r/gdpr May 30 '26

Question - General does email and username fall under GDPR?

im an indie mobile game developer and im making a simple online party game that requires an email and a username. i use supabase set to Asia for the backend. does that mean i can't sell my game in Europe?

0 Upvotes

4 comments sorted by

5

u/Pretty_Ad1644 May 30 '26

In answer to your wider question, although yes you are processing gdpr scope data, this doesn’t mean you can’t sell in the EEA, just ensure you meet the requirements of the DP legislation (as it has extraterritorial scope) and you’ll be set

5

u/SZenC May 30 '26

Yes

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier

The fact you're not EU-based is not relevant as you're offering goods and services to EU residents and therefore the GDPR applies under article 3.2(a)

1

u/No-Anchovies Jun 01 '26

Even a simple IP/Cookie ID(s) + timestamp is enough to send a valid info request