Legal

Privacy Policy

Effective and last updated: August 21, 2026

This policy explains how Best GBA Games handles information when you browse best-gbagames.com, sign in with Google or submit an Agree or Disagree vote.

Who we are

Best GBA Games is an independent editorial guide operated by Jie Yin from Singapore for a primarily United States audience. It is not affiliated with Nintendo or the publishers represented in the ranking.

Privacy questions and deletion requests: contact@best-gbagames.com.

When you browse

You can read every editorial page and use filters without an account. V1.0 uses no advertising service, marketing tracker or third-party analytics. Reserved ad placements render nothing and make no advertising requests.

Our hosting infrastructure may create short-lived operational logs containing request time, requested route, response status, IP address, browser or user-agent information and error details. We do not add a separate log drain. The active provider and retention configuration are reviewed before the service is opened to the public.

When you sign in with Google

Google sign-in requests only the OpenID Connect scopes openid, email and profile. This can provide a stable Google account identifier, name, primary email address, profile image and email-verification status. The site does not request Gmail, Drive, contacts or other unrelated Google data.

Better Auth manages authentication. The service database stores the account record, encrypted OAuth token material supplied during sign-in, session records and votes. Our hosting infrastructure runs the application. Google processes the sign-in itself under Google’s own terms and privacy policy.

When you vote

We store your internal account identifier, the game slug, your current Agree or Disagree choice, validity or moderation state, and creation and update timestamps. A database uniqueness rule permits one current vote per account and game. Changing your choice replaces the previous choice; it does not add another vote.

Votes are used only to save your choice, prevent duplicate or abusive voting and show aggregate results after 20 valid votes. They never alter the Editorial score or ranking.

Essential cookies and session storage

• best-gba.session_token (with a secure browser prefix in production where applicable) maintains the signed-in session. The session expires after seven days and may roll forward after one day of active use.
• best-gba.oauth_state is an encrypted, short-lived Google OAuth safety cookie that expires within ten minutes and is cleared after callback processing.
• Browser sessionStorage temporarily remembers a vote choice across the Google redirect and ranking filter or scroll state within that tab. It is not sent to advertising or analytics providers.

These are necessary for sign-in security and the requested interaction. There are no advertising or analytics cookies in V1.0.

How long information is kept

Active session records, including associated IP address and user-agent fields, follow the seven-day rolling session expiry and are removed when sessions are revoked or the account is deleted. Account identity, encrypted provider account material and the current votes remain until you request account deletion or the voting service is discontinued. Operational logs follow the active hosting provider’s reviewed short-retention configuration. We do not preserve revoked sessions as an audit history.

Your choices and deletion requests

You may browse without signing in and sign out at any time. Signing out ends the browser session but does not delete the account or vote. Email contact@best-gbagames.com from the address associated with your Google sign-in to request access or deletion. We may ask you to verify control of that account. Valid deletion requests are completed within 30 days unless a documented legal or security need requires limited retention.

Sharing, sale and security

We do not sell personal information or share Google user data for advertising or marketing. Data is processed only by Google for authentication, the service’s reviewed hosting and database infrastructure providers, and Better Auth as the application’s authentication software. Information may also be disclosed when reasonably necessary to comply with law or protect the service.

OAuth token fields are encrypted at rest by the application before database storage, production cookies use secure settings, and previews remain access-protected. No online service can guarantee absolute security.

Children and changes

The site is for a general audience and is not directed to children under 13. Reading does not require an account. Contact us if you believe information from a child under 13 was collected.

Material changes to providers or data use will be reflected here before the changed processing begins. Non-essential analytics or advertising would require a separate review and any consent controls required at that time.

Read the Terms of Use or return to the ranking.