GOG
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
GOG collects account, device, play, and marketing data, shares with partners, and keeps it until you delete your account.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, device IDs, play and purchase history, chats, location, and data from linked accounts.
Read the exact line
Privacy policy
“Technical information about devices which you use to access GOG services, including: Internet and/or network connection details (including your IP address); device identifiers;”
Training
They run the store, recommend games, send marketing, and may profile you for ads.
Read the exact line
Privacy policy
“Whenever we are personalizing or targeting our marketing communications, offers and adverts, we may profile your personal information.”
Sharing
Other users may see your profile; partners include publishers, ads, payments, and Google reCAPTCHA.
Read the exact line
Privacy policy
“Such Trusted Partners include, in particular: 1. developers and publishers whose content is distributed via GOG services; 2. advertising and advertising measurement partners;”
Kept
They keep account data until you close the account, then may keep some for tax and law.
Read the exact line
Privacy policy
“we will keep information that is associated with your GOG account for the duration of your agreement for the access to GOG services (i.e. until you close your GOG account).”
Controls
You can delete your account in settings, unsubscribe from emails, and email privacy@gog.com.
Read the exact line
Privacy policy
“You can delete your GOG account in your settings, here: https://www.gog.com/account/settings/delete_account.”
Fine print
They email you about privacy changes; the real User Agreement was not in these documents.
Read the exact line
Privacy policy
“If so, we will make the changed Privacy Policy available online and (if you have a GOG account) we'll email you to explain the changes.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Delete your GOG account
https://www.gog.com/account/settings/delete_account
Turn off personalized marketing
GOG account Subscriptions page, unsubscribe links, the objection form, or privacy@gog.com
Manage cookie consents
Cookie Declaration in the website footer
Ask about your data rights
privacy@gog.com
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They use what you buy and do on GOG and other sites to show you ads and game offers.
Read the exact line
Privacy policy
“provide you with ads, offers and product recommendations on the basis of your purchases or activity on our and third party websites, services and games”
For example, buying a horror game could lead to horror-game ads based on that purchase.
Ad companies get some of your information and decide how to use it themselves.
Read the exact line
Privacy policy
“advertising and advertising measurement partners;”
For example, an ad partner could measure whether you saw or clicked a game ad.
They build a lasting picture of you from GOG and linked platforms to personalize the service.
Read the exact line
Privacy policy
“to create a user’s profile based on information about your use of GOG services and other platforms”
For example, linking Steam could mix your Steam playtime into GOG recommendations.
If you connect other game accounts, GOG can pull friends and chat history from those platforms.
Read the exact line
Privacy policy
“GOG may access personal and non-personal information such as your user name and user ID, avatar, game list, gametime, game achievements, friend list (user name, user ID, avatar) and their status, chat and conversation history.”
For example, connecting another launcher could send old chat logs into GOG’s systems.
Closing the account does not wipe everything; some records stay for legal reasons.
Read the exact line
Privacy policy
“If you choose to close your GOG account, limited data that we collect about you may still be retained for tax, legal and accounting purposes”
For example, old order records could stay after you delete the account.
Google’s reCAPTCHA sees your IP and device on some forms, under Google’s own rules.
Read the exact line
Privacy policy
“Google processes personal information such as IP address and device information as an independent ”
For example, posting a comment can send your IP to Google for a bot check.
They say kids under 16 should not have accounts, but it is based on not knowing, not a hard ID check.
Read the exact line
Privacy policy
“We do not and will not knowingly collect personal information from any child under the age of 16.”
For example, a 15-year-old could still sign up with an email if they are not caught.
You can tell them to stop personalized ads and marketing.
Read the exact line
Privacy policy
“If you decide that you no longer want to receive personalized offers, product recommendations from us, or no advertising news at all, you can object to this at any time via this form or at privacy@gog.com.”
For example, you can email privacy@gog.com and ask them to stop targeted offers.
They claim they use security measures, but they do not name audits or a bug-bounty program.
Read the exact line
Privacy policy
“We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.”
For example, they say data sits on secure servers, without listing encryption details.
If the privacy rules change, account holders should get an email and a new date on the page.
Read the exact line
Privacy policy
“we'll email you to explain the changes. We will also update the “Last Updated” date.”
For example, a new sharing partner should come with an email, not only a silent website edit.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- data controller
- The company that decides why and how your data is used, and is responsible for it under privacy law. For example, the app maker is the controller; the cloud company storing files for it is only a processor.
How we got here · grade D · score 37/100 · 15 of 15 policy answers backed by a verified quote · 7 not stated
What does the app collect beyond what it needs to work?
They collect account details plus device IDs, IP, usage, purchases, chats, location, and optional linked-account data.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They profile you for ads and work with advertising partners and cookies; you can object to personalized marketing.
Do they sell or share your data, and can you opt out?
They share with processors and independent partners including publishers and ad firms; marketing can be objected to.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete the account in settings, but they may keep limited data afterward for tax, legal, and accounting reasons.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They say they create a user profile from GOG and linked platforms; they do not describe viewing or editing that profile.
Do they commit to basic security, and have they leaked data?
They say they use technical and organisational measures and secure servers, without naming audits or a leak history.
Is there a real age gate, and are teens protected?
They will not knowingly collect data from children under 16; there is no described age-proof check.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated 9 March 2026 and they say they will post changes and email account holders.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 16,435 words at a college level (Flesch reading ease 42.1); the terms are 3,747 words at a plain English level.
