Privacy Policy

Last updated: June 2025

Who is responsible for your data

Steam ID and username — to identify your account and display your profile. Collected when you sign in via Steam.
Steam game library — fetched from the Steam API on each visit to build your backlog list. Not stored permanently.
Game statuses (completed, endless, retired) — saved so your progress persists across sessions.
First and last login date — used to understand how the service is used over time.
Profile visibility setting — whether your profile is public or private.

Signing in with Steam is voluntary — you consent by using the service.
Game statuses and profile data are necessary to deliver the service (Art. 6(1)(b)).
Login timestamps are kept under legitimate interest for basic analytics (Art. 6(1)(f)).

Steam (Valve) — handles authentication and provides your game library. Governed by Steam's own privacy policy.
Supabase — stores your account data and game statuses. Servers are hosted in the EU (eu-central-1).
HowLongToBeat / Metacritic — queried by game name only, no personal data is sent.

Your data is kept for as long as you have an account.
You can delete your account and all associated data at any time from the settings menu.

One session cookie is set when you sign in. It contains your Steam ID and display name, and is used to keep you logged in.
No advertising or tracking cookies are used.

Under GDPR you have the right to:

Access the data we hold about you.
Correct inaccurate data.
Delete your data (use the in-app account deletion, or email us).
Object to processing based on legitimate interest.
Lodge a complaint with the CNIL (France's data protection authority) at cnil.fr.

To exercise any of these rights, email hello@matteo.design.