Privacy Policy
Last updated: April 2026
1. Information we collect
When you create an account, we collect your username, email address, and profile information. If you sign in with Discord, Google, Twitch, Kick, Steam, or Epic Games, we receive your public profile data from those services.
If you connect your Steam account, we may access your public Steam profile and game library to sync your owned games with your WeLike library. We only read your library data and do not modify your Steam account.
When you use WeLike, we collect information about your activity including reviews you write, articles you publish, games you rate, direct messages you send, and pages you visit. We also collect technical data such as your IP address, browser type, and device information.
We track content views (articles, guides, games) in aggregate to display view counts and improve content recommendations. View tracking is tied to your session, not to a persistent personal identifier.
2. How we use your information
- To provide and maintain the WeLike platform
- To process your account registration and manage your profile
- To calculate and display community scores (WL Score) based on user ratings
- To manage the Red Points (RP) reward system and track contributions
- To send you notifications about activity on your content
- To improve our platform through aggregated analytics
- To prevent abuse and enforce our terms of service
3. Data sharing
We do not sell your personal data. We share data only with the following third-party services that are necessary to operate the platform:
- Resend— transactional emails and notifications
- Hetzner— cloud hosting, database, and object storage
- Discord / Google / Twitch / Kick / Steam / Epic Games — OAuth and OpenID authentication (only if you choose to sign in with these providers)
- Anthropic (Claude AI)— editorial content analysis for the AI News Hub. Only publicly available news article data is processed; no personal user data is sent to Anthropic.
- Twitch EventSub— if you link your Twitch account, we receive webhook notifications about your stream status (online/offline) to display live indicators on your profile.
- IndexNow (Bing, Yandex)— we submit public page URLs to search engines when content is published or updated. No personal data is included in these submissions.
5. Direct messages
Direct messages between users are stored on our servers and encrypted in transit. Messages are only visible to the participants of the conversation. WeLike staff do not access message content unless required to investigate reported abuse or comply with legal obligations.
6. AI-powered features
WeLike uses AI (powered by Anthropic's Claude) to analyze publicly available gaming news articles for editorial curation purposes. This analysis helps our team identify and summarize trending news.
No personal user data, messages, reviews, or private content is sent to AI services. AI processing is limited to publicly available news articles from external RSS feeds.
7. Data retention
We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 14 days of the deletion being confirmed, except where we are required to retain it by law.
User-generated content (reviews, articles, guides, comments) is retained in anonymized form after account deletion. The content is no longer linked to your identity.
When an account is deleted, we retain a record in our audit log for up to 7 years to meet legal compliance obligations (GDPR Art. 5(2)). This record contains only a one-way hash of the account identifier - no name, email address, or other personal data.
8. Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your account and personal data - available directly from your account settings
- Export your data in a machine-readable format - available directly from your account settings
- Opt out of marketing communications at any time
For rights that cannot be exercised directly through the platform, contact us at support@welike.red.
9. How to delete your account
You can request account deletion at any time from Settings - Account - Delete my account. The process works as follows:
- You confirm the request by typing your username and checking an acknowledgement box.
- We send a confirmation link to your registered email address, valid for 24 hours.
- Clicking the link starts a 14-day grace period. Your account remains accessible during this time.
- You can cancel the deletion at any time during those 14 days from the banner shown on every page. Note: signing in does not automatically cancel the request.
- After 14 days, the deletion is permanent and cannot be reversed.
10. How to export your data
You can download a complete copy of your data at any time from Settings - Account - Download my data.
- The export is a gzipped JSON file containing your profile, settings, contributions, library, follows, Red Points history, direct messages, and notifications.
- You can request one export every 24 hours. We email you a download link when the file is ready - usually within a few minutes.
- The download link is valid for 7 days. It is personal - do not share it, as anyone with the link can download your data during that window.
- After 7 days, the link expires. You can request a new export at any time.
11. Admin access and diagnostic tools
Members of the WeLike team with administrator access can look up account activity and navigation patterns for diagnostic and moderation purposes. This access is limited to authorised staff, is logged, and is used only to investigate abuse reports, diagnose technical issues, or respond to legal requests.
The legal basis for this processing is our legitimate interest in maintaining a safe and functional platform (GDPR Art. 6(1)(f)).
For You feed activity
To personalise your For You feed, we record which items appear in your feed (impressions) and which you click on. Each record includes the item type (news, article, review, or guide), its position in the list, and the timestamp of the event. No content you have written or any other personal data is attached to these records.
This data is used solely to improve the relevance of your feed. It is not shared with third parties and is not combined with data from external sources.
Administrators with an elevated role can review the feed activity of a specific account to diagnose cases where a user receives unexpected content. Every such access is recorded in an audit log with the identity of the administrator and the timestamp of the lookup.
Impression and click records are deleted automatically after 30 days. Deleting your account removes these records immediately via cascade deletion.
The legal basis for this processing is our legitimate interest in providing a relevant and functional personalised feed (GDPR Art. 6(1)(f)).
You have the right to access these records (Art. 15), request their deletion by deleting your account (Art. 17), and object to this processing (Art. 21) by turning off the "Public activity" option in Settings, which withdraws your data from personalised feeds. Feed impression and click records are not yet included in the self-service data export; if you want a copy of these records, contact us at support@welike.red.
12. Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS), hashed passwords, and secure infrastructure. However, no method of transmission over the internet is 100% secure.
13. Changes to this policy
We may update this privacy policy from time to time. We will notify registered users of significant changes via email.
14. Contact
If you have questions about this privacy policy, contact us at support@welike.red.