Art. 6(1)(f) GDPR); the entries are deleted after 180 days.
Shop links (affiliate programmes)
Some links to shops are partner or affiliate links (marked with *). If you buy something there after clicking, we may receive a commission; the price does not change for you. When you click, you are forwarded to the shop, which may set its own cookies and attribute the click to our partner account. The shop is responsible for this and its privacy policy applies.
Cookies and browser storage
We do not use cookies or similar technologies for analytics, tracking or advertising. We only store what is technically necessary for the site to work or what you explicitly choose:
| Name | Type | Purpose | When | Storage period |
|---|---|---|---|---|
gs_session | Cookie | Signing in and protecting forms against abuse | only when signing in, in your account and in the feedback form | until you close the browser; when logged in, up to 30 days after your last visit |
lang | Cookie | chosen language | only when you switch the language | 1 year |
gt-theme | Browser storage (localStorage) | Light or dark mode | only when you switch | until you delete it in your browser |
gt-library-view | Browser storage (localStorage) | Steam library view (grid or list) | only when you switch | until you delete it in your browser |
gt-vote:… | Browser storage (localStorage) | remembers your thumbs-up or thumbs-down on a recommendation so it is not counted twice; we only receive the vote itself, not linked to you | only when you click a thumb | until you delete it in your browser |
gt-notice | Browser storage (localStorage) | remembers that you closed the note on cookies | only when you click “Got it” | until you delete it in your browser |
This storage is strictly necessary for the service you requested; under Section 25(2) No. 2 of the German TDDDG no consent is required. You can delete it in your browser at any time.
Fonts, game covers and logos are hosted on our own server; no content from Google, IGDB, Steam or other providers is loaded when you visit. Links to shops such as Steam or Amazon only open their sites when you click them; their privacy policies and cookies apply there. We count clicks on purchase links without IP address or user ID (only game, shop, platform and time).
Abuse protection: for login attempts, account emails and the feedback form we store a non-reversible, keyed check value (hash) of your IP address or email address and the time – not the address itself – to fend off attacks and spam. These entries are deleted after 24 hours at the latest. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
The link to our Discord community leads to Discord (Discord Inc., USA). We do not embed Discord in the site; data is only transferred to Discord when you click the link. Discord’s privacy policy applies there.
The “Buy me a coffee via PayPal” button leads to PayPal. Data is only transferred to PayPal when you click it; PayPal's privacy policy applies there.