Learn how we collect, use, and protect your information.
The protection of your personal data is important to us. This privacy policy explains what data we collect on our website indiebunny.com and how we use it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).
The legal basis for data processing on this website is:
When you visit our website, our servers automatically collect technical data for security and stability purposes. This includes:
This data is processed based on our legitimate interest in maintaining the security and stability of our website (Article 6(1)(f) GDPR). Log files are automatically deleted after no more than 30 days. No personal profiles are created from this data.
We use Plausible Analytics, a privacy-focused web analytics tool. Plausible is designed to be compliant with privacy regulations without requiring cookie consent:
Plausible only captures aggregated metrics such as page views, traffic sources, and device types. All data remains exclusively on our servers. The legal basis is our legitimate interest in understanding how our website is used (Article 6(1)(f) GDPR).
When you first visit our website, a consent dialog will appear asking whether you accept the use of cookies from third-party services.
Which dialog you see depends on where you are. If you are in the European Economic Area, the United Kingdom or Switzerland, consent is collected by Google's Privacy & messaging tool, a consent management platform certified by Google and integrated with the IAB Europe Transparency & Consent Framework (TCF v2.2). Your choices are recorded in a TCF consent string that is made available to the advertising providers involved. Everywhere else, our own consent banner asks instead and your choice is stored in your browser's local storage. Our banner is also used as a fallback if Google's consent tool cannot be loaded, for example because it is blocked by a browser extension.
In order to be able to ask you at all, the consent tool itself (fundingchoicesmessages.google.com) is loaded when the page opens. It is the only Google component loaded before you have made a choice; no advertising script and no advertising cookie is involved until you consent.
If you accept, the third-party services described in Sections 5 to 7 below (Google AdSense, Subscribe with Google, YouTube) may set cookies on your device. If you decline, none of these services are loaded at all: no advertising script is fetched from Google, no advertising is displayed and no third-party cookie is set. You can change your preference at any time using the “Cookies” link in the footer, which re-opens whichever consent dialog applies to you.
Our own analytics tool (Plausible Analytics, see Section 3) does not use cookies and operates independently of your consent choice.
We finance this site through advertising and use Google AdSense, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users in the EEA and Switzerland) and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. AdSense displays advertisements alongside and within our editorial content; all advertising is labelled as such.
AdSense is only loaded after you have actively accepted in our cookie banner. Until then, the AdSense script is not present on the page and your browser makes no request to Google's advertising servers. If you decline, no advertising is loaded at all – you will see the site without ads rather than with non-personalised ads.
When AdSense is loaded, the following data may be processed by Google:
googlesyndication.com, doubleclick.net, google.com)Google uses this data to select and deliver advertising, to measure ad performance, to limit how often you see the same ad, and to detect invalid traffic and fraud. Depending on your Google ad settings, advertising may be personalised, meaning it is selected on the basis of a profile of your interests derived from your browsing behaviour across websites and apps. Google acts as an independent controller for this processing.
Legal basis: your consent (Article 6(1)(a) GDPR, and § 25(1) TTDSG for the storage of and access to information on your device), collected in the EEA, the UK and Switzerland through Google's certified consent management platform as described in Section 4. You can withdraw your consent at any time with effect for the future using the “Cookies” link in the footer – choosing “Decline” reloads the page without AdSense. Withdrawal does not affect the lawfulness of processing carried out before it.
Third-country transfer: data may be transferred to Google servers in the United States and other countries outside the EU/EEA. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.
You can control personalised advertising independently of our site in your Google Ad Center and find details of Google's advertising practices in the Google advertising notice and Google's Privacy Policy.
On our article pages, we use Google Subscribe with Google (SwG) Basic, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This service is only loaded after you give your consent via the cookie banner.
When SwG Basic is loaded, the following data may be transmitted to Google:
SwG Basic may create iframes connecting to Google domains. Google may use this data to provide subscription-related features and to improve its services. For more information, please refer to Google's Privacy Policy.
The legal basis for this processing is your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by clearing your browser's local storage for this site or by declining cookies when the banner next appears.
Data may be transferred to Google's servers, which may be located outside the EU/EEA. Google participates in the EU-US Data Privacy Framework. You can manage your Google account data at myaccount.google.com.
On our article pages, we embed game trailers using YouTube (operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use YouTube's privacy-enhanced mode (youtube-nocookie.com), which means YouTube does not store information about visitors on our website unless they play a video. Videos are only loaded after you give your consent via the cookie banner.
When a YouTube video is played, the following data may be transmitted to Google:
YouTube may set the following cookies on your device:
The legal basis for this processing is your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by clearing your browser's local storage for this site or by declining cookies when the banner next appears.
For more information, please refer to Google's Privacy Policy and YouTube's Privacy Information. Data may be transferred to Google's servers, which may be located outside the EU/EEA. Google participates in the EU-US Data Privacy Framework.
Our game pages, release calendar and directories show artwork and store information for games on Steam, operated by Valve Corporation, P.O. Box 1688, Bellevue, WA 98009, USA.
Images are not loaded from Steam by your browser. Cover art, capsules and screenshots are fetched by our server, converted and cached, and then served from indiebunny.com. Your browser therefore makes no request to Valve for images, and Valve receives no information about you when you view these pages. No cookie is set for this, and no consent is required, because no personal data of yours is transferred.
When our server fetches an image from Steam, the request comes from our server and contains no data identifying you. Cached copies are stored for as long as the image is in use and are refreshed when the game record changes.
Game trailers are the one exception. Video files are too large for us to serve ourselves, so a trailer hosted by Valve is only loaded if you actively click play. The player tells you this before you do. Once you click, the following may be transmitted to Valve:
Purpose: to show you the trailer you asked to see. Legal basis: your consent (Article 6(1)(a) GDPR), given by clicking play; for the server-side image retrieval, our legitimate interest in operating an editorial games site without exposing readers to third-party requests (Article 6(1)(f) GDPR).
Recipients and third-country transfer: Valve Corporation is based in the United States, so playing a trailer may involve a transfer of data outside the EU/EEA. We have no control over Valve's further processing. You can avoid this transfer entirely by not playing trailers; every other part of our Steam integration works without contacting Valve from your device.
Store links (for example “View on Steam”) are ordinary links. Nothing is transmitted until you follow one.
For details of Valve's processing, see the Steam Privacy Policy.
If you contact us via the contact form on our website, we collect the following data:
This data is used exclusively to process and respond to your inquiry (Article 6(1)(b) GDPR). Your data will be deleted once the inquiry has been fully resolved, unless legal retention obligations require longer storage.
When you subscribe to our newsletter, we use a double opt-in process. After entering your email address, you will receive a confirmation email containing a link. Your subscription is only activated once you click this confirmation link.
We process the following data:
The legal basis is your consent (Article 6(1)(a) GDPR). You may revoke your consent at any time by using the unsubscribe link in any newsletter email or by contacting us directly at hello@indiebunny.com.
You can create an optional user account on IndieBunny – either as a regular user or as a game developer / studio. When you register, we process:
Registration uses a double opt-in process: your account only becomes active after you confirm your email address via the link we send you. The legal basis for this processing is the performance of a contract (Article 6(1)(b) GDPR) – providing the account you requested.
If you use account features, we additionally store the data those features require: games you follow (for release and coverage alerts), bookmarks, star ratings and upvotes you submit. This data is linked to your account and used solely to provide those features.
For developer/studio accounts, profile information and game submissions you enter are published at your direction as part of the service.
To keep you logged in, we set one strictly necessary cookie:
You can delete your account and the data linked to it at any time by contacting hello@indiebunny.com (self-service deletion inside the account settings is being rolled out).
We operate a Discord bot (“IndieBunny Bot”) that automatically shares new articles and video content in configured Discord servers. When the bot is added to a Discord server, we store the following data:
We do not collect, store, or process any personal data of individual Discord users. The bot does not read or store message content from users, nor does it track user activity.
The legal basis for this processing is our legitimate interest in distributing our content to interested communities (Article 6(1)(f) GDPR). All stored data is automatically deleted when the bot is removed from a Discord server.
If you are a server administrator and wish to request deletion of your server's data, please contact us at hello@indiebunny.com.
Under the GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at hello@indiebunny.com.
We implement appropriate technical and organizational measures to protect your personal data against loss, destruction, manipulation, and unauthorized access. Our security measures are continuously improved in line with technological developments.
We reserve the right to update this privacy policy to comply with legal requirements or to reflect changes in our services. The current version is always available on this page.
Last updated: August 2026
If you have any questions about this privacy policy or the processing of your personal data, please contact us:
indiebunny
Email: hello@indiebunny.com