Privacy policy
Last updated: September 2026
1. Controller
A2K GbR
Rainbrunnenweg 4
34125 Kassel
Email: info@coopswipe.com
2. Overview
coopswipe helps you find co-op games for your crew – with a swipe deck, a saved list and shared group rounds (Group Play). We process personal data only as needed to operate the website, your account, communicate with you, or – with your consent – for usage statistics.
3. Hosting and server logs
The website runs on servers of Hetzner Online GmbH (Germany). Servers are managed via Laravel Forge. When you visit the site, technically necessary connection data (e.g. IP address, time, requested URL, user agent) is processed in server log files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation).
Fonts, icons and emoji graphics are served from our own server. No data is transferred to third parties such as Google for them.
4. Game data, images and trailers
Game metadata (titles, descriptions, co-op modes, player counts, prices) comes from IGDB (Twitch Interactive, Inc., USA) and the Steam store (Valve Corporation, USA). We fetch it server-side and store it ourselves; no data about you is transferred in the process.
Cover images are loaded directly from IGDB's servers (images.igdb.com), preview and header images from Steam's servers
(steamstatic.com). Your IP address is transferred to the respective provider because your browser requests the images there.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting games visually).
You can watch trailers on game pages and in the swipe deck's detail view. The video is only loaded once you click “Play”. Only then
does your browser request the video from Steam's servers (video.akamai.steamstatic.com), transferring your IP address and
technical information about your device to Valve or its content delivery provider. Legal basis: Art. 6(1)(f) GDPR. A transfer to the USA
cannot be ruled out.
We have no influence on the accuracy or completeness of the game data.
5. Account and sign-in
You can use coopswipe without an account. If you create one, we store your display name, email address and – if you set one – a hashed password. Alternatively, you can sign in with a login link sent by email (“magic link”). We use session cookies for sign-in. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Where offered, you can also sign in with Google or Discord. We then receive your user ID, your name and – if shared – your email address from the provider. If the provider does not share an email address, we create an internal placeholder address that we never send email to. Providers: Google Ireland Limited (Ireland) and Discord Inc. (USA). Their privacy policies apply in addition.
6. Steam sign-in and Steam library
If you sign in with Steam or connect your account to Steam, sign-in happens via Steam (OpenID). We receive and store your SteamID, your Steam display name and your avatar image; the avatar is loaded from Steam's servers.
We also use the Steam Web API to fetch your list of games including playtime – if your game details are public on Steam – and store it. We use it to hide games you have already played in the swipe deck, to mark games you own, and to show the other members of your group in Group Play who owns a game. You can disconnect Steam at any time in your account settings; we then delete the stored library. Legal basis: Art. 6(1)(b) GDPR.
7. Saved games, swipes and local storage
Your saved games, skipped games and settings (e.g. light or dark mode) are stored in your browser (localStorage). If you are signed in, we sync saved games and swipes with our database so they are available on all your devices. We aggregate how often games are saved and show it as community high scores – without reference to individual people. Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
8. Group Play
When you create or join a group, we store your membership and your votes in the round and in head-to-head duels. The other members of the group see your display name, whether you have finished swiping, the shared result and – if your Steam account is connected – which games you own. Legal basis: Art. 6(1)(b) GDPR.
9. Badges and points
For signed-in users we store unlocked badges and Mood Points that result from your usage (e.g. number of swipes or completed group rounds). Legal basis: Art. 6(1)(b) GDPR.
10. Feedback
Suggestions, comments and votes in the “Feedback” area are stored with your account. Suggestions and comments are visible to all visitors together with your display name. If the status of your suggestion changes, we may notify you by email. Legal basis: Art. 6(1)(b) GDPR.
11. Email delivery (Brevo)
For transactional emails (e.g. login links, email verification, password resets, feedback status updates) we use Brevo (Sendinblue SAS, France). Your email address and the content of the message are processed. Legal basis: Art. 6(1)(b) GDPR.
12. Usage statistics
We count page views server-side without cookies, without storing your IP address and without linking them to your account. We only store the page visited and the time. We count how often sponsored games are shown in the same anonymous way. This tells us which areas are used and lets us bill ad placements. Page views are deleted automatically after 180 days, ad impressions after 13 months. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving and funding the service).
We currently do not use external analytics tools such as Google Analytics or Plausible. Should we use one in the future, we will update this policy and ask for your consent where required.
Note: Google Search Console is used only for technical indexing in Google Search and does not track visitors on coopswipe.
13. Shop links and ads
Links to shops (e.g. Steam) go through our redirect /out/…. When you click, we store the shop, the game, the page you came from
and – if you are signed in – your user ID; you are then redirected to the shop. Some of these links are partner links: if you buy something
there, we may receive a commission at no extra cost to you. The shop's privacy policy applies there. Sponsored games are labelled as ads.
Legal basis: Art. 6(1)(f) GDPR.
14. Retention
Session data is deleted when you sign out or the session expires. Account data, saved games, Steam library, badges, group data and your feedback suggestions, comments and votes are kept until you delete your account and are deleted with it. For shop clicks we remove the link to you when you delete your account (the user ID is cleared). Anonymous page views are deleted after 180 days, ad impressions after 13 months. Server logs are rotated after the usual period. Your cookie settings are kept in localStorage until you change or delete them.
15. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can delete your account yourself at any time in your account settings. To exercise your rights, contact info@coopswipe.com. You may also lodge a complaint with a data protection supervisory authority.