Privacy policy.

1. Overview

Game Acquisition Combo (GAC) is a personal automation application that discovers free video game offers and sends email notifications. It is currently operated for personal use; it does not offer public account registration, subscriptions, or payment processing.

This policy describes the information involved in operating GAC, including its use of Google OAuth and the Gmail API. The public homepage and this privacy-policy page are informational and do not provide access to the private automation system.

2. Information handled

To operate the application, GAC may handle the following categories of information:

• Authorization and delivery settings: Google OAuth credentials and refresh tokens used to authorize Gmail sending, along with the email addresses or settings needed to deliver notifications.
• Giveaway records: Game titles, offer links, source names, availability details, and related public offer metadata collected from selected sources.
• Notification records: Information needed to track previously discovered offers, pending notifications, and email-delivery status.
• Operational information: Limited technical logs and request information that may be processed by the hosting provider when the application or these public pages are accessed.

GAC does not currently collect public user profiles, passwords for GAC accounts, payment details, or information for advertising.

3. Google Gmail access

GAC requests the Google OAuth permission https://www.googleapis.com/auth/gmail.send to send free-game notification emails from an account that has explicitly authorized the application.

• GAC uses this permission to send emails about discovered offers and related application notifications.
• GAC does not request Gmail permissions to read inbox messages, search mail, or delete messages.
• GAC does not sell Google user data, use it for targeted advertising, or use it to train AI models.
• Google API data is used only as needed to provide the requested email-sending functionality and is not shared with third parties except as necessary to operate that functionality or as required by law.

GAC's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

4. How information is used

Information handled by GAC is used to check selected giveaway sources, identify and record offers, reduce duplicate alerts, queue notifications if delivery is temporarily unavailable, and send emails through the authorized Gmail account.

GAC does not use the information for marketing, behavioral profiling, or sale to data brokers.

5. Third-party services

GAC relies on the following external services:

• Google: OAuth authorization and Gmail API email delivery.
• Cloudflare: Hosting through Cloudflare Workers and storage of giveaway and notification records in Cloudflare D1. Sensitive configuration values, including OAuth tokens, are maintained as Worker secrets or protected configuration where applicable.
• Giveaway information providers: Third-party websites, APIs, and feeds supply public offer listings. Those providers are not given access to the Gmail authorization token as part of normal offer discovery.

These services may independently process information under their own privacy policies. GAC does not sell personal information to these providers.

6. Storage, security, and retention

GAC retains offer history to recognize previous discoveries and may retain notification queue entries and delivery-status records for operational purposes. OAuth credentials and delivery configuration are kept while the application needs them or until they are replaced or removed. There is currently no fixed automatic deletion schedule for historical offer records.

GAC uses Cloudflare's application infrastructure and secret-storage features to help protect its configuration. No internet-connected service can guarantee absolute security.

If the application is retired, the operator can delete the stored authorization credentials and application database.

7. Your choices and Google authorization

The Google account owner can review or revoke GAC's OAuth access at any time from Google Account third-party connections. Revoking access prevents the application from continuing to use that authorization, but it does not automatically erase previously stored offer records or configuration.

Questions about stored information, requests to correct or remove information, or requests to delete GAC's stored authorization configuration can be directed to the contact address below. Applicable privacy-law rights may vary by location.

8. Cookies and public website

The public homepage and privacy-policy page do not intentionally set analytics or advertising cookies and do not include third-party tracking scripts. The website's hosting provider may process standard request information and use technologies needed for security or delivery.

These public pages are not intended for children to register for a service, and GAC does not offer public accounts.

9. Policy changes

This policy may be updated if GAC's features, providers, or data-handling practices change. The latest version will be published at this page with an updated date.

10. Contact

For questions about this privacy policy, access revocation, or data deletion, contact the GAC operator at:

Email: ultragameplays246@gmail.com

Adapted from the PolicyForge SaaS/Web Application privacy policy template. This page describes the intended current application setup; its operator should review it for accuracy before publishing.