Privacy
Privacy
What information GibboGaming collects, how it is used, the cookies it uses, and your rights.
This page explains what happens to information on GibboGaming, in plain terms. It is not legal advice. Last updated: 16 October 2026.
Who is responsible
GibboGaming is a personal website run by its owner (the “site owner”). The site owner decides how the information described here is used. For anything about your information, use the Contact page.
In short
- No advertising, no tracking cookies, no tracking scripts and no selling of data.
- Only strictly necessary cookies, for security (see the table below).
- Visitor numbers come from Cloudflare’s network, not from anything in your browser.
- If you comment, send a gift or send a message, only what you type in is kept, plus a scrambled code made from your IP address for 30 days to stop spam.
Cookies and similar storage
UK law (the Privacy and Electronic Communications Regulations, PECR) only allows cookies and similar browser storage without your consent when they are strictly necessary. Everything this site uses is strictly necessary, so there is nothing to opt into, and there are no analytics, advertising or social media cookies.
| Name | Set by | What it is for | How long |
|---|---|---|---|
__cf_bm |
Cloudflare | Tells real visitors from bots and protects the site from attacks | 30 minutes |
cf_clearance |
Cloudflare | Remembers that you passed a security check (only set if one is shown) | Usually 30 minutes |
| Turnstile | Cloudflare | Anti-bot check on the comment, gift and contact forms (runs in a frame from challenges.cloudflare.com) | While the check runs |
gg-cookie-notice |
This site | Remembers that you closed the cookie notice (stored in your browser, not a cookie) | Until you clear your browser data |
Only if you sign in to the admin area (the site owner and moderators): __Host-gg_session keeps you signed in (until you sign out, or after a period of inactivity), and Cloudflare Access sets CF_Authorization to confirm the email check. Ordinary visitors never get these.
You can block or delete cookies in your browser settings. The site still works, but the comment, gift and contact forms may not pass the security check.
Visitor statistics and the Visits counter
The site owner sees aggregate traffic statistics from Cloudflare, such as how many pages were viewed and roughly which countries visitors came from. These are measured on Cloudflare’s network: no cookies, no tracking script, and no individual visitor is identified. The Visits number in the site header comes from the same statistics. Nothing is stored in your browser for it.
Security records
To protect the site, refused or suspicious requests are recorded, for example a comment stopped by the anti-bot check, repeated failed sign-ins to the admin area, or a request blocked by Cloudflare. For the comment, gift and contact forms this record keeps only the scrambled code made from your IP address, never the address itself. Security records are deleted after 30 days.
Comments
When you post a comment, the site stores:
- the name you enter and your comment, which are shown publicly on the post;
- the date and time of the comment;
- a scrambled code made from your IP address (not the address itself), used only to stop spam and abuse, deleted after 30 days.
No email address is collected. Comments may be hidden or removed if they are spam, abusive or off-topic.
Contact form
When you send a message with the contact form, the site stores your name, email address, the subject and your message, so the site owner can read it and reply by email. They are only seen by the site owner and are never shown on the site. A scrambled code made from your IP address is kept for 30 days to stop spam. Messages and replies are kept until the site owner deletes them; you can ask for yours to be deleted at any time.
Gifts from the wishlist
If you send a game code from the wishlist, the site stores the game, the name you enter, your message (if any), the code itself (encrypted, and visible only to the site owner) and a scrambled code made from your IP address (deleted after 30 days). Your name and message are only shown publicly, for example in a thank-you post, if you tick the box that allows it. If you buy a game through Steam instead, that happens entirely on Steam under Steam’s own terms, and this site receives none of your payment details.
“Now playing” and the wishlist
The site can show games played on, and wishlisted by, the site owner’s Steam account, using data from Steam. This is the site owner’s own information. No information about visitors is sent to Steam.
Why the information is used (lawful basis)
Under UK data protection law (UK GDPR), the site relies on legitimate interests: running and protecting the site, stopping spam and abuse, showing the comments you choose to post, and answering messages you send. Your information is never sold, shared for marketing or used for advertising.
Services that handle information for the site
- Cloudflare delivers and protects the site, runs the anti-bot check, measures traffic and forwards email. Cloudflare privacy policy
- Resend sends emails about contact form messages (a notification to the site owner, and the reply to you). Resend privacy policy
These companies may process information outside the UK, under their own safeguards for international transfers.
How long information is kept
| Information | Kept for |
|---|---|
| Scrambled IP codes (comments, gifts, contact form) | 30 days |
| Security records | 30 days |
| Comments | Until removed by the site owner or at your request |
| Contact messages and replies | Until deleted by the site owner or at your request |
| Gift details | Until deleted by the site owner or at your request |
| Cloudflare cookies | See the cookie table above |
Your rights
Under UK data protection law you can ask to see the information held about you, correct it, have it deleted, or object to how it is used. Use the Contact page (or the comment form on any post). Requests are handled as quickly as is reasonable, and within one month.
If you are unhappy with how your information is handled, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.
Changes to this page
If this page changes, the “Last updated” date at the top changes too.