Hi.
At first i want to say, that i like the idea of having one launcher for ALL your games really much.

But when I started to integrate my other launchers into GOG Galaxy i wondered if this is really save or a good idea.

So far i understand this, GoG needs all your other Account passwords to integrate and update them. so all my passwords for all my Accounts are somwhere on CD Project Red Servers.

Is this really a good idea? If these servers ever get hacked, you would have a big problem, wouldn´t you?

greetings and thx for answers ;)

As far as I know, the data is passed through the 3rd party plugin. You can view the code from the specific plugins you are using from GitHub to see what it does. As to what is stored on GOG, the privacy statement reads that when connected to other platforms, they store imported data only as long as you stay connected with that platform. That data is then deleted once you disconnect from the platform.

You can do a more thorough read here. Plus there' an email link there for more questions:
https://support.gog.com/hc/en-us/articles/212632109-Privacy-Policy?product=gog

it is worth mentioning that "community integrations" are not created by gog and gog takes no responsibility for whatever they might do. also see the last entry in the privacy policy.

as this is promoted as the main feature of galaxy2 i find it concerning at best, outlandish at least.

GoG did not create the Integration tool within their own launcher but "the community"? This sounds very strange. Who is the community integration creator then? And what for data does he collect?

i am not sure if i understand this correctly...
In their privat policy in point 4.3 they say they do not save my Account Passwords or any information to access them. So do someone else save this data?

And is this integration a community plug? otherwise i am not sure what they mean with "community plug in".

3rd party/community.

The developer downloads/code/feedback are on github and collected under the name FriendsofGalaxy. Your account information/passwords are saved on your local installation of Galaxy, which is then passed thru the plugin.

so would you say its save to link your accounts nevertheless or would you advise against it?

My answer is going to be no, but my reasons stem from a different situation in regards to the gog website receiving achievement information on a game that I did not start with Galaxy (this is with Galaxy 1.2). So ultimately, that influences me with Galaxy 2, as I'm not sure what other data is being collected without my knowledge.