Hello, GOG user! This Privacy Policy is where we explain what information is collected when you’re using GOG.COM or the GOG GALAXY app, how it is collected, how we use that information, where we store it, and how we protect it. We will also explain your rights in relation to the information. Like with our User Agreement, we've put together both a full text version and a (non legally binding) summary version to make things simple. If you have any queries you can contact us at privacy@gog.com. Here we go…
California Residents: Click here for the California Privacy Notice.
FULL TEXT
QUICK SUMMARY
1. WHO WE ARE
We are GOG sp. z o.o., a company incorporated in Poland (we will further call ourselves “GOG”).
You can contact us here, via email at privacy@gog.com or by traditional mail: Data Protection Officer, GOG sp. z o.o., Jagiellońska 74, 03-301 Warsaw, Poland.
Hello, we're GOG and we are based in Poland. You can find our contact details here (see opposite).
2. WHAT THIS PRIVACY POLICY GOVERNS
2.1 This Privacy Policy applies to GOG.COM and other websites we operate, your GOG user account, GOG GALAXY, any games or videos or other content which you purchase, access or use via GOG.COM, the ‘GOG Wallet’, GOG payment methods, the GOG web forums, GOG customer and technical support and any other services we provide to you (we'll just call all this “GOG services” for short). GWENT: The Witcher Card Game for PC's (“GWENT”) together with www.playgwent.com, any other GWENT web sites or accounts and all services related to GWENT, including (but not limited to) user accounts and customer and technical support (“GWENT Services”) are governed by the separate privacy policy which you can find here.
GWENT and GWENT services are under joint controllership of GOG and CD PROJEKT S.A. You can find everything you need to know about our cooperation here (Section 10).
This Privacy Policy explains how we use, process and share personal information that we collect while you use GOG services.
When you play GWENT, GOG and CD PROJEKT S.A. process your data together and a separate privacy policy applies. We and our Trusted Partners will comply with applicable privacy laws.
2.2 Specifically, this Privacy Policy governs personal information and non-personal information which we collect from you when you're using GOG services. "Personal information" means information which, on its own or in combination with other information, can be used to identify you.
2.3 We respect your right to privacy and will only process personal information in accordance with applicable data protection legislation in the EU, the USA (including the Children's Online Privacy Protection Act) and elsewhere.
We will comply with applicable data protection laws. This involves us being responsible for personal data which we use in connection with GOG services and equally our Trusted Partners (see opposite) will be responsible for personal data which they use in connection with GOG services.
2.4 GOG works with various third parties in connection with the operation and delivery of GOG services, including developers and publishers, payment service providers, customer support software providers and other service providers (collectively referred to as “Trusted Partners”). The specific roles of such Trusted Partners, including whether they act as data processors or independent data controllers, as well as the purposes for which personal information may be shared with them, are described in Section 10 of this Privacy Policy.
2.5 GOG is the data controller under EU data protection legislation in relation to personal information covered in this Privacy Policy.
3. PROTECTING CHILDREN
3.1 We recognise we have a special obligation to protect personal information obtained from children. We do not and will not knowingly collect personal information from any child under the age of 16. If for any reason we decide to collect personal information of children between 13 and 16 we will ask for their parent or guardian consent. If you are a parent or guardian and are concerned about the processing of personal information of your child by GOG, please contact privacy@gog.com.
We will not knowingly collect personal information about children under 16.
4. INFORMATION WE COLLECT
4.1 When you register a GOG account with us, you will need to provide us: (a) your username; (b) your email address; and (c) a password (which is encrypted so that we don’t have access to it). This information is necessary for us to provide you with a GOG account requested by you. In your GOG account settings you can also provide additional information, such as your date of birth, avatar, and your geographical location. This information will be protected by your GOG account credentials. You are responsible for keeping your login details safe - please don't share it with anyone.
To register a GOG account, we will ask you for and collect some basic personal information, including username and email. We need this to provide you with a GOG account. Keep your GOG account password safe.
4.2 When you use GOG services we may also collect the following information:
We may also collect additional information when you use other GOG services (see opposite).
- (a) Technical data: Technical information about devices which you use to access GOG services, including: Internet and/or network connection details (including your IP address); device identifiers; your operating system, browser type or other software; hardware information; or other technical information transmitted by your browser or device.
- (b) Usage and activity data: Information relating to your use of GOG services and related user activity: metrics information about when and how you use GOG services (such as what game(s) you are playing, your current status, your interactions with others); order status; order ID; traffic data; your geographical location; your purchase history; game library; emails received; and links accessed; your preferences and choices such as subscriptions, preferred language and currency; your friend lists on GOG; your communication via chat, game reviews, published posts and other user-generated content on forum and other GOG services;
- (c) Communications and support data: Information you provide when contacting us or interacting with customer support or GOG forums including correspondence and ticket requests;
- (d) Payment-related information: Limited payment and transaction information, including as applicable your credit card number, name and email address (on a hashed/anonymised basis as applicable), payment methods, payment engine and transaction type; fraud risk score; GOG does not store full payment card details.
- (e) Third-party account data: If you link your GOG account to an external account offered by a third party, we may also collect limited information from this third party (for example your social media handle, avatar, e-mail, friend list, as applicable). Processing of your personal information by such third parties is governed by their own rules and policies;
- (f) Third-party platform purchases: If you purchase content via a third party platform which uses our GOG Direct to Account API, the platform may share data with us such as your platform ID, order details or your IP address;
- (g) Other information you provide: Any other information which you provide us via GOG services.
4.3 GOG GALAXY. If you use GOG GALAXY (including GOG GALAXY store) we will also collect information on user activity, technical logs, information about achievements in games you play and how long you play them; your multiplayer sessions and your activities in the GOG GALAXY app and on other platforms connected to your GOG account for the general operational purposes of GOG GALAXY. If you choose to connect your accounts from other platforms with GOG GALAXY, depending on the features that the particular integration currently supports, GOG may access personal and non-personal information such as your user name and user ID, avatar, game list, gametime, game achievements, friend list (user name, user ID, avatar) and their status, chat and conversation history. We will not store your connected account credentials. In addition, if you purchased games using the GOG GALAXY store in the past, we will collect information related to your transaction mentioned in point (d) above as well as the relevant product ID and product entitlement ID. You can read more about this optional account connecting feature in our GOG GALAXY Application Privacy Notice here. The Privacy Notice forms part of this Privacy Policy.
When you use GOG GALAXY, GOG collects personal and non-personal information about your activity (specific examples opposite). We need this to run GOG GALAXY and to provide you with its cool features.
4.4 A quick word about bug reports and crash logs: GOG GALAXY will automatically generate bug or crash reports regarding You can decide whether to automatically submit these reports to GOG, within GOG Galaxy settings. Please keep in mind that if you manually submit bug or crash reports to us, or if we contact you asking for feedback regarding crash or bug reports, then we will process personal information you share with us (e.g. information you decide to include in the sent report).
If GOG services crash, we might ask you to send us crash logs/bug reports.
4.5 A quick word about payment details (if/when you use them in GOG services): this is a matter for the relevant payment method/platform/processor. We process only limited payment processing information on a hashed/anonymised basis as applicable. If you make any purchases within GOG services, then we are notified by the payment processor once a transaction takes place and of course we make sure you receive your purchased item, but we will not receive your full payment details.
5. HOW WE COLLECT INFORMATION FROM YOU
5.1 We may collect, process and use information about you in the following ways (either directly or via our Trusted Partners as explained above): (a) information you give us via GOG services; (b) information given when you contact us or report a problem with GOG services; (c) through our API which allows third party platforms to sell content which is activated by GOG (“GOG Direct to Account API”);(d) we may also ask you to complete surveys that we use for research purposes, although you don't have to respond to them; and (e) through GWENT or GWENT Services. We may collect this information via GOG services or trusted third parties connected with us.
If you use GOG GALAXY and choose to link your accounts from other platforms to GOG GALAXY we may collect your personal and non-personal information from third parties via GOG official or community integrations (see details opposite).
5.2 If you link your GOG account to an account offered by a third party, this third party may provide us with limited information about you (for example your social media handle, avatar, e-mail, friend list, as applicable). Processing of your personal information by such third parties is governed by their own rules and policies. For more information on how those third parties process your personal information, please refer to such third party’s terms and conditions, so check your privacy settings.
5.3 GOG GALAXY. If you use GOG GALAXY and decide to connect your accounts from other platforms with GOG GALAXY app using GOG official or community integrations, then we may also collect personal and non-personal information via such integrations. This feature is totally optional. Please be informed that community integrations may be governed by separate private policies and we are not responsible for the use of your personal and non-personal information by anyone other than GOG (see further section 5 of the GOG GALAXY Licence Agreement available here).
6. COOKIES
We also collect information about you via cookies. You can find out more about this in our Cookie Policy here. You can also manage your consents in our Cookie Declaration which you can find in the footnote of our website. The Cookie Policy and Cookie Declaration are a part of this Privacy Policy.
Check out our Cookie Policy and Cookie Declaration (links opposite).
7. WHY DO WE USE YOUR DATA? (LEGAL GROUNDS FOR DATA PROCESSING)
7.1 When we process information about you, we do so as necessary to provide GOG services you use or engage with (i.e. to perform an agreement between us, enable you to play GWENT or use GOG GALAXY features, manage your account and games library and other GOG services), meet our legal obligations (f.ex. tax, accounting) or to fulfill the so-called “legitimate interests” of GOG or other reasons described in the “How we use your data” section. To clarify, by legitimate interests we mean lawful purposes that could be reasonably expected (like informing you about games we distribute and making sure our marketing is relevant for you, protecting the security of our websites and systems, conducting anti-cheat analysis and anti-fraud checks). When we rely on the legitimate interest, we consider and balance any potential impact on you and your rights. For other purposes we will ask for your consent and you will be entitled to withdraw this consent any time, with no impact on the validity of the processing before your consent has been withdrawn.
In essence, we process your data to provide you with GOG services, to meet our legal obligations and for other reasons that are important for us like informing you about our games and ensuring security of our website. In other cases, we will ask for your consent in advance and you will always have the right to withdraw it anytime you like.
7.2 When we transfer your data outside of the European Economic Area, we do so on the basis of a variety of legal mechanisms, as described in “Trusted Partners”.
8. HOW WE HANDLE YOUR INFORMATION
8.1 All information you provide to us is stored on our secure servers or those of our Trusted Partners. We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
All information you provide to us is stored either on our secure servers or those of our Trusted Partners.
8.2 How long are we going to keep your data? We will retain your personal information only for as long as we will be required in order to fulfil the purposes outlined in this Privacy Policy. In certain special cases, a longer retention period might be required by law e.g. tax, accounting purposes or other legal requirements and obligations. As soon as we will no longer require your personal data to provide our services for other purposes mentioned above, we will promptly delete or anonymize it. In particular:
- (a) we will keep information that is associated with your GOG account for the duration of your agreement for the access to GOG services (i.e. until you close your GOG account). If you choose to close your GOG account, limited data that we collect about you may still be retained for tax, legal and accounting purposes and subject to applicable law;
- (b) if you contact us, we will retain correspondence with you as long as necessary to help you out and then for the period necessary for legal or accountability purposes;
- (c) information that you post on our public forums and your game reviews will be retained until you decide that it should be removed as well. We don’t want to interfere with your posts and expressions without your permission, however we may decide to remove them or be required to remove them by applicable law.
- (d) if you use GOG GALAXY and connect your accounts from other platforms with GOG GALAXY we’ll be storing your imported data only as long as you stay connected with the relevant platform. This information will be deleted once you disconnect with the platform or anytime you ask us to delete your data. However, if you purchased any content via GOG GALAXY Store, we will need to retain your payment history, product ID and entitlement ID for tax, legal and accounting purposes.
In general, we’ll store your data until you close your GOG account. If you do, we may still use limited information about you for tax, legal or accounting purposes.
9. HOW DO WE USE YOUR INFORMATION
9.1 We will use your personal information in the following ways:
- (a) to carry out our obligations arising from any contracts between you and us, like providing access to your GOG account, providing you with the games and technical support and in general allowing to use GOG services and its functionalities when you choose to do so f. ex. your GOG user profile, chat, forum or cloud saving and crossplay services in GOG GALAXY;
- (b) to ensure that GOG services are presented in the most effective manner for you and for the device you use to access them;
- (c) to provide you with information, products or services that you request and which we feel may interest you - in particular, we may send you newsletters, notifications or emails about GOG services, special and occasional offers (like a welcome offer) or provide you with ads, offers and product recommendations on the basis of your purchases or activity on our and third party websites, services and games;
- (d) to activate content on your GOG account through our Direct to Account API;
- (e) to measure, analyse and improve the effectiveness of our marketing activities;
- (f) to notify you about changes to GOG services and our legal documents;
- (g) to analyse, improve and develop GOG services, including on the basis of usage patterns and interaction data, reported issues, feedback, satisfaction surveys and user-generated content, in order to enhance user experience, recommendation systems, promotional strategies and marketing personalisation;
- (h) to analyse the performance of GOG services, including calculating conversion rates and similar metrics;
- (i) to enable and support services provided by our Trusted Partners, but only to the extent necessary to provide such services to you (for example, payment processing or customer support);
- (j) to provide you with optional functionalities such as authentication via third-party accounts;
- (k) to create a user’s profile based on information about your use of GOG services and other platforms (we’ll rely on data made available when you merge your GOG account with your account on other platforms) in order to make GOG services even more interesting for you;
- (l) to create a universal user’s profile based on information about your use of GOG services and other platforms (we’ll rely on data made available when you merge your GOG account with your account on other platforms) in order to make our Services even more interesting for you;
- (m) to protect you from an unauthorized use of your account and against fraud;
- (n) to demonstrate compliance with applicable legal requirements, including data protection laws;
- (o) to establish, exercise or defend against legal claims.
We will use your information to run GOG and keep improving it as well as to communicate with you (e.g. with newsletters or emails). Sometimes we may have to share anonymised, non-personal information like operating system types in order to run GOG services.
9.2. Whenever we are personalizing or targeting our marketing communications, offers and adverts, we may profile your personal information. However, we do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. If you decide that you no longer want to receive personalized offers, product recommendations from us, or no advertising news at all, you can object to this at any time via this form or at privacy@gog.com. You can also choose whether to receive marketing communication from us, including personalized and targeted marketing emails by managing subscriptions on your GOG account Subscriptions page, following the link "unsubscribe" attached to our marketing emails or just contacting us directly here.
9.3 Non-personal and aggregated data. We may process some aggregated and statistical non-personal data on user behaviour (e.g. sales per region, number of support tickets) and share it with selected Trusted Partners who work with us to provide GOG services to you (for example, with games developers/publishers selling games on GOG.COM or with payment providers) in order to support, improve or amend GOG services or to help them to improve their products, which you have bought. We may also share non-personal information with data analysis services to help us run GOG services. All such information is shared in a form that does not identify individual users.
10. DATA SHARINGS
Other Users
10.1 Some elements of your personal information and some information about your use of GOG services are accessible to other GOG users. For example: other users of GOG services will be able to see your username and avatar (if you choose to have one). We may also display other information derived from your activity on GOG services. We do this to help GOG users to find gamers with similar tastes and to build the GOG user community. You can manage the privacy settings of your GOG user profile in your GOG account.
Some information about you will be visible on GOG.COM as a part of your GOG user profile, this can be managed via privacy settings for your GOG account.
10.2 How you use your information. Please remember that any communications you have via GOG services (e.g. via private messages, chat or the GOG forums or via multiplayer games like GWENT) may reveal your screen name, other details about you and the content of any communications by you with other users. Also, any information and content you share publicly using GOG services (e.g. on our forums or your GOG user profile) will be accessible to GOG users and others. Consider carefully with whom you share your information and avoid sharing contact or private information about yourself.
When you're using GOG services you can choose to share your own personal information with others (e.g. in chat) but it's your responsibility.
Our Trusted Partners
10.3. Certain Trusted Partners process personal information on our behalf and strictly in accordance with our instructions (“Data Processors”), solely for the purpose of enabling the provision and operation of GOG services.
These Data Processors include, in particular:
- customer support software and ticketing system providers;
- providers of analytics tools used for GOG services;
- providers of error tracking and crash reporting tools;
- network and content delivery providers used to optimise the delivery of GOG content (limited to IP address and content identifiers);
- data hosting and cloud service providers;
- entities providing us with marketing communication and campaign management services, related analytics and newsletter delivery tools;
- survey and research tool providers used for optional surveys conducted by GOG.
All Data Processors are subject to contractual obligations requiring them to process personal information only on our documented instructions and in compliance with applicable data protection laws.
10.4 Some Trusted Partners act as independent data controllers, meaning that they independently determine the purposes and means of processing personal information shared with them.
Such Trusted Partners include, in particular:
- developers and publishers whose content is distributed via GOG services;
- advertising and advertising measurement partners;
- third-party platforms that sell content activated via GOG’s Direct to Account API;
- external platforms that you choose to connect with your GOG account in order to activate purchased content;
- professional advisors (such as legal, tax, audit or accounting advisors), where disclosure is required.
The processing of personal information by such Trusted Partners is governed by their respective privacy policies.
During payment processing, personal information may also be shared with Trusted Partners acting as independent data controllers:
- payment service providers;
- banks and financial institutions;
- anti-fraud service providers.
In general, we don’t share information about you with third parties. There are exceptions like our Trusted Partners that help us do our thing. They usually help us with things like data analytics, processing payments, internal tools or running a variety of marketing activities.
10.5 Certain forms in GOG services require the use of Google's reCAPTCHA to prevent automated abuse. This plugin checks if you are a person in order to prevent certain website functions from being (ab)used by spam bots (particularly comments). Google processes personal information such as IP address and device information as an independent data controller in accordance with its Privacy Policy and Terms of Use.
10.6 Together with our Trusted Partners, we can also use different technologies or tools for marketing and analytical purposes in GOG services. As highlighted in Section 6 above, you can find out more about this in our Cookie Policy here.
10.7 Your information may be processed, stored and transferred outside your country of residence and beyond the European Economic Area (EEA) and Switzerland, such as the United States, Canada or Brazil. Privacy laws in these countries may not offer the same level of protection as in your country or in the EEA. But whenever we’re sharing your personal information outside the EEA and Switzerland, we will do so on the basis of the EU standard contractual clauses and/or other lawful measures to transfer your data and establish adequate protection of your personal information - feel free to reach out to us via e-mail at: privacy@gog.com if you wish to know more.
10.8 Additionally, we are running our profiles or channels on social media platforms (such as Facebook, Discord, X, Instagram, YouTube). We may process personal information of users who interact with GOG profiles, channels or content that we make available there. Such information may be processed in connection with operating and managing GOG’s presence on social media, communicating with users, informing them about GOG services, activities, updates, promotions, offers and events. The legal basis for such processing is our legitimate interest, consisting in maintaining communication with users and promoting our services and brand.
11. THIRD PARTY INFORMATION COLLECTION AND EXTERNAL SERVICES
11.1 GOG services may, from time to time, contain links to and from the websites or services of third parties (e.g. to games developers whose games are on GOG). In addition, third parties (e.g. games developers/publishers) may also collect personally identifiable information (e.g. your email address or name) if you want to access additional game services, but they can collect any such information only after you have been informed of it and consented to it. This may include saving information to your GOG profile in relation to their games (such as, for example, saving game progress). Our Privacy Policy does not extend to these external sites or companies, so please refer directly to their privacy policies. This also applies to GOG GALAXY integrations created by the community.
You may find links on GOG.COM that lead outside our website. Sometimes we might need to direct you elsewhere (like a developer’s website) if you want to access additional features built into your games. These sites might collect your information under their own privacy policies.
11.2 GOG services may also offer you easy and optional access to GOG-approved Trusted Partners’ services. In order to do this, we will need to share some of your personal information (e.g. your email address) with them, as long as you agree to it. This personal information will be protected under our Trusted Partner’s privacy policy.
You can use GOG services to access cool stuff from GOG-approved Trusted Partners. We will need to share some personal information with them (which you control). It is up to you if you want to use your GOG account for this or not.
12. OTHER STUFF
12.1 Please be aware that we are subject to various laws and we may be required to release personal information to comply with law enforcement or other legal requirements.
We might be required to comply with law enforcement requests to release personal information.
12.2 In the event of a reorganisation, merger, acquisition or similar corporate transaction involving GOG or its assets, personal information may be transferred to the relevant third party as part of such transaction, subject to applicable data protection laws.
Regardless of any reorganisations, acquisitions, etc., your personal information will be protected the same way as it is right now. Fear not!
13. YOUR RIGHTS
13.1 You have the right to object to the processing of your personal information where such processing is based on our legitimate interests, including for direct marketing purposes. You can do so by contacting us at any time at privacy@gog.com, by changing your subscriptions and communications settings within your GOG account or here. You can also use the unsubscribe/opt-out option that is present in each marketing email we may provide you with. Further, you can read about how you can manage your consents to GOG marketing communications done via our Trusted Partners services here.
Know your rights! These include the right to know how your personal information is being used, access to the data itself, the right to alter it, transfer, restrict how we use it, or just have it all deleted. Simply contact us at privacy@gog.com.
13.2 Depending on where you live, you may have additional privacy rights. For example, under EU laws and depending on the legal basis for processing, you may have the following additional rights:
- to access information we hold about you;
- to request erasure of your personal information;
- to request rectification of inaccurate or incomplete personal information;.
- to request restriction of the processing of your personal information;
- to receive your personal information and transmit it to another controller, where processing is based on a contract or your consent and carried out by automated means;
- to object to the processing of your personal information where such processing is based on our legitimate interests, including for direct marketing purposes.
Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Please note that withdrawing your consent may affect your ability to use certain features or functionalities of our services.
You can exercise these rights by contacting us f.ex. here or at privacy@gog.com.
The exercise of certain rights may be subject to limitations provided for under applicable law.
You may have additional privacy rights (see opposite).
13.3 If you have any concerns about your privacy please contact us first. If however you feel we have not dealt with your concern you can lodge a complaint with the competent local data protection authority - in particular in your EU Member State of habitual residence, place or work or the place where the alleged infringement occurred. The competent supervisory authority in Poland is: Office for the Protection of Personal Data (Prezes Urzędu Ochrony Danych Osobowych; kancelaria@uodo.gov.pl).
14. CHANGES TO THIS PRIVACY POLICY
14.1 We may change this Privacy Policy if we think it's necessary for legal reasons or to reflect changes in GOG services. If so, we will make the changed Privacy Policy available online and (if you have a GOG account) we'll email you to explain the changes. We will also update the “Last Updated” date.
We might make changes to our Privacy Policy but whenever we do we’ll display the changes online. Feel free to contact us if you have any questions about the changes.
15. USER AGREEMENT
15.1 We'd also like to remind you that our User Agreement has more information about how we operate GOG services and it has a number of sections which apply to this Privacy Policy too. You can read it at User Agreement.
Just a reminder to check our User Agreement as well.
Last updated (effective date): 9 March 2026
(See the previous version of the Privacy Policy here)