Privacy notice

1. Who is responsible for your data

Moymo is run by two private individuals, David Staněk and Nicolas Milan Ficnar, as a free, non-commercial project. They are joint controllers of the personal data described here (GDPR Art. 26).

The essence of their arrangement: they decide together why and how personal data is processed on Moymo; requests and questions about your data go to one address, info@moymo.net, and either of them handles them; and each of them is responsible to you for the processing described in this notice. You can exercise your rights in respect of and against each of them (GDPR Art. 26(3)).

For anything about your data, including the rights described below, write to info@moymo.net. We do not publish a postal address or a phone number; e-mail reaches both of us. You will get an answer from a person, in Czech or English.

Moymo has not appointed a data protection officer. More about who runs Moymo is on the Legal information page.

2. What this notice covers

moymo.net and its subdomains, member pages on members' own domains, the Moymo desktop companion, the Moymo Discord bot, the e-mails we send, and the API behind all of them.

It does not cover services we link to or that you link to Moymo. When you open a store page, play an embedded video or sign in with another service, that service's own privacy policy applies to what it collects. Studios that run giveaways are responsible for what they do with entrant data - see Giveaways.

3. What we collect

IP addresses are not stored in the clear in the database. Each one is replaced by a keyed hash (HMAC-SHA256 with a secret key). That is pseudonymisation, not anonymisation: it still lets us recognise that two events came from the same address - repeated sign-in attempts, for example, or two invited accounts signing in from the same place - so the hash is personal data and we protect and delete it like any other. Server logs can contain IP addresses in the clear and are deleted after 30 days.

What you publish - reviews, lists, ratings and your profile - is shown to other people according to your visibility settings. New accounts start with library, ratings and activity set to private until you choose otherwise. Private ratings are not shown to anyone, but they still count, without your name, in a game's average rating and Moymo Index and in the similarity between games.

4. Why, and on what legal basis

Where the basis is legitimate interests you can object at any time (see Your rights). Where it is consent you can withdraw it at any time in the cookie settings, and withdrawing is as easy as giving.

An e-mail address and a password, or a linked Google or Discord account, are needed to create an account; without them we cannot provide it. Everything else is optional.

5. Linked accounts

Linking another service is always your choice, and you can unlink it at any time in your settings. Unlinking stops every refresh and deletes the stored link, including any tokens; games already added to your library stay there until you remove them.

Twitch and Patreon give us a refresh token so the data can be updated without asking you again. It is stored encrypted and deleted when you unlink. The Twitch connection also gives access to your Twitch e-mail address; Moymo does not store it.

Some names are not verified: a PlayStation online ID, a Chess.com username, a YouTube channel and a Riot ID are taken as you type them. Linking an account that is not yours is against the Terms.

Moymo uses YouTube API Services. What Google does with data is described in the Google Privacy Policy: https://policies.google.com/privacy.

6. The desktop companion

The companion is an optional program you pair with your account by entering a code on the website. It reads the game launchers installed on that computer - Steam, Epic Games, Riot, GOG and Ubisoft - and sends us:

• the games installed through each launcher, and whether each one is installed on that computer;
• from Steam, the lifetime playtime and last-played date that Steam keeps on your disk;
• play sessions: which game, when it started and ended, and for how many of those minutes somebody was at the computer - counted from whether there was any keyboard or mouse input, never what was typed or clicked;
• the game being played right now, for ‘now playing’ on your profile;
• ratings you give in the companion after a session;
• messages you write to other members in the companion - words, files (pictures, clips, documents, archives) and games from Moymo - and the set-up of the voice calls you make to them;
• the name you give the device, its operating system and app version, and when it was last seen.

That is everything the API accepts from the companion.

Messages. In the companion you can write to a member when you and they follow each other. We store what you write - as sealed text that we cannot read - who wrote it and who it is for, when it was sent and when it was read. Both of you see the conversation, and it is there again whenever either of you opens the chat. Messages are end-to-end encrypted: before it leaves your computer or phone, the app seals what you write for the person it is for (and for your own other devices), and what we store is sealed text that only the two of you can open. We cannot read it, and the app that receives it checks that it really came from them. We can still see who wrote to whom, when, how long the message is and how many files it carries, because that is what it takes to deliver it. The keys that read your messages stay on your devices - a new device gets them from one that has them by scanning a code - and what we keep of them is a copy sealed with a recovery key that only you have; if you lose that key and no device of yours still has the keys, what was written to you before cannot be read again. If somebody's keys change, the app says so and holds what they write until you have compared a number with them. Messages written while the app did not encrypt them stay as they were, in plain text. No page of the website shows messages. They are kept until one of the two accounts is erased, and then they disappear for both. They are part of the data you can download from your settings. If you stop following someone, or they stop following you, nobody can write in that conversation any more; what was said before stays until one of the accounts is erased.

Files and games in messages. A message can carry up to five files, each up to the limit of your plan (30 MB, 70 MB with Moymo+, 100 MB with Moymo MAX), or a game from Moymo. Files are sealed on your device before they are uploaded, so what we store is a file of random-looking bytes that only you and the person you send it to can open, through the app - there is no public address for them. They are deleted 90 days after they were sent; the message stays and says the file has expired. Together your files may take up to 500 MB. Because we cannot look inside a sealed file, the app refuses programs and scripts itself, whatever they are called. A game in a message is only a link to that game on Moymo: each of you sees it with your own rating and shelf.

Calls and screen sharing. In the companion you can call a member who follows you back by voice, and share your screen or one window during the call. The sound and the picture are encrypted from your computer to theirs; neither Moymo nor the relay described below can hear or see them, and nothing is recorded. What passes through us is only the set-up - who is calling whom, the technical descriptions of what each side can send and receive, and the network routes each found - which is kept in memory for two minutes and never written to disk, and afterwards one line in your conversation saying that a call happened and how long it lasted, or that it was missed or declined, which is kept like any other message. The call does not go straight between the two computers: it goes through a relay server (the TURN service of Cloudflare, which Moymo uses for it), so that the person you call never sees your IP address, and you never see theirs. The relay sees your IP address and the encrypted packets for as long as the call lasts, passes them on and keeps nothing; it cannot hear or see what is in them. When no relay is available the call is not made. The companion also signs the technical descriptions it sends, with a key only you hold, and the other companion checks the signature - so nobody who passes the set-up on can swap one computer for another; a friend who has no keys yet, or whose keys changed, does not stop the call. You can choose to share sound with the screen or window: the sound of that window's program, or - for a whole screen - of everything on your computer except Moymo, so that what the other person says is not sent back to them; it goes the same way as the picture, encrypted, and is never stored. The microphone is used only during a call, and the screen only after you choose it in the system's own chooser; nothing of either is stored.

Emotes. The companion's emoji picker has a list of 250 well-known emotes from Twitch and Kick chats. An emote is sent as its name between colons (:KEKW:), which is ordinary text; the picture is drawn by each person's companion and is fetched from the image server of the service it comes from - Twitch, FrankerFaceZ, BetterTTV or 7TV - only when it is on screen: while the emote list is open, or in a message that has one. Those servers can see your IP address and which emote pictures your computer asks for. Nothing else is sent to them, and Moymo does not copy the pictures. The emotes belong to their creators and to those services.

The companion also connects to two places on its own: moymo.net, to check for new versions of itself and download them - and the optional modules you choose to install, which are checked against Moymo's signature before they run - and Steam's store (store.steampowered.com), to show which languages a game supports. That second request goes from your computer, so Valve receives your IP address, as when you open a store page; it carries only the game's number.

Optional modules. The companion's password vault and its clips and screenshots page work on your computer alone: the vault is encrypted with your master password and never leaves your computer, and screenshots and clips are only read from folders on it and are sent to Moymo only when you send one to a friend in a message, like any other file. Servers are described below.

You can unpair a computer at any time in your settings, and its token stops working at once. Play sessions are part of your library and are erased with your account; the current game is deleted 24 hours after its last update.

7. Servers in the companion

Servers are an optional module of the companion that you install from the “+” in its sidebar. In a server you and other members write in text channels and talk in voice channels, the way you may know from chat programs. We store:

• the server: its name, description, colour, emoji and picture (a picture file you upload as the server's picture, up to 2 MB, kept on our servers until it is replaced or removed or the server is deleted), its owner, its channels, its roles and what each role may do;
• your membership: when you joined, your nickname there, your roles, how you want to be notified, whether a moderator has timed you out and until when (a time-out stops you writing, reacting and talking for a while and ends by itself), and how far you have read each channel (so that unread marks work);
• what you write: the text of your messages, the message you replied to, who you named, when it was sent or changed, whether it is pinned, and the reactions you leave;
• forums, to-do lists and documents: the title, tags and text of a post, the rows of a list (the text, a note, who added or ticked it, who it is given to, a day) and the steps of a document that members write together (the steps are bytes that we do not read; we keep who made each step and when);
• files, games, polls and giveaways: files you attach to a message (pictures, GIFs, clips, sound, documents - up to the size of your plan: 30 MB, 70 MB with Moymo+ and 100 MB with Moymo MAX, or 100 MB in a server that has the big-uploads perk; kept for 60 days and readable only by those who may read the channel), a game from Moymo shown as a card, your votes in polls and your entries in giveaways (kept so that you can change or take them back; others see only totals and, after a draw, the names of the winners - never who chose what);
• calendars and party boards: events (title, text, game, start and end, who planned it) and your answer - going, maybe or can't (others see how many answered and the names of the first few who are going; “maybe” and “can't” are seen by you alone), and calls for people to play with (title, text, game, places, time) and who joined them;
• sparks and perks: if you have Moymo MAX you can give a spark to a server you are in - we keep which server, when, and until when it stays (three days). A server's owner can spend the server's sparks on perks (a tag, big uploads, an invite name, role icons and styles, a theme with a picture of up to 4 MB), which we keep with the server;
• how you appear: what you chose to wear beside your name (nothing, the tag of a server, your level on Moymo or up to three of your Moymo badges) and whether you appear as available, busy or hidden - a hidden member looks away to everybody else;
• invitations you make (the code, how often it was used, when it runs out) and bans: that a member was banned from a server, by whom, and the reason the moderator gave.

Who sees it. A message is shown to the members of the server who may see that channel - the owner, and members with the right role, decide that. Nothing in a server is public: no page of the website shows it and search engines cannot find it. Messages are stored as plain text on our servers - they are not end-to-end encrypted. Owners and moderators can delete messages and remove or ban members. We do not read servers in the ordinary course of running them.

Voice channels. The sound goes between the computers of the members in the channel, encrypted from one to the other, through a relay server (the TURN service of Cloudflare, which Moymo uses for it); neither Moymo nor the relay can hear or record it. What passes through us is only the set-up - the technical descriptions of what each side can send and receive, and the network routes each found - which is kept in memory for a few minutes and never written to disk. Because every connection goes through the relay, the other members in the channel do not see your IP address, even if you do not know them; the relay does, while you are connected, and keeps nothing. The companion tells you so before you join your first voice channel. The microphone is used only while you are in a channel, and nothing is recorded. You can also share a window or a screen into a voice channel: it goes the same way, through the relay to the other members, encrypted, only after you have chosen what to share, and it is never stored; with it can go the sound of that window's program (or, for a whole screen, of everything on your computer except Moymo) if you leave “Share sound” on. The companion signs the technical descriptions it sends with a key only you hold, and the others check the signature, so nobody who passes the set-up on can swap one computer for another; a member who has no keys yet, or whose keys changed, does not keep anybody out of the channel. We only know, for as long as you are in the channel, that you are sharing, so that the others can see a “Live” mark.

Online, typing and voice. While the companion runs, it asks us every few seconds what is new in your servers. So we know that you are online (for 90 seconds after the last request), who is typing in a channel (for 3 seconds), and who is in which voice channel (and whether they are muted, deafened or sharing a screen). This is kept in memory only, is gone within minutes and is never written to the database. The members of your servers see whether you are online and - only if your activity is public - the game you are playing.

Notes. If a message names you, a role of yours or everybody (or you asked for every message in a server), the companion can show a small note at the corner of the screen. You can turn notes off in its settings, and choose per server what notifies you.

Leaving and erasing. If you leave a server or are removed from it, your membership and your read marks are deleted; what you wrote stays in it, as part of the conversation, until you delete it or your account. When you delete your account, your messages and reactions in every server are deleted with it, and so are your files, votes and entries, your sparks, your answers to events, your places in parties and the choices about how you appear. A server you own passes to the member who has been in it longest, and is deleted if nobody else is in it; a picture given to a server is deleted when it is replaced, when the server is deleted and when the account of a server's only member is erased. What you wrote in servers is part of the data you can download from your settings.

8. Profile visits

When you open a member's profile, one visit a day is counted for that profile. If you are not signed in, your browser gets the moymo_visitor cookie - a random key that expires at midnight UTC - so that opening the same profile twice that day counts once. Signed-in members get no such cookie.

If you are signed in, the profile's owner sees you by name in their list of recent visitors only if you have chosen, in your privacy settings, to appear in profile visits. It is off by default. With it off, your visit is counted under a key that cannot be linked back to you.

Visit records are deleted after 90 days; only the all-time total on the profile remains.

The views leaderboard ranks profiles by these counts. Every active member's profile is on it by default; it shows everyone your username, display name, avatar, Moymo+ tier and number of views - what your public profile page shows, plus the number. You can switch it off in your privacy settings at any time, and you disappear from it within a few minutes.

You can ask for the views your profile earned on another platform to be added to the count visitors see. For that we keep the link to that profile, the number you claim and a screenshot of that platform's dashboard that you upload. Only moderators see the screenshot, and it is deleted as soon as they decide; the request, with the decision and its reason, stays with your account.

9. Moymo+, Moymo MAX and invitations

Moymo+ is given automatically while your Discord account is linked and you are a member of the Moymo Discord server, and taken away when either stops being true. That is why we check your server membership with Discord regularly.

When you invite someone, your invite code travels in the link and is held only in their browser's memory during the visit. If they sign up with Google or Discord, it is kept for up to an hour in the moymo_ref cookie so that it survives the trip to the provider. When an account is created through your invitation, we record who invited whom.

As an inviter you see, for each person you invited: their username, display name and avatar, how old the account is, how many games they have rated, whether they have linked Discord and Steam, and, while the invitation does not count yet, the reason. If you join through somebody's invitation, that is what they see about you.

Before an invitation counts, it is checked automatically for signs of fake accounts: the account must be at least seven days old, its ratings must be spread over at least three days, and accounts invited by the same member must not sign in from the same IP address (compared as keyed hashes). An invitation that fails a check is held back, not rejected, and counts once the check passes. These checks only decide when a free reward is granted and have no other effect on anyone's account.

10. Studios and creators

• If you apply to the creator programme, we keep your application - pitch, evidence and website - and staff notes on the decision.
• In a studio, we keep your membership and roles, the two-factor secret for the studio panel (encrypted) and hashes of your backup codes, studio sign-in sessions with a keyed hash of the IP address and the browser's user agent, and messages exchanged with Moymo staff in the studio chat, including attachments and internal staff notes.
• A studio can invite somebody by e-mail address. That person receives one e-mail with the studio's name and a link valid for seven days; the invitation, with the address, is deleted 30 days after it is accepted, withdrawn or expires.
• Studios see aggregate statistics for their games and the public names of reviewers - never e-mail addresses, and nothing a signed-out visitor could not see - except for giveaway winners, described below.

11. Giveaways

A giveaway is run by the studio named on it, which is its organiser. Before the draw the studio sees only how many people entered. If you win, it sees your username, display name and avatar and when you entered, so that it can deliver the prize; for that the studio is a separate controller, and its contact details are shown on the giveaway.

Winners are drawn at random by Moymo when the giveaway closes. If the prize is a code, it is shown to the winner in Moymo.

If you did not win, your entry is deleted 30 days after the draw, or 30 days after the giveaway was cancelled, and only the number of entries is kept. Winners' entries are kept as long as the giveaway and the winner's account exist.

12. Custom domains

If you connect your own domain to your profile, we store the domain name and its verification record, and a certificate for it is issued by Let's Encrypt. Certificates are recorded in public Certificate Transparency logs, so the domain name becomes publicly associated with the certificate.

If you use the automatic Cloudflare setup, the API token you paste is used only to create the DNS records in your Cloudflare account during that setup and is never stored.

Where your DNS provider supports Domain Connect, Moymo can instead send you to the provider with a signed link that asks it to create the records. You sign in and confirm there, and nothing about your account at the provider reaches us.

13. Conquiz

Conquiz (conquiz.moymo.net) is a quiz duel for two that you can play without an account. To play you give a nickname. The room - the two nicknames, the answers and the score - exists only in the server's memory and disappears at the latest 30 minutes after the last move, or when the server restarts; nothing of it is written to the database.

Your browser keeps the nickname and a secret seat token in local storage, so that a reload brings you back to your match; see Cookies and storage. Your IP address is used, in memory only, to limit how many requests can come from one address. The legal basis is our legitimate interest in running the game and protecting it from abuse (GDPR Art. 6(1)(f)).

14. Recommendations and profiling

Unless you object, Moymo uses what you do on the site to decide the order of what it shows you. That is profiling (GDPR Art. 4(4)), and this is how it works.

Inputs: your ratings; your library shelves (playing, finished, wishlist and so on); games you mark as not interested; and playtime from linked accounts and the desktop companion (short sessions are ignored). Nothing is inferred from your name, e-mail address, country, or anything you did outside Moymo.

Outputs: lists put in order for you each time they are shown - the picks and the ‘Because you liked’ rails on the home page, ‘For you’ sorting in the catalogue and the matches in Discovery. Moymo also records which recommendations it showed you and whether you opened or dismissed them.

Moymo is also developing a more detailed taste profile, Gamer DNA: numbers describing your taste and your affinity for game tags, including tags you seem to dislike. It is only being tested by staff; it is not shown to members and does not change what they see. Staff who maintain the catalogue can compute it for a member and look at it when investigating a wrong recommendation.

Your ratings, library shelves and playtime also count, together with everyone else's and whatever your visibility settings, towards which games are similar to each other, and your public ratings count towards what is trending. That is aggregated: the result says only which games go together and contains nothing about you. If you object, your data is left out of the next rebuild of the similarity between games, within six hours.

To object, switch off personalised recommendations in your privacy settings. We then stop personalising what you see, delete your Gamer DNA and tag affinities if any were computed, delete your recommendation clicks and dismissals, unlink past recommendation records from your account, and show you the same non-personalised lists as visitors who are not signed in. Your own ratings and library are not touched, and you can switch it back on at any time.

No decision with legal or similarly significant effects is made about you solely by automated means (GDPR Art. 22). Recommendations change the order of lists of games. The automated invitation checks only delay a free reward. Moderation decisions are always made by a person.

15. Cookies and similar storage

Necessary cookies keep you signed in, protect forms and remember your language and your cookie choices. Analytics and external media - embedded players and widgets from other services - are used only if you allow them. If your browser sends a Global Privacy Control signal, it is taken as a refusal of analytics. The full list, with lifetimes, is on the Cookies page. Pictures that your browser loads from other services are not cookies, but the services that send them can set or read their own; see Pictures from other services.

16. Pictures from other services

Many pictures on Moymo are not stored on our servers. Your browser loads them directly from the servers of the services they come from, as soon as a page that shows them opens, without asking first. With each such request the service receives your IP address, information about your browser (such as its type, version and language) and the address of the site you are on - only the site, for example moymo.net or a member's own subdomain or domain, not the page. The service may log these requests, and set or read its own cookies, under its own privacy policy. Moymo learns nothing from these requests.

In the current version of Moymo this applies to:

• game covers, hero images, logos, screenshots and trailers from Steam (Valve Corporation; delivered through content delivery networks such as Akamai and Cloudflare), IGDB (Twitch Interactive, Inc.) and SteamGridDB, and placeholder pictures from placehold.co for games that have no artwork;
• pictures from accounts that members link or sign in with: avatars, banners, stream and video thumbnails, badges, Bitmoji and server icons from Steam, Discord, YouTube and Google, Twitch, Kick, Patreon, Snapchat (Snap Inc.), Chess.com and Xbox (Microsoft);
• pictures of free games from GamerPower, store logos from CheapShark and album covers from Deezer;
• pictures and videos from other websites that a member or a studio has put on their page, unless Moymo already keeps its own copy.

One feature does the same with sound. The daily soundtrack game is built on Deezer's 30-second previews, so opening it makes your browser load the day's previews and their album covers from Deezer's servers (Deezer S.A.) without asking first. Everywhere else on Moymo, Deezer previews play only after you allow external media. Icons and typefaces are part of the site and are not loaded from other services.

The legal basis is our legitimate interest (GDPR Art. 6(1)(f)) in showing the catalogue and members' pages with their pictures, and in playing the soundtrack game you opened. Your browser cannot fetch a picture or a sound without telling the server where to send it, so your IP address is necessary for that. Most of these services are based in the USA; where a service is certified under the EU-US Data Privacy Framework, the European Commission's adequacy decision applies. These connections are made by your browser and are not covered by a contract between us and those services, so their own privacy policies apply.

We plan to serve these pictures from our own servers, so that your browser no longer contacts other services to show them. This notice will change when that happens.

If you do not want your browser to contact these services, you can block images from other sites in your browser or with a content blocker. Moymo keeps working, only without those pictures.

17. Who else receives data

Moymo describes games with the help of a language model, Google's Gemini, used through the Gemini API (Google LLC, USA; certified under the EU-US Data Privacy Framework). Google receives only information about games: store texts, achievement names and statistics, and short excerpts of public Steam user reviews, from which the reviewer's name and account are removed before they are stored. Nothing about Moymo members - nothing you write, rate or do here - is sent to it. The review excerpts are deleted once the game has been analysed, and at the latest 30 days after they were collected; what remains is the review's identifier on Steam, its language, dates, verdict and votes, the reviewer's playtime and the length of the text. Games are also compared with text embeddings, which are computed only from catalogue information about the games and contain nothing about people.

Pictures from other services are not copied to our servers yet: your browser loads them from those services directly, as described in Pictures from other services.

Moymo does not sell personal data and does not share it for advertising. There are no advertising cookies.

18. Transfers outside the EU

Our servers are in the EU, in AWS region eu-north-1 (Stockholm, Sweden), and our backups are in Amazon S3, also in the EU. Personal data leaves the EU only in the cases listed above: the e-mails Moymo sends through Resend, Google Analytics if you allow it, the services you link, embedded players you choose to load, the pictures your browser loads directly from other services, the review excerpts sent to Google's Gemini API, the relay (Cloudflare's TURN service) that carries a voice call or voice channel, and the image servers of the emotes the companion draws.

For transfers to the USA we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework of 10 July 2023 where the recipient is certified, on standard contractual clauses in our processor contracts, and for services you ask us to link, on GDPR Art. 49(1)(b). You can ask us for a copy of the safeguards.

19. How long we keep it

Deleting your account, once you confirm it with the link we e-mail you, erases it straight away. The account and everything attached to it - profile, library, ratings, reviews, linked accounts, devices, sessions, taste profile, visits, notifications, invitations, gear and domains - are deleted together, and your uploaded files are removed. Copies in backups disappear when the backups expire, within 30 days; so that a restored backup cannot bring the account back, a one-way hash of its id is kept for 40 days and the account is erased again after any restore.

A few things are not deleted because they are not only yours: a server you own passes to another member (so that what they wrote there stays), messages in a studio's conversation with staff stay with the studio without your name, notices and moderation records lose the link to your account and are kept for the period above, the security log keeps a record that an account was erased without saying whose, and totals other people see, such as a game's number of ratings, are recalculated. If an authority has asked us to preserve an account's data, the account is deactivated at once and erased when that obligation ends.

20. Your rights

Under the GDPR you have the following rights. Using them is free, and we answer within one month; in complex cases we may extend this by two more months and will tell you why.

• Access (Art. 15) - what we hold about you and how it is used. Your account settings let you download a copy straight away.
• Portability (Art. 20) - the same download is a machine-readable JSON file you can take elsewhere.
• Rectification (Art. 16) - most things you can correct yourself in your settings; for anything else, write to us.
• Erasure (Art. 17) - delete your account in your settings. If you cannot sign in, you can ask for a deletion link on the Delete account page, or write to us.
• Restriction (Art. 18) - a pause on processing while something is disputed.
• Objection (Art. 21) - to processing based on legitimate interests. For profiling for recommendations, switching off personalised recommendations in your privacy settings does it immediately.
• Withdrawal of consent (Art. 7(3)) - at any time in the cookie settings, without affecting what was done before.
• Not to be subject to a decision based solely on automated processing that has legal or similarly significant effects (Art. 22) - Moymo makes no such decisions.

Write to info@moymo.net from the address on your account, or include enough to identify the account. We may ask you to confirm who you are, because giving your data to someone pretending to be you would be the worse failure.

You can complain to a supervisory authority. In the Czech Republic it is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, https://www.uoou.cz. In another EU country you can also complain to the authority there.

21. Age

Moymo is for people aged 15 and over. In the Czech Republic a child can consent to information society services on their own from the age of 15 (Act No. 110/2019 Coll., Section 7). When you sign up you confirm that you are 15 or older.

If we learn that an account belongs to someone younger, we delete it. If you believe that is the case, write to us or use the notice form.

22. If you are in the United States

Residents of California and of other states with comparable laws have the right to know what is collected, to have it deleted, to correct it, and not to be treated differently for asking. The same contact address serves all of them.

Moymo does not sell personal information and does not share it for cross-context behavioural advertising, as those terms are defined in the CCPA as amended. There is no opt-out to offer because there is nothing to opt out of.

23. How it is protected

• Passwords are stored as Argon2id hashes and cannot be read, including by us.
• IP addresses are stored in the database only as keyed hashes.
• Tokens that give access to other services (Twitch and Patreon refresh tokens) and the two-factor secrets for the studio panel are stored encrypted.
• All traffic is encrypted in transit.
• Sign-in attempts are limited: after eight failed attempts within 15 minutes from one address, further attempts to sign in to that account from that address are refused for a while. Sign-up and other sensitive actions ask your browser to solve a small proof-of-work puzzle instead of a third-party CAPTCHA.
• Changing your password or signing out everywhere ends every other session immediately.

No service can promise it will never be breached. If a breach is likely to put your rights at risk, we notify the Office for Personal Data Protection within 72 hours, and if the risk is high we tell you directly. Security problems can be reported as described on the Legal information page.

24. Changes to this notice

The date and version at the top change whenever this notice does. If a change means collecting something new or using data for a new purpose, you will be told before it applies - by e-mail or in Moymo, not only by editing this page.

A change to what is stored on your device asks the cookie question again rather than relying on an answer you gave about something else.