Privacy Policy
How dos.games handles your personal data. Last updated 23 September 2026.
dos.games (“we”, “us”) is a community-driven retro-games preservation archive. This policy explains what data we collect, why, how long we keep it, and the choices you have. We collect the minimum needed to run the service and never sell your data.
The data controller is WEB RELIC LTD, G02, Eurocity, Gibraltar, GX11 1AA. For any privacy request, email email us.
1. Data we collect
- Account data. When you sign in with Google we receive your email address and name, and store them to create and identify your account. Google’s profile picture is not kept: an avatar on the site is one you upload yourself.
- Profile & content. Anything you choose to add — username, bio, avatar, reviews, forum posts, collections, and files you upload (manuals, screenshots, save states, soundtracks).
- Gameplay & usage. Play sessions, library entries, cloud saves you opt into, and basic moderation metadata (e.g. when an admin actions your content).
- Technical data. Your IP address and request metadata are processed transiently for security, rate-limiting, and abuse prevention. For signed-in accounts we also keep a short log of visits — when you visited and for how long, the pages you opened, your browser, device, screen size and connection type, the country the request came from, and the site that referred you — limited to your most recent visits, read only by administrators, and used to support you and to keep the site working on the devices people actually use. Your IP address is not part of that log. We run no advertising trackers and no cross-site profiling. We use Google Analytics to count visits in aggregate; it runs under Google's own policy.
2. Cookies
We use essential cookies to keep you signed in and the emulator running, and optional preference cookies to remember your theme, audio, and key bindings. Google Analytics sets its own cookies to tell visits apart. Advertising cookies are governed by the consent manager on the pages that carry ads. You can clear or block cookies in your browser; essential cookies cannot be disabled without breaking core functionality.
3. How we use your data
- To provide and secure the service (authentication, abuse prevention).
- To display your public profile and the content you publish.
- To send in-app notifications about activity relevant to you.
- To operate optional features you enable (cloud saves, multiplayer).
- To comply with legal obligations, including DMCA processing.
Payments. Supporter memberships and one-off contributions are processed by Stripe. Your card details go to Stripe and never reach us; what we keep is your Stripe customer id, the status of your membership and the dates it runs, so the site knows which perks to give you. Stripe’s own privacy policy governs what it holds.
4. Legal bases (GDPR)
For users in the EEA/UK we process data under: contract (to provide the account you signed up for), legitimate interests(security, abuse prevention, running the community), consent(optional cookies and features), and legal obligation (DMCA and lawful requests).
5. Sharing
We do not sell your data. We share it only with infrastructure providers that host the service on our behalf, and with authorities where legally required. Content you publish (reviews, posts, public collections, profile) is, by design, visible to other users and search engines.
6. Retention
We keep account data while your account is active. When you delete your account we remove your personal data and detach or delete your content, except where we must retain limited records to comply with the law or resolve disputes. Transient technical data (e.g. rate-limit counters) is short-lived.
7. Your rights
You can access, correct, export, or delete your personal data, and object to or restrict certain processing. You can edit most data from your profile and account settings, or contact us to exercise any right. EEA/UK users may also lodge a complaint with their local supervisory authority.
8. Security
We protect the service with HTTPS, a strict Content-Security-Policy, write-time sanitisation of user content, scoped permissions, and an admin audit trail. No system is perfectly secure, but we work to keep your data safe.
9. Children
The service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data.
10. Changes & contact
We may update this policy; material changes will be reflected by the “last updated” date above. Questions or requests: email us. See also our Terms of Service and DMCA policy.