Privacy Policy

Account details you give us: email address, username, nickname, password (stored hashed — we never see it), profile picture and your platform of preference.

If you sign in with Google or Discord: the name, email address, avatar and account ID that the provider shares with us. We do not receive your Google or Discord password, contacts or messages.

What you do on the Service: games in your library and their shelves, hours played, ratings, reviews, likes, tier lists, wishlists, friends and follows, notifications and the messages you send in chat.

Technical data collected automatically: IP address, browser and device type, pages visited, the time of requests, and error reports when something breaks. Our session cookie keeps you signed in; we do not use advertising or tracking cookies.

To run the Service: sign you in, show your library and profile, deliver messages and notifications, and compute community ratings and rankings.

To keep it safe: prevent abuse, rate-limit attacks, moderate content and investigate reports.

To improve it: understand which features are used and fix errors. We look at aggregate numbers, not at individual people, for this.

To contact you: only about your account, security or important changes. We do not send marketing email unless you opt in to something in the future, and you will always be able to opt out.

Your username, nickname, profile picture, rank, public library, reviews, ratings, tier lists and follows are visible to anyone on the internet, including people without an account. Your email address, hours played and private messages are never public.

Chat messages are visible to the members of that conversation. Please keep in mind that anything you send can be copied by the people who receive it.

We do not sell personal data and we do not share it with advertisers.

We use a small number of service providers who process data on our behalf: Amazon Web Services (hosting and backups, United States), Cloudflare (network security and content delivery) and Sentry (error monitoring, which may include your IP address and the page where an error happened). Google and Discord receive the fact that you signed in through them.

Game metadata comes from IGDB.com; nothing about you is sent to IGDB. News feeds and YouTube trailers are loaded from their publishers, who may set their own cookies when you open their content.

We may disclose data when the law requires it, to protect our users or the Service, or as part of a merger or acquisition (we would tell you before your data is handled under a different policy).

Our servers are in the United States. If you use the Service from another country, including Mexico or the European Union, your data is transferred to and stored there. We protect it with encryption in transit (HTTPS) and at rest, access controls and regular backups.

We keep your data for as long as your account exists. When you delete your account, your profile and content disappear immediately and are permanently erased within 30 days; encrypted backups age out within a further 30 days. Server logs are kept for up to 90 days for security.

You can edit your profile and notification preferences, sign out of every device, and delete your account at any time from Settings.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to or restrict how we use it (in Mexico these are the ARCO rights under the LFPDPPP; in the EU/UK they come from the GDPR). Write to [email protected] and we will answer within 30 days. You can also complain to your local data-protection authority.

The Service is for people aged 13 and over. We do not knowingly collect data from younger children; if you think a child under 13 has an account, contact us and we will delete it.

We will update this policy when our practices change. The date at the top shows the latest version; for significant changes we will notify you in the app or by email.

Privacy questions or requests: [email protected].