Privacy policy · Gamanac

Draft. This text is waiting for review by our lawyer and may change before Gamanac opens. Words in square brackets, such as [Company address], are details we still have to fill in. One part describes something that arrives before launch: the waiting list for the app.

This policy explains what Gamanac keeps about you, why, where, for how long, and what you can do about it. Gamanac is a journal of the games you play. It works without ads, and we never sell data.

1. Who we are

Gamanac is run by Skynappse sp. z o.o., [Company address], registered in the National Court Register (KRS) under number [KRS number], NIP [NIP]. We decide how your data is used, so we are its controller under the GDPR.

Write to us about your data at [Privacy email]. We have not appointed a data protection officer, because the law does not require one for a service of our size. Every other way to reach us is on the contact page.

2. What we keep and why

Your account

Email address, when you sign in with a link or a code sent by email, or with Apple, Google or Discord, which give it to us. We use it to sign you in and to write to you about your account. Apple may give us an address that forwards to yours, if you ask it to hide yours. When you sign in with Steam, we do not get your email address from Steam.
Ways you sign in: which of Steam, email, Apple, Google and Discord sign in to your account, with the account number each of them gives us, so the right one opens your account. You can take Apple, Google or Discord off on your account page or in the app, under You, in Connected accounts, as long as another way to sign in stays.
Username, which you choose, and which shows on your profile and cards. It cannot be changed yet.
Year of birth. You type your full date of birth when you sign up; we check that you are 16 or older and then keep only the year. See section 9.
Time zone, which your browser or phone tells us when you sign up, so “this year” on your card starts at midnight where you live. When your phone is in another time zone, the app offers to move your account to it.
Where you signed up: on the site or in the app. We use it only for a total: how many people who join on the site go on to log a session in the app. Legal basis: our legitimate interest, as for the totals in “Totals for our team” below.
A friend’s invitation, when you sign up after opening their invitation link: which invitation brought you, how it came (through the website, a link opened in the app, or Google Play when you installed the app) and when. Your new account then follows the friend who invited you. If your friend deletes their account, we keep only that you came by invitation.
Your invitation link: a code of your own, made the first time you open Friends in the app or your account page. Whoever signs up through your link follows you.
A sign-in code for the app, when you show one on your account page: we keep a scrambled copy of the code (its SHA-256) with your account, so the phone that scans it can sign in to your account once within 10 minutes. It goes when it is used or when you show a new one, and at the latest a quarter of an hour after it runs out. Anyone who scans it in those 10 minutes can sign in as you, so show it only to your own phone. The app asks before it signs in and names the account.

Legal basis: the contract between you and us, our terms of use (GDPR art. 6(1)(b)).

Apple, Google and Discord

When you sign in with Apple, Google or Discord, or add one of them on your account page, it tells us your account number there and your email address. Apple may add your name, Google your name and a link to your picture there, and Discord your Discord name and a link to your picture there. We keep what it tells us with that way of signing in, until you take it off or delete your account, and your export includes it. We never see your password for them. Each of them handles your sign-in under its own privacy policy.

Discord also asks whether we may see the accounts you connected to it. If you agree on Discord’s page, we read your Discord username and your verified Xbox and PlayStation names once, right after you sign in, and ask you whether to add them to your profile. Those you add pass the content filter in section 2 first. If you say no, or do not answer within an hour, we forget them. We never keep your Discord token. Legal basis: your consent (art. 6(1)(a)), which you give on Discord’s page and again with our question.

Steam

When you sign in with Steam or connect it, Steam tells us your SteamID, a number that identifies your Steam account. We never see your Steam password: you type it on Steam’s own site.

When you bring your library in, and after that to keep it up to date, our server reads from Steam:

the list of games you own, with the time you played each one in total and in the last two weeks, and when you last played it;
whether your Steam profile and game details are public, so we can show you how to open them if they are hidden;
for each game, whether it has achievements, and the content notes Steam gives it, which tell us whether a game is for adults (section 3);
for games you played, the days you unlocked achievements. We do not keep the names of achievements.

We keep the games we recognise as entries in your library, the playtime readings of each game and the achievement days. Demos and betas leave no trace beyond a count. We do not read your Steam name, avatar or anything else. Your Steam friends list we read only when you open Friends in the app, and we keep nothing of it (see “Friends” below).

You can disconnect Steam on your account page or in the app, under You, in Connected accounts. We then delete at once your SteamID, the playtime readings, the achievement days, the session suggestions, the game we saw you playing and the choices you made on the import’s check list, and your Steam account leaves your profile. The games Steam brought and the sessions you logged stay in your library, as yours. If Steam is the only way you sign in, add another way first, so you are not locked out. Signing in with Steam later starts a new account, unless you connect it to this one again.

We read Steam when you ask: when you import your library, import it again, or tap Check Steam now in the app. If you ask us to find your sessions, we also read your library after each game you close (see below). In the hours and days after a read, a little at a time, we also collect the achievement days of the games it brought in.

Once your library is in, we ask whether we may also read it once a day and when you open the app, to add games you get on Steam and see how long you played. We do this only if you say yes. Until you answer, and after you say no, we read your library only when you ask, or after a game closes while we find your sessions. You can change your answer at any time on your account page or in the app, under You, in Connected accounts.

When your playtime of a game grew since the last read, the app suggests a session with that time. It becomes part of your journal only if you log it. A game you removed from your library stays out.

You can also ask us to find your sessions while you play. We do this only if you say yes, on your account page or in the app, under You, in Connected accounts, and stop as soon as you say no. While it is on, our server asks Steam every 5 minutes which game your account is running, as your Steam profile shows it. Steam shows this only while your game details are public. While a game runs, we keep which game it is, its playtime before you started, when we read that playtime and the times we saw it running. When the game closes, we read your whole library, as Check Steam now does, up to three times in the next 15 minutes, until Steam has counted the session. Like any read, it also adds games you got on Steam and may suggest other time you played. We suggest the session in the app with the time you played and then delete what we kept of the game. If Steam counted more time than we saw, the rest is suggested as playtime that grew. If you say no while a game runs, we delete it at once.

Legal basis: the contract (art. 6(1)(b)) for the reads you ask for, and your consent (art. 6(1)(a)) for the daily read and for finding your sessions, each of which you can withdraw at any time.

A file from another app

When you bring your games from another app, such as Backloggd or HowLongToBeat, Gamanac reads the file on your device, in your browser or in the app. Only what we keep goes to our server: each game’s title, with its IGDB number, release year and platforms when the file has them, and when you save, its status, rating, heart, the days you started and finished it and the day you added it there. Reviews, notes, playtime and anything else in the file stay in the file. We do not keep the file.

We keep the games as entries in your library, and a record of the import: which app the file came from, how many games it had, and how many we matched, added and filled in. Your export includes it.

Legal basis: the contract (art. 6(1)(b)).

Your library, lists and cards

Games and what you think of them: status, rating, heart, platforms, the place of a game in your Up next, the years you played them, start and finish dates, notes on your backlog, and your top 10 of the year. For a game Steam or a file brought, also when it came in, so your profile can wait until you sort the import. You choose whether ratings show as stars or from 1 to 10, and whether calm mode leaves out how many games wait in your backlog and your goals for the year.
Goals for the year: the year, what you aim for (games to finish or games from your backlog), the number, and when you set it. Only you see them.
Lists you make: the title, a description once your account may write one, whether the games are numbered, who may see the list, and its games in order. Nobody else sees a game on your list that you keep private, a game for adults while you hide them, or a game you added by hand.
Playthroughs: earlier goes at a game, with where you played it, how hard, how far you got and the days.
Play sessions you log in the app: the game, the platform, when you started, how long you played, a note on where you stopped, and who may see the session. Nobody else ever sees a session itself or its note, only the day you played (section 3).
Session suggestions: time your Steam playtime grew, or a session we found while you played, offered to you as a session, with whether you logged it or skipped it and when. Only you see them.
When you last changed each of the above for a game, so a change made on a phone without the network does not overwrite a newer one made elsewhere.
Games you add by hand that are not in our catalogue. Only you see them.
Games you removed from your library and when, so a change made on a phone without the network does not put them back. Your export includes them.
Your profile: a portrait chosen from our set or, from trust level 2, a photo of your own (see “Your photo” below), a bio of up to 160 characters, your platforms, gamer IDs you type in (PlayStation, Xbox, Nintendo, Discord), whether to show your Steam account, and your 5 favourite games.
Who sees what: who may see your profile, each game and each list, who sees the games and sessions you add from now on, and who sees how long you play.
Cards you make, with a short link and how many times they were viewed.

Legal basis: the contract (art. 6(1)(b)).

Friends

Whom you follow and who follows you, and since when. Friends are people who follow each other. Only the two people in a follow see it, and only you see how many people follow you. When you follow someone, they see your username and portrait among their followers, even while your profile is private.
Whom you stopped following, for 30 days, with since when you had followed them. If you follow them again within those days, the follow keeps its first date, so they get no second note about a new follower.
Your Steam friends who use Gamanac. When you open Friends in the app and have connected Steam, our server asks Steam for your friends list. Steam answers only when your friends list is public there. We look for your friends among Gamanac accounts that connected Steam and show it on their profile, show you those with a published profile and those who follow you, and forget the list right away. To keep anyone from asking Steam too often, we note when your account last asked.

Legal basis: the contract (art. 6(1)(b)).

Blocking, muting and trust

Whom you block and mute, and since when. Only you see it; the people you block or mute are not told.
Your trust level, which unlocks a list's description, links in your bio and a photo of your own. We do not keep it: we work it out when it matters, from how long you have had your account, how many entries you made in your journal (up to 10) and whether a report about you was upheld in the last 30 days.
What a new account did in the last day: when it followed someone, made a list or sent a report, to keep its daily limits, and when any account sent a profile photo (up to 10 a day). We keep it for 2 days.

Legal basis: the contract (art. 6(1)(b)) and our legitimate interest in keeping Gamanac free of abuse (art. 6(1)(f)).

Your photo

From trust level 2 you can show a photo of your own on your profile instead of a portrait. Our server keeps only the middle square, 512 pixels wide, as a new image file, so nothing your camera saved with the photo, such as where it was taken, reaches our storage. Before others see it, the automatic check in “The content filter” below looks at it. The file is not public: our site shows it to others only while the photo is on your profile. Before that, and after we hide it, only you and our moderators can open it. When you replace or remove the photo, we delete its file at once, or at the latest in the next day’s cleanup. Copies in browsers and in our hosting’s cache expire within an hour. A photo the check or our team hid stays with you until you replace or remove it, so that you can ask us to look at it again. Your export includes the photo. Legal basis: the contract (art. 6(1)(b)).

Activity and reactions

What you did, as activities: each day you played a game, counted from your sessions of 5 minutes or more on that day; each change of a game’s status, rating or heart that you make yourself; and each list you make. A game added to your library, and anything an import from Steam or a file brings, makes none. Your game’s journal in the app shows your earlier statuses and ratings from them, and the ones others may see make what the people who follow you see in Activity in the app and what your friends see on their Now (section 3).
Reactions: one of six (GG, fire, heart, ha, wow, played it too) that you give to something a person you follow did, and the ones people give to what you did, with who and when. You can change your reaction or take it back.

Legal basis: the contract (art. 6(1)(b)).

Notifications in the app

If you allow notifications on your phone, the app gives us the push token Expo made for that phone: a code that lets us reach it. We keep it with whether the phone is an iPhone or an Android phone, and when the app last started on it. When you sign out of the app with the network on, we forget that phone's token. We also forget it when Apple or Google tell us the phone no longer takes our notifications.

You choose under You in the app what we notify you about: at the time you usually stop playing, when Steam counts a session, when you've been away two weeks, when your card is ready, and when someone new follows you or reacts to what you did. The first two are off until you turn them on. The other three are on until you turn them off. Quiet hours, from 23:00 to 8:00 where you live unless you change them, hold notifications until they end. Your account keeps these choices.

To learn when you usually stop playing, our server looks each day at the times of the sessions you logged in the last 8 weeks, counted in your time zone. It keeps no new data from this. Your app shows what it learned.

We keep the notifications we sent you for 30 days: what kind each was, when it went, to how many of your phones and whether you opened it. If you open none of three reminders in a row and log nothing on their days, reminders stop until you log a session again. We do not keep the words of a notification. We write them when it goes out, and they reach your phone through Expo and through Apple or Google (section 4). A reminder names the game you played last, a notification about Steam names the game Steam counted, the one after a break names the game you last played and quotes your last note on it, and the one about new followers and reactions names up to two of the people and, when all the reactions are on one thing, what it is. A game for adults is never named.

Legal basis: the contract (art. 6(1)(b)). You can turn each kind off in the app, or all of them in your phone's settings, at any time.

Data exports

When you ask for a copy of your data, we make files with everything we keep about you: your journal, your account with the ways you sign in, your sign-in records and, if you help run Gamanac as a moderator or read our totals, since when. We keep the files in our storage for 7 days, behind a link only you get. Legal basis: your right to a copy and to data portability (art. 6(1)(c) with art. 15 and 20).

Reports

When you report a profile, a list or a card, we keep the report, the reason, your words, whose content it is and what the reported bio, title or description said then, as it may change. With an account, we keep which account reported. Without one, we keep the name and email address you give, which you may leave out only when you report illegal content, and a private link to your report. We need them to deal with the report and tell you what we decided: under Notices if you have an account, otherwise on your report's own page, which only its private link opens. If you gave your email address, we send the link there with a receipt, then our decision, and our answer if you ask us to look again; these emails repeat nothing you typed. Without an address, you see the link once, right after you send the report. Whoever has the link can read your report and ask us to look again, so keep it to yourself. Our team gets an email when new reports wait, which says how many and nothing else. Your export has the reports you made with your account, without what you reported. Legal basis: our duties as a hosting service under the Digital Services Act (art. 6(1)(c)).

Decisions of our moderators, and appeals

When a person on our team or our filter decides about something you wrote, or about something you reported, we keep the decision: what it was about and what it said, what we did and until when, the rule or law it rests on, whether it came from reports, the filter or our own look, whether a machine decided alone, the moderator's note to you and who on our team decided. When you ask us to look again, we keep your words and our answer. Decisions that hid something of yours, and the outcome of what you reported, you read under Notices on your account page and in the app, and your export has them. The person who reported something learns what we decided, but not the moderator's note to you, and you never learn who reported. If you allow notifications from the app, one tells you a new decision waits, without what it says. When we hide your account, others don't see your profile, lists, cards or activity, and you can't follow anyone new or react to anything; your journal works as usual. Legal basis: our duties as a hosting service under the Digital Services Act (art. 6(1)(c)).

The waiting list for the app

If you join the waiting list, we keep your email address, which system you use (iOS or Android) and when you agreed, and we write to you when the app is ready to test. Legal basis: your consent (art. 6(1)(a)). You can leave the list at any time from any email we send.

Counting visits (analytics)

Only if you say yes, we count steps people take on the site and in the app, such as signing up, importing a library, making a card, sorting your backlog, opening a notification or answering the app’s question about notifications, with a few numbers or answers, such as how many games came in, how many seconds after opening the app you logged a session, the hour a notification was opened or whether you said yes. We use PostHog, on servers in the EU. Besides those numbers and answers, the only things a step says about you are whether it came from the site or the app, the kind of device, such as a phone, a computer or a games console, and a random number PostHog keeps in your browser or the app, so that each device counts once. The number goes when you clear the site’s data or delete the app. We do not send the address of the page, the page you came from, your browser, system, language, time zone or screen, and PostHog does not keep your IP address or work out from it where you are. We do not record what you type, your screen or your clicks, and we do not tie the counts to your account, your name or your email. If you say no, or do not answer, nothing is counted.

You can change your answer at any time in Analytics settings or with “Analytics settings” at the bottom of our home page and of pages like this one. Legal basis: your consent (art. 6(1)(a) GDPR and the rules on storing information on your device).

Totals for our team

From what we already keep, our server counts totals for the few people on our team who run Gamanac: for example, how many people logged a session this month, how many new accounts came back in their second or third week, how many profiles are private and how many reports we decided. The totals name no person and no game, nothing new is kept to make them apart from where you signed up (see “Your account”), and they go to no one else. Legal basis: our legitimate interest in knowing whether Gamanac works for the people who use it (art. 6(1)(f)).

Errors and security

Error reports. When something breaks, the site or the app sends a report to Sentry: what went wrong and where in our code. We have turned off everything that could identify you: no IP address, cookies, headers, form contents or addresses with parameters.
How the app runs. The app also tells Sentry whether it closed because of an error, how long it took to start and to open screens, details of the phone such as its model, system version and free memory, and a random number Sentry gives the app on your phone, so we can count how many phones a problem reaches. It is not your account, and it goes when you delete the app. No screenshots, recordings of your screen or what you type.
Server logs. Our hosting keeps a short log of requests, which includes your IP address and the address you opened. When you sign in with Steam, that address contains your SteamID. When a phone without the app opens a sign-in code for the app, the address contains that code; by the time the log could be read, the code no longer works.
Sign-in records. Our database keeps a record of your sign-ins, sign-outs and the sign-in emails sent to you, with the IP address each came from, to stop abuse. For each browser or phone you are signed in on, it also keeps its IP address, what browser or app it is and when it was last used, so it stays signed in. Your export includes them.
Limits. We pass your IP address to our database provider so that it can limit sign-in attempts per person rather than for everyone at once.
How often you ask. Some requests cost us work at Steam, IGDB or OpenAI, draw an image or send an email, such as signing in with Steam, opening a game or a list page, sending a report without an account, drawing a card, importing from Steam or saving a bio. To stop one person or program from using them up for everyone, we count how often each account and each IP address asks, and for a short while refuse more. We keep the IP address only as a code made from it with a secret key, which does not give the address back, and for IPv6 only its first half, the part your provider gives your whole home or phone.

Legal basis: our legitimate interest in keeping Gamanac working and safe (art. 6(1)(f)).

The content filter

Before others see your bio or the title and description of your list, we check them for words that insult or threaten people. A word list and an automatic check (OpenAI’s moderation service) look at the text only, without anything else about you. Your photo goes through the same automatic check before others see it: we send the image itself, never a link to it or anything else about you, and the service looks for sexual images and self-harm. A text or a photo it is unsure about stays hidden from others until a person on our team looks at it. One that clearly breaks the rules stays hidden; you see why next to it and under Notices, and can change it or ask us to look again. We keep the decision with what it was about (the text, or the photo's file name), like a report, and with the scores OpenAI's service gave, to tune how strict the filter is. Legal basis: our legitimate interest in keeping Gamanac free of abuse, and our terms of use (art. 6(1)(b) and (f)).

The same check looks at the username you choose when you sign up and at the gamer IDs you type on your profile or add from Discord, when you save them; OpenAI's service gets the name alone. A name the filter stops, clearly or in doubt, is turned down at once, and you choose another or leave the gamer ID out. We keep nothing of a name it turned down. A name that passes, we note for 10 minutes, so that your account or your profile can take it, and delete the note within half an hour. If the automatic check does not answer within a few seconds, the name goes on with the word list's check alone, and the automatic check looks at it again within minutes; a name it then doubts goes to a person on our team, with the same decisions as a report. If you think the filter turned down a name of yours wrongly, tell us through the contact page: a person on our team looks at it, and if the filter was wrong, we note that you may use that name, and it passes without the check from then on. Legal basis: the same as above.

3. What other people can see

Your profile is private until you choose who sees it: everyone, your friends, or only you. Friends are people who follow each other in the app. While it is private, nobody but you sees it.

When it is public, anyone can see your username, portrait or photo, bio, platforms, the gamer IDs you chose to show, your 5 favourite games, the public games you are playing now (by the same rule as your friends’ Now, below) and your public lists, on its page on the web too. Each public list has a web page of its own that anyone can open: its title, its description, who made it, when it last changed and the games others may see on it. When your profile or a list is for friends, only your friends see it, in the app, and it has no page on the web. A card you share can be opened by anyone with its link, whatever your profile shows.

In the app, people signed in to Gamanac who may see your profile also see your library there: each game with its status, your rating and your heart, the games you are playing now (by the same rule as your friends’ Now, below), and your year so far: how many games you played and finished, and how long you played if you let them see that. Each game shows only to those it is for. The games an import brings show there once you sort them, or a day after the import. A game you keep to yourself, a game for adults while you hide them, or a game you added by hand never shows there to anyone else.

Each game, list and session has its own setting too: everyone, friends or only you. Others get the more private of that and your profile, so nothing reaches more people than your profile does. Games and sessions you add are for friends until you change that in the app, and a game keeps its setting when you change the default later. Your favourite games, your lists and your cards show the games you put on them to whoever sees the profile, the list or the card; a game you keep to yourself, a game for adults while you hide them, or a game you added by hand never shows there to anyone else.

Once your profile is public, people signed in to Gamanac can find it in the app’s search by your username, open it in the app with your 5 favourite games, your library and your lists, and find your lists by their title. A game’s page, which anyone can open, names the lists it is on and who made them, to those who may see each list.

If you show your Steam account on your published profile, your Steam friends who use Gamanac can find you in the app among their Steam friends. While your profile is private, only Steam friends you follow can find you there. If you turn off “Show my Steam profile”, none of them can. Whom you follow and who follows you is seen only by the two people in each follow.

People who follow you and may see your profile see in Activity in the app the games you finish, the ratings you give (those of one evening together, each game with its latest rating), the days you played a game, and your new lists once they have a game others may see. Each shows only to those the game, the session or the list is for. How long you played shows only to those you choose, friends unless you change it; others see that you played, not for how long. Cards you share show what you put on them, your play time included. Notes on your sessions never show to anyone else. Under each of these, anyone who sees it sees how many of each reaction it has. Who reacted is seen only by you and by the person who reacted.

Your friends also see in the app what you are playing. On the Now screen of their app: the games you have on Playing or Endless, when in the last 30 days you set that status yourself or had a day of play they may see. A status an import gave a game does not count, and neither does playtime from Steam. On a game’s page in the app: that you have the game, its status, your rating and your heart. Only friends see these, never for a game you keep to yourself or while your profile is private. Now never shows a game for adults, and a game’s page shows yours only while you show such games.

When you block someone, neither of you sees the other’s profile, bio, lists, activities or reactions in the app, nobody follows the other any more, and the search and Steam friends no longer show either of you to the other. The web page of a public profile stays open to everyone, them included, as the website shows it the same way to all. When you mute someone, nothing changes for them; their activities and reactions just stay out of your way.

Games tagged for adults stay off your profile and cards until you turn on “Show adult games on my profile and card” on your account page. Games you add yourself, and your playthroughs, are seen by you alone.

Your rating of a game counts in how everyone rated it, which the game’s page shows as numbers only, to anyone and to search engines: how many people gave each rating and the average. It counts this way even when your profile or the game is private, never with your name. To make it hard to work out any one person's rating from those numbers, we count them once a day rather than live, only from accounts older than 7 days, and show them only once at least 10 such people have rated the game.

4. Who handles data for us

These companies process data on our behalf, under contracts that bind them to our instructions:

Supabase: our database, sign-in and file storage. Servers in Frankfurt, Germany.
Vercel: hosts the site and runs our server code in [Frankfurt, Germany: to set before launch]. Its network delivers pages from the server nearest to you.
Sentry: error reports, on servers in the EU. Functional Software, Inc. (Sentry) is based in the United States and may also handle the data there, under the EU-US Data Privacy Framework and, as a fallback, the European Commission’s standard contractual clauses.
PostHog: visit counts, only after your yes, on servers in the EU. PostHog Inc. is based in the United States and may also handle the data there, under the EU-US Data Privacy Framework and, as a fallback, the European Commission’s standard contractual clauses.
[Email provider]: sends sign-in links, the emails about a report and other emails, from servers in the EU.
OpenAI: the automatic check of bios, profile photos, list titles and descriptions, usernames and gamer IDs (section 2). Our contract is with OpenAI Ireland Ltd. Where it passes data to OpenAI companies outside the EU, such as in the United States, it does so under the European Commission’s standard contractual clauses or an adequacy decision.
Expo (650 Industries): sends notifications to your phones, with each phone's push token and the words of the notification. Based in the United States.

Some of these companies are based in the United States. Where data may reach the US, the transfer rests on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses. [To confirm for Supabase, Vercel and our email provider before launch.]

We also send your SteamID to Valve when we read your library or your friends list from Steam, and every 5 minutes while we find your sessions, when we ask which game you are running. Valve answers under its own privacy policy.

A notification reaches your phone through Apple's or Google's push service, which handles it under its own privacy policy.

Our game catalogue comes from IGDB (Twitch) and Wikidata. We send them game names and numbers only, never anything about you. Game covers come from IGDB too, through our server: your browser asks our site for a cover, never IGDB, and our server fetches the covers a card image or a link preview shows. When our server draws such an image with letters our fonts lack, such as Japanese, it fetches just those letters from Google Fonts or jsDelivr. Your browser never contacts them for this.

We store Steam data, like all your data, in Germany.

5. How long we keep it

Your account and journal: until you delete your account.
Your photo: until you replace or remove it, or delete your account. Its file goes at once, or at the latest in the next day’s cleanup.
After you ask to delete your account: your profile and cards disappear at once, and we delete your photo's file, your Steam connection, playtime readings and session suggestions at once. We stop sending you notifications at once too. Everything else is deleted 30 days later, in the nightly cleanup that follows. What stays is a record that an account was deleted, without your details, reports you made, without your name, and reports and decisions about what you wrote and your appeals, with the words they were about but without your account, for as long as reports are kept.
Backups: our database provider keeps daily backups for [7 days]. Data deleted from the database therefore stays in backups for up to [7 days] longer, and we never restore it from there into a working account.
Session suggestions: 7 days, logged, skipped or not. A logged one stays in your journal as a session. The game we see you playing: while it runs, and until we measure it, usually within 15 minutes after it closes.
Sign-in codes for the app: until they are used, and at the latest a quarter of an hour after their 10 minutes run out. The invitation that brought you, and your own invitation link: until you delete your account. Follows: until either person stops following or deletes their account. Whom you stopped following: 30 days. Whom you block and mute: until you end it, or either of you deletes the account. What a new account did in the last day: 2 days. How often an account or an IP address asked lately: until the limit is full again, at most a day.
Activities: until you remove the game or the list, or delete your account. A day of play goes when its last session does. Reactions: until the person takes it back, the activity goes, or either of you deletes the account.
Push tokens of your phones: until you sign out of the app on that phone with the network on, until Apple or Google tell us it no longer takes notifications, or 180 days after the app last started there. Notifications we sent you: 30 days.
Sign-ups you never finish: deleted after 7 days.
A note that our filter passed a username or gamer ID: 10 minutes, deleted within half an hour. A name our team let you use after a look: until you delete your account.
Data exports: 7 days, or less if you ask for a new export.
Server logs at our hosting: [1 day]. Database and sign-in logs: [7 days]. Records of your sign-ins in our database stay while your account exists and go with it.
Error reports: 30 days.
Visit counts: [1 year].
Emails sent to you: our email provider keeps a delivery log for [30 days]. Our own note that an email should go to you, without its words or your address, stays 7 days after it went, and 30 days at most.
Reports, the decisions of our moderators and our filter, and appeals: [as long as we need them to show how we handled a report, at most 2 years after the decision], also after the account they were about is deleted. A decision that hides an account stays while it does. The private link of a report goes with the report.
The waiting list: until you leave it or until the app is open to everyone.

6. Cookies and what we store on your device

We use only what the site needs to work, plus visit counting if you agree:

Sign-in cookies (sb-…), set when you sign in, so you stay signed in. They cannot be read by scripts on the page.
Signed-in hint (gamanac-signed-in), which tells our pages that someone is signed in on this browser, so the header shows “Your account”. It holds no other information.
Steam sign-in check (__Host-gamanac-steam-attempt, __Host-gamanac-steam-connect, __Host-gamanac-steam-app), kept for 10 minutes while you sign in with Steam on the site or in the app, so nobody else can finish your sign-in.
Apple, Google and Discord sign-in check (sb-…-code-verifier), kept while you sign in with one of them, for the same reason.
Gamer IDs from Discord (__Host-gamanac-discord-ids), kept for an hour after you sign in with Discord, until you say whether to add them to your profile.
Where to go after signing in (__Host-gamanac-next), kept for an hour when a page asks you to sign in, so you land back on it.
A friend’s invitation (__Host-gamanac-invite), kept for 30 days after you open an invitation link, so signing up on the site keeps it with your new account. Signing out deletes this cookie and the one above.
The app banner (gamanac-app-banner), stored in your browser on an Android phone when you say “Not now” to opening a page in the app, so the banner stays away for 30 days. It is not sent to us.
In the app, your sign-in is kept in your phone’s secure storage (the Keychain on iPhone, the Keystore on Android), so you stay signed in. It never leaves the phone except to sign you in to us.
Your journal in the app: a copy of your library, sessions and playthroughs on the phone, with the changes that wait for the network, the session suggestions you have not answered, whether you see ratings as stars or 1 to 10 and whether calm mode is on, your goals for the year and whether you said “not this year” to setting one, how your Steam playtime grew between readings, for your stats, and the start of a stopwatch you set going, so the app works offline. It stays on the phone when you sign out, for when you sign in again, and goes when you remove the app. When the app helps you pick what to play next, the games you say “Not now” to are kept there too, for two weeks, and never sent to us.
A friend’s invitation in the app: when the app opens an invitation link before you sign up, or Google Play hands it the invitation on its first start on Android, the app keeps the invitation code on the phone until you sign up and sends it with your sign-up. From Google Play the app reads nothing but that code, and only once. An invitation waits on the phone for 30 days at most.
The email address you type in the app to get a sign-in code, kept on the phone for 15 minutes, as long as the email works, so the link in that email signs you in at once and a link for another address does not.
Notifications in the app: which account this phone's push token belongs to, so signing out can take it back, and whether you answered the app's question about notifications. Both stay on the phone.
Your shelf card in the app: the latest image of your card, kept in the app's cache on the phone so you can share it. The phone replaces it each time the card is drawn again and may clear it at any time.
Your analytics answer and text speed (gamanac:analytics-consent, gamanac:text-speed), stored in your browser, not sent to us.
Card introductions (gamanac:card-presentation:…): your browser and the app remember separately for each account whether the owl has introduced your shelf, month and year cards. These markers stay on your device until you clear its site or app data. They are not sent to us.
PostHog’s own cookie and storage (ph_…), only after you say yes to counting visits. Besides the random number, its storage in your browser keeps the address of the first page of your visit and the page or search that brought you there. We do not send them.

7. Your rights

You can:

see your data, and take a copy of it: “Export my journal” on your account page gives you all of it in JSON, and your library in CSV for spreadsheets;
correct it, mostly yourself on your account and profile pages;
delete your account and everything in it, from your account page;
ask us to limit what we do with your data, or object to what we do on the basis of our legitimate interest;
withdraw consent at any time, for visit counting, the waiting list, the daily Steam read and finding your sessions, without affecting what happened before.

Write to [Privacy email] for anything you cannot do yourself. We answer within one month.

You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority where you live.

8. Decisions made by machines

We do not make decisions about you by machine alone that have legal or similarly serious effects. The content filter can keep a bio or a list’s title or description from others automatically when it clearly insults or threatens people, and a photo when it is clearly sexual; you can ask a person on our team to look at it again under Notices, within 6 months. It turns down a username or a gamer ID that clearly breaks the rules or that it doubts, and a username with our team's words, when you choose it; you can choose another, or ask a person on our team through the contact page to look at it. An upheld report, or a decision of the filter, can likewise hide a bio with a link by rule, until you save it without the link, or save it again once links come back. Trust levels and daily limits work by rules alone, only unlock or limit features, and are the same for everyone.

9. Age

Gamanac is for people aged 16 and over. If you tell us you are younger, we delete your account and what you gave us during sign-up at once. Only the short-lived logs and backups in section 5 still hold traces of the sign-up until they expire.

10. Changes to this policy

When we change this policy, we change the date at the top. If a change affects what we do with your data, we tell you on the site or by email before it applies.

This policy explains what Gamanac keeps about you, why, where, for how long, and what you can do about it. Gamanac is a journal of the games you play. It works without ads, and we never sell data.

1. Who we are

2. What we keep and why

Your account

Email address, when you sign in with a link or a code sent by email, or with Apple, Google or Discord, which give it to us. We use it to sign you in and to write to you about your account. Apple may give us an address that forwards to yours, if you ask it to hide yours. When you sign in with Steam, we do not get your email address from Steam.
Ways you sign in: which of Steam, email, Apple, Google and Discord sign in to your account, with the account number each of them gives us, so the right one opens your account. You can take Apple, Google or Discord off on your account page or in the app, under You, in Connected accounts, as long as another way to sign in stays.
Username, which you choose, and which shows on your profile and cards. It cannot be changed yet.
Year of birth. You type your full date of birth when you sign up; we check that you are 16 or older and then keep only the year. See section 9.
Time zone, which your browser or phone tells us when you sign up, so “this year” on your card starts at midnight where you live. When your phone is in another time zone, the app offers to move your account to it.
Where you signed up: on the site or in the app. We use it only for a total: how many people who join on the site go on to log a session in the app. Legal basis: our legitimate interest, as for the totals in “Totals for our team” below.
A friend’s invitation, when you sign up after opening their invitation link: which invitation brought you, how it came (through the website, a link opened in the app, or Google Play when you installed the app) and when. Your new account then follows the friend who invited you. If your friend deletes their account, we keep only that you came by invitation.
Your invitation link: a code of your own, made the first time you open Friends in the app or your account page. Whoever signs up through your link follows you.
A sign-in code for the app, when you show one on your account page: we keep a scrambled copy of the code (its SHA-256) with your account, so the phone that scans it can sign in to your account once within 10 minutes. It goes when it is used or when you show a new one, and at the latest a quarter of an hour after it runs out. Anyone who scans it in those 10 minutes can sign in as you, so show it only to your own phone. The app asks before it signs in and names the account.

Legal basis: the contract between you and us, our terms of use (GDPR art. 6(1)(b)).

Apple, Google and Discord

Steam

When you sign in with Steam or connect it, Steam tells us your SteamID, a number that identifies your Steam account. We never see your Steam password: you type it on Steam’s own site.

When you bring your library in, and after that to keep it up to date, our server reads from Steam:

the list of games you own, with the time you played each one in total and in the last two weeks, and when you last played it;
whether your Steam profile and game details are public, so we can show you how to open them if they are hidden;
for each game, whether it has achievements, and the content notes Steam gives it, which tell us whether a game is for adults (section 3);
for games you played, the days you unlocked achievements. We do not keep the names of achievements.

When your playtime of a game grew since the last read, the app suggests a session with that time. It becomes part of your journal only if you log it. A game you removed from your library stays out.

Legal basis: the contract (art. 6(1)(b)) for the reads you ask for, and your consent (art. 6(1)(a)) for the daily read and for finding your sessions, each of which you can withdraw at any time.

A file from another app

We keep the games as entries in your library, and a record of the import: which app the file came from, how many games it had, and how many we matched, added and filled in. Your export includes it.

Legal basis: the contract (art. 6(1)(b)).

Your library, lists and cards

Games and what you think of them: status, rating, heart, platforms, the place of a game in your Up next, the years you played them, start and finish dates, notes on your backlog, and your top 10 of the year. For a game Steam or a file brought, also when it came in, so your profile can wait until you sort the import. You choose whether ratings show as stars or from 1 to 10, and whether calm mode leaves out how many games wait in your backlog and your goals for the year.
Goals for the year: the year, what you aim for (games to finish or games from your backlog), the number, and when you set it. Only you see them.
Lists you make: the title, a description once your account may write one, whether the games are numbered, who may see the list, and its games in order. Nobody else sees a game on your list that you keep private, a game for adults while you hide them, or a game you added by hand.
Playthroughs: earlier goes at a game, with where you played it, how hard, how far you got and the days.
Play sessions you log in the app: the game, the platform, when you started, how long you played, a note on where you stopped, and who may see the session. Nobody else ever sees a session itself or its note, only the day you played (section 3).
Session suggestions: time your Steam playtime grew, or a session we found while you played, offered to you as a session, with whether you logged it or skipped it and when. Only you see them.
When you last changed each of the above for a game, so a change made on a phone without the network does not overwrite a newer one made elsewhere.
Games you add by hand that are not in our catalogue. Only you see them.
Games you removed from your library and when, so a change made on a phone without the network does not put them back. Your export includes them.
Your profile: a portrait chosen from our set or, from trust level 2, a photo of your own (see “Your photo” below), a bio of up to 160 characters, your platforms, gamer IDs you type in (PlayStation, Xbox, Nintendo, Discord), whether to show your Steam account, and your 5 favourite games.
Who sees what: who may see your profile, each game and each list, who sees the games and sessions you add from now on, and who sees how long you play.
Cards you make, with a short link and how many times they were viewed.

Legal basis: the contract (art. 6(1)(b)).

Friends

Whom you follow and who follows you, and since when. Friends are people who follow each other. Only the two people in a follow see it, and only you see how many people follow you. When you follow someone, they see your username and portrait among their followers, even while your profile is private.
Whom you stopped following, for 30 days, with since when you had followed them. If you follow them again within those days, the follow keeps its first date, so they get no second note about a new follower.
Your Steam friends who use Gamanac. When you open Friends in the app and have connected Steam, our server asks Steam for your friends list. Steam answers only when your friends list is public there. We look for your friends among Gamanac accounts that connected Steam and show it on their profile, show you those with a published profile and those who follow you, and forget the list right away. To keep anyone from asking Steam too often, we note when your account last asked.

Legal basis: the contract (art. 6(1)(b)).

Blocking, muting and trust

Whom you block and mute, and since when. Only you see it; the people you block or mute are not told.
Your trust level, which unlocks a list's description, links in your bio and a photo of your own. We do not keep it: we work it out when it matters, from how long you have had your account, how many entries you made in your journal (up to 10) and whether a report about you was upheld in the last 30 days.
What a new account did in the last day: when it followed someone, made a list or sent a report, to keep its daily limits, and when any account sent a profile photo (up to 10 a day). We keep it for 2 days.

Legal basis: the contract (art. 6(1)(b)) and our legitimate interest in keeping Gamanac free of abuse (art. 6(1)(f)).

Your photo

Activity and reactions

What you did, as activities: each day you played a game, counted from your sessions of 5 minutes or more on that day; each change of a game’s status, rating or heart that you make yourself; and each list you make. A game added to your library, and anything an import from Steam or a file brings, makes none. Your game’s journal in the app shows your earlier statuses and ratings from them, and the ones others may see make what the people who follow you see in Activity in the app and what your friends see on their Now (section 3).
Reactions: one of six (GG, fire, heart, ha, wow, played it too) that you give to something a person you follow did, and the ones people give to what you did, with who and when. You can change your reaction or take it back.

Legal basis: the contract (art. 6(1)(b)).

Notifications in the app

Legal basis: the contract (art. 6(1)(b)). You can turn each kind off in the app, or all of them in your phone's settings, at any time.

Data exports

Reports

Decisions of our moderators, and appeals

The waiting list for the app

Counting visits (analytics)

Totals for our team

Errors and security

Error reports. When something breaks, the site or the app sends a report to Sentry: what went wrong and where in our code. We have turned off everything that could identify you: no IP address, cookies, headers, form contents or addresses with parameters.
How the app runs. The app also tells Sentry whether it closed because of an error, how long it took to start and to open screens, details of the phone such as its model, system version and free memory, and a random number Sentry gives the app on your phone, so we can count how many phones a problem reaches. It is not your account, and it goes when you delete the app. No screenshots, recordings of your screen or what you type.
Server logs. Our hosting keeps a short log of requests, which includes your IP address and the address you opened. When you sign in with Steam, that address contains your SteamID. When a phone without the app opens a sign-in code for the app, the address contains that code; by the time the log could be read, the code no longer works.
Sign-in records. Our database keeps a record of your sign-ins, sign-outs and the sign-in emails sent to you, with the IP address each came from, to stop abuse. For each browser or phone you are signed in on, it also keeps its IP address, what browser or app it is and when it was last used, so it stays signed in. Your export includes them.
Limits. We pass your IP address to our database provider so that it can limit sign-in attempts per person rather than for everyone at once.
How often you ask. Some requests cost us work at Steam, IGDB or OpenAI, draw an image or send an email, such as signing in with Steam, opening a game or a list page, sending a report without an account, drawing a card, importing from Steam or saving a bio. To stop one person or program from using them up for everyone, we count how often each account and each IP address asks, and for a short while refuse more. We keep the IP address only as a code made from it with a secret key, which does not give the address back, and for IPv6 only its first half, the part your provider gives your whole home or phone.

Legal basis: our legitimate interest in keeping Gamanac working and safe (art. 6(1)(f)).

The content filter

3. What other people can see

Your profile is private until you choose who sees it: everyone, your friends, or only you. Friends are people who follow each other in the app. While it is private, nobody but you sees it.

4. Who handles data for us

These companies process data on our behalf, under contracts that bind them to our instructions:

Supabase: our database, sign-in and file storage. Servers in Frankfurt, Germany.
Vercel: hosts the site and runs our server code in [Frankfurt, Germany: to set before launch]. Its network delivers pages from the server nearest to you.
Sentry: error reports, on servers in the EU. Functional Software, Inc. (Sentry) is based in the United States and may also handle the data there, under the EU-US Data Privacy Framework and, as a fallback, the European Commission’s standard contractual clauses.
PostHog: visit counts, only after your yes, on servers in the EU. PostHog Inc. is based in the United States and may also handle the data there, under the EU-US Data Privacy Framework and, as a fallback, the European Commission’s standard contractual clauses.
[Email provider]: sends sign-in links, the emails about a report and other emails, from servers in the EU.
OpenAI: the automatic check of bios, profile photos, list titles and descriptions, usernames and gamer IDs (section 2). Our contract is with OpenAI Ireland Ltd. Where it passes data to OpenAI companies outside the EU, such as in the United States, it does so under the European Commission’s standard contractual clauses or an adequacy decision.
Expo (650 Industries): sends notifications to your phones, with each phone's push token and the words of the notification. Based in the United States.

A notification reaches your phone through Apple's or Google's push service, which handles it under its own privacy policy.

We store Steam data, like all your data, in Germany.

5. How long we keep it

Your account and journal: until you delete your account.
Your photo: until you replace or remove it, or delete your account. Its file goes at once, or at the latest in the next day’s cleanup.
After you ask to delete your account: your profile and cards disappear at once, and we delete your photo's file, your Steam connection, playtime readings and session suggestions at once. We stop sending you notifications at once too. Everything else is deleted 30 days later, in the nightly cleanup that follows. What stays is a record that an account was deleted, without your details, reports you made, without your name, and reports and decisions about what you wrote and your appeals, with the words they were about but without your account, for as long as reports are kept.
Backups: our database provider keeps daily backups for [7 days]. Data deleted from the database therefore stays in backups for up to [7 days] longer, and we never restore it from there into a working account.
Session suggestions: 7 days, logged, skipped or not. A logged one stays in your journal as a session. The game we see you playing: while it runs, and until we measure it, usually within 15 minutes after it closes.
Sign-in codes for the app: until they are used, and at the latest a quarter of an hour after their 10 minutes run out. The invitation that brought you, and your own invitation link: until you delete your account. Follows: until either person stops following or deletes their account. Whom you stopped following: 30 days. Whom you block and mute: until you end it, or either of you deletes the account. What a new account did in the last day: 2 days. How often an account or an IP address asked lately: until the limit is full again, at most a day.
Activities: until you remove the game or the list, or delete your account. A day of play goes when its last session does. Reactions: until the person takes it back, the activity goes, or either of you deletes the account.
Push tokens of your phones: until you sign out of the app on that phone with the network on, until Apple or Google tell us it no longer takes notifications, or 180 days after the app last started there. Notifications we sent you: 30 days.
Sign-ups you never finish: deleted after 7 days.
A note that our filter passed a username or gamer ID: 10 minutes, deleted within half an hour. A name our team let you use after a look: until you delete your account.
Data exports: 7 days, or less if you ask for a new export.
Server logs at our hosting: [1 day]. Database and sign-in logs: [7 days]. Records of your sign-ins in our database stay while your account exists and go with it.
Error reports: 30 days.
Visit counts: [1 year].
Emails sent to you: our email provider keeps a delivery log for [30 days]. Our own note that an email should go to you, without its words or your address, stays 7 days after it went, and 30 days at most.
Reports, the decisions of our moderators and our filter, and appeals: [as long as we need them to show how we handled a report, at most 2 years after the decision], also after the account they were about is deleted. A decision that hides an account stays while it does. The private link of a report goes with the report.
The waiting list: until you leave it or until the app is open to everyone.

6. Cookies and what we store on your device

We use only what the site needs to work, plus visit counting if you agree:

Sign-in cookies (sb-…), set when you sign in, so you stay signed in. They cannot be read by scripts on the page.
Signed-in hint (gamanac-signed-in), which tells our pages that someone is signed in on this browser, so the header shows “Your account”. It holds no other information.
Steam sign-in check (__Host-gamanac-steam-attempt, __Host-gamanac-steam-connect, __Host-gamanac-steam-app), kept for 10 minutes while you sign in with Steam on the site or in the app, so nobody else can finish your sign-in.
Apple, Google and Discord sign-in check (sb-…-code-verifier), kept while you sign in with one of them, for the same reason.
Gamer IDs from Discord (__Host-gamanac-discord-ids), kept for an hour after you sign in with Discord, until you say whether to add them to your profile.
Where to go after signing in (__Host-gamanac-next), kept for an hour when a page asks you to sign in, so you land back on it.
A friend’s invitation (__Host-gamanac-invite), kept for 30 days after you open an invitation link, so signing up on the site keeps it with your new account. Signing out deletes this cookie and the one above.
The app banner (gamanac-app-banner), stored in your browser on an Android phone when you say “Not now” to opening a page in the app, so the banner stays away for 30 days. It is not sent to us.
In the app, your sign-in is kept in your phone’s secure storage (the Keychain on iPhone, the Keystore on Android), so you stay signed in. It never leaves the phone except to sign you in to us.
Your journal in the app: a copy of your library, sessions and playthroughs on the phone, with the changes that wait for the network, the session suggestions you have not answered, whether you see ratings as stars or 1 to 10 and whether calm mode is on, your goals for the year and whether you said “not this year” to setting one, how your Steam playtime grew between readings, for your stats, and the start of a stopwatch you set going, so the app works offline. It stays on the phone when you sign out, for when you sign in again, and goes when you remove the app. When the app helps you pick what to play next, the games you say “Not now” to are kept there too, for two weeks, and never sent to us.
A friend’s invitation in the app: when the app opens an invitation link before you sign up, or Google Play hands it the invitation on its first start on Android, the app keeps the invitation code on the phone until you sign up and sends it with your sign-up. From Google Play the app reads nothing but that code, and only once. An invitation waits on the phone for 30 days at most.
The email address you type in the app to get a sign-in code, kept on the phone for 15 minutes, as long as the email works, so the link in that email signs you in at once and a link for another address does not.
Notifications in the app: which account this phone's push token belongs to, so signing out can take it back, and whether you answered the app's question about notifications. Both stay on the phone.
Your shelf card in the app: the latest image of your card, kept in the app's cache on the phone so you can share it. The phone replaces it each time the card is drawn again and may clear it at any time.
Your analytics answer and text speed (gamanac:analytics-consent, gamanac:text-speed), stored in your browser, not sent to us.
Card introductions (gamanac:card-presentation:…): your browser and the app remember separately for each account whether the owl has introduced your shelf, month and year cards. These markers stay on your device until you clear its site or app data. They are not sent to us.
PostHog’s own cookie and storage (ph_…), only after you say yes to counting visits. Besides the random number, its storage in your browser keeps the address of the first page of your visit and the page or search that brought you there. We do not send them.

7. Your rights

You can:

see your data, and take a copy of it: “Export my journal” on your account page gives you all of it in JSON, and your library in CSV for spreadsheets;
correct it, mostly yourself on your account and profile pages;
delete your account and everything in it, from your account page;
ask us to limit what we do with your data, or object to what we do on the basis of our legitimate interest;
withdraw consent at any time, for visit counting, the waiting list, the daily Steam read and finding your sessions, without affecting what happened before.

Write to [Privacy email] for anything you cannot do yourself. We answer within one month.

You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority where you live.

8. Decisions made by machines

9. Age

10. Changes to this policy

When we change this policy, we change the date at the top. If a change affects what we do with your data, we tell you on the site or by email before it applies.