Privacy Policy

Last updated: August 18, 2026

This page explains what GBFans.com collects, why we keep it, and how you can exercise your rights under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and similar US state privacy laws.

What we collect

  • Account information. Email, display name, and any profile fields you fill in (bio, location, interests, social links, avatar).

  • Content you submit. Wiki edits, news/blog posts, gallery uploads, profile comments, marketplace listings, product reviews, event listings.

  • Order / payment records. If you make a purchase, we capture the email, name, shipping/billing address, phone, and IP address at the time of the order along with the line items. We do not store full card numbers; payment is tokenized through PayPal.

  • First-party analytics. Anonymous session and pageview data tied to a cookie-based identifier so we can understand traffic patterns and fix broken pages.

  • Cookies and similar storage. Authentication cookies (Clerk), an analytics identifier, and any preference you set on the site.

Why we keep it

  • To run the site. Authentication, content attribution, and showing you what you posted.

  • To complete orders. Shipping, customer support, returns, fraud prevention.

  • Legal obligations. We retain order, tax, and accounting records to meet US and EU tax/audit requirements. Deletion requests do not cover this data, see below.

  • Community continuity. Wiki articles, news posts, gallery uploads, and other community-submitted content are licensed to GBFans.com under our Terms of Service so the platform can keep displaying them after an account is closed. We anonymize the author rather than deleting the contribution. This is the same model used by Wikipedia, Stack Overflow, and Discourse.

Your rights

  • Right to access / portability. Request a copy of the personal data we hold on you in a structured machine-readable format (JSON).

  • Right to erasure ("right to be forgotten"). Request that we anonymize your account. We rewrite your email and display name to a non-identifying sentinel, hard delete tracking and profile data (notification preferences, push subscriptions, friend lists, contribution scores, analytics sessions, saved address book, saved payment methods, marketing list subscriptions), revoke saved PayPal tokens and active subscriptions on PayPal, and ask Clerk and Discourse to forget you. Per GDPR Art. 17(3), we keep legally-required records (orders/payments) and your community-contributed content (anonymized).

  • Right to correct. Update profile fields via the dashboard, or email us if a non-editable field is wrong.

  • Opt out of marketing. Every marketing email carries an unsubscribe link. Use it.

  • Opt out of "sale" / "sharing" of personal information (CCPA/CPRA). We do not sell personal information. We do "share" personal information for cross-context behavioral advertising, as CPRA defines that term. Mediavine and its advertising partners receive the data listed under Mediavine Programmatic Advertising below, including your IP address, device and browser details, and your email address in hashed form, and may use it to target advertising to you on other sites and apps. To opt out, use the opt-out link at the bottom of this page. You will still see ads. They will not be personalized.

How to make a request

Send an email to [email protected] from the email address on your account. Include:

  • What you want, access (export), correction, or erasure.

  • For erasure: any specific gallery uploads or photos you want hard-deleted (rather than anonymized in place). The default for community content is anonymize-don't-delete; we delete only what you explicitly ask us to delete.

We respond within 30 days of verifying your identity (the statutory window under GDPR / most US state laws). Identity verification is intentional friction, deletion is irreversible.

We will not delete order, tax, or accounting records, even on request, because they are required for legal and audit reasons. The captured email/name/address/phone/IP on those rows stays as-is. Everything else listed under "What we collect" is in scope.

How long we keep things

  • Active account data: as long as the account exists.

  • Marketing list subscriptions: until you unsubscribe or request deletion.

  • Order, tax, accounting records: retained per US/EU tax and audit requirements (typically 7 years minimum). Not in scope for deletion requests.

  • Analytics sessions: tied to a cookie-based anonymous identifier; rotates when you clear cookies or switch devices.

  • Audit / security logs: retained for legitimate security interests.

Who we share with

We use a small number of third-party services to run the site. None of them are given more data than they need:

  • Clerk, authentication. Holds your email, login history, and any session metadata.

  • PayPal, payment processing. Holds your billing details for any orders you place.

  • Plunk, transactional and marketing email.

  • Google Cloud Storage, image and file storage. Holds the bytes of files you upload.

  • Discourse, discussion forum at forum.gbfans.com. Holds your forum username and posts.

  • Meilisearch, site-wide search. Holds author names, titles, and excerpts so search can find things.

  • Google Adsense & Analytics, For the purpose of advertisements and user engagement tracking.

  • Meta, For the purpose of advertisements and user engagement tracking.

  • Mediavine, For the purpose of advertisements.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • IP Address

  • Operating System type

  • Operating System version

  • Device Type

  • Language of the website

  • Web browser type

  • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

Children

GBFans.com is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we've collected information from a child, email us at [email protected] and we'll remove it.

Contact

Privacy questions, complaints, and data subject requests: [email protected].