Privacy Policy
Last updated: 24 August 2026
IndiePump (“we”, “us”) operates indiepump.space, an indie game directory where visitors vote for a monthly Top Choice Award and where developers and content creators connect. This policy explains what we collect and how we use it.
Information we collect
- Account details – your name and email address, provided directly or through a social login such as Google.
- Voting activity – the games you vote for, used to run the monthly award and prevent duplicate or fraudulent voting.
- Optional audience profile – if you choose to provide it, your country, age range and gender, shown to developers only in anonymous, aggregate form.
- Developer and creator profiles – studio or channel details you add to your dashboard.
- Technical data – IP address, browser type and cookies (see our Cookie Policy).
How we use your information
To operate the voting system, prevent fraud, provide developer and creator tools, show anonymous audience statistics, communicate with you about your account, and improve the service.
Signing in with Google
When you sign in with Google we receive your basic profile information (name, email and profile picture) so we can create and identify your account. We do not receive your Google password. You can revoke access at any time in your Google Account settings.
Sharing
We do not sell your personal data. We share it only with service providers that help us run the site (such as our hosting provider and login providers) and where required by law. Aggregate, anonymous statistics may be shown to developers.
Your rights
You may request access to, correction of, or deletion of your personal data, and you may object to certain processing. To exercise these rights, contact us using the details below.
Retention and security
We keep your data only as long as your account is active or as needed to provide the service, and we use reasonable measures to protect it.
Children
The service is not directed to children under 16 and we do not knowingly collect their data.
Changes
We may update this policy and will post the new version here with a revised date.
Contact
If you have any questions, contact us at gamehorizongr@gmail.com.
Visitor statistics
We count visits to our own pages so we can see which parts of IndiePump people actually use, and whether the platform is growing. We measure this ourselves, on our own server. We do not use Google Analytics or any other third-party analytics service, and nothing about your visit is sent to anyone else.
What we measure, and why
For each page opened we record the date and hour, which page it was, the website that sent you where your browser provides one, your preferred language, and whether you are reading on a desktop, tablet or phone. That is the whole list. We use it to see which pages are worth improving, which games and creators are getting attention, and how the platform is growing over time.
Legal basis: legitimate interests (Article 6(1)(f) GDPR). Running a platform responsibly means knowing whether anyone is using it. We have weighed that against your interests and built the measurement to take as little as possible: no cookie is set, nothing is stored on your device, no identifier follows you to other websites, and no profile is built about you. You may object to this processing at any time using the contact details above.
Your IP address is not stored
To tell a returning reader from a new one without knowing who either of them is, we turn your IP address and browser into a short one-way code using a secret key that changes every day. The IP address itself is never written to our database in any form. Because the key changes daily, the code cannot be linked from one day to the next, and once that day has passed it cannot be reproduced at all. What is left is a count, not a person.
How long we keep it
Individual page-view records are kept for 90 days and are then deleted automatically. From them we build daily totals, for example how many people opened a given page on a given day, and we keep those totals as our own record of how the platform has grown. Those totals are plain numbers: they contain no identifier of any kind and cannot be traced back to a visitor.
Automated traffic
Search engines, link previews and monitoring services fetch pages automatically. We recognise those requests and leave them out of every figure we report, so the numbers describe people rather than machines.
What we never do
We do not sell this information, share it with advertising networks, or hand it to any third party. It is never used to target advertising at you, and it is never combined with your account to build a picture of you as an individual.
Tracking links and click analytics
Developers who publish on IndiePump can create short tracking links for their titles, in the form https://indiepump.space/go/example. This section explains what we process when somebody follows one. Our Cookie Policy describes the same processing from a visitor’s point of view, and our Terms and Conditions set out what developers may do with the links themselves.
What we process, and why
When a tracking link is followed we record the time of the click; the referring website, where your browser sends one; your browser, operating system, device type and preferred language; an approximate location (country, region and city); and the campaign tags the developer attached to that link. We also store a one-way hash of your IP address and browser, generated with a secret key held only on our server, which lets us tell a repeat click from a new visitor without identifying you.
Legal basis: legitimate interests (Article 6(1)(f) GDPR). Developers need to know whether their announcements reach anyone, and we need aggregate measurement to operate the platform. We have weighed that against your interests: no cookie is set, no identifier follows you to other websites, no profile is built about you, and the developer only ever sees counts and charts. You may object to this processing at any time using the contact details below.
Your IP address
Your IP address is personal data and we treat it as such. It is stored only for as long as it takes to derive an approximate location from it, which in practice is a few minutes. A scheduled job resolves the location and erases the address in the same operation, and any address that cannot be resolved is erased automatically within 24 hours. After that the click record holds a country, region and city, but no address and no means of recovering one.
Who we share it with
To turn an IP address into a location we use ipwho.is, a geolocation provider acting as our processor. They receive the IP address alone – no name, no email address, no account information – and only for the moment the lookup takes. We do not sell click data and we do not share it with advertising networks.
The developer whose link was followed sees aggregated statistics only: click counts, countries and cities, device and browser types, languages, and referring sites. They never receive your IP address and they cannot identify you as an individual.
How long we keep it
Click records on free developer accounts are kept for 30 days and are then removed. Developers can export their own statistics at any point before that. Retiring a link, removing a game, or closing an account removes the associated click records.
Automated traffic
Chat and email services fetch links automatically to build previews. We label those requests as automated and exclude them from every figure we report.
Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. Once your IP address has been erased, a click record retains no identifier that can be traced back to you; where we genuinely cannot identify you from the data we hold, Article 11 GDPR applies and we will tell you so rather than collect more information about you in order to search. To exercise any right, write to gamehorizongr@gmail.com.