VideoGamesKeeperVideoGamesKeeper

Privacy Policy

Last updated: October 4, 2026

1. Introduction

This Privacy Policy explains how VideoGamesKeeper ("VGK", "the service", "we", "us") collects, uses, and protects your personal data when you use videogameskeeper.com and the VideoGamesKeeper apps for iPhone, iPad and Android.

VGK is operated as a personal project from Spain. We comply with the EU General Data Protection Regulation (GDPR) and Spain's Organic Law on Personal Data Protection (LOPDGDD).

2. Data Controller

The data controller is the individual operator of VideoGamesKeeper. You can contact us directly at hello@videogameskeeper.com or via the Contact page.

3. What data we collect

Account data:

  • Email address
  • Display name and username
  • Hashed password, if you set one (we never see or store your password in plain text)
  • If you sign in with Google or Apple: the name, email address and account identifier that Google or Apple share with us (Google may also share your profile photo)

Profile data:

  • Your avatar (chosen from our own collection), bio, preferences and privacy settings

Library data:

  • The games you add, their status (In Progress, Completed, On Hold, Backlog, Wishlist, Shelved) and your favorites
  • Any ratings, notes, playtime, dates, copies or progress you choose to record
  • Timestamps related to your activity

Social data:

  • Who you follow and who follows you, follow requests and the users you block
  • Your activity, your reactions and your notifications
  • The notes you choose to make public
  • The direct messages you send and receive
  • The reports you send about other users or messages

Steam data (only if you link your Steam account):

  • Your Steam ID, Steam name and avatar
  • Your Steam games, playtime and achievements

Push notifications (apps only, and only if you allow them):

  • The push token of each device you sign in on, with its platform and the app's language

Technical data:

  • IP address (processed by Cloudflare for security and delivery)
  • Browser type, operating system, and device information
  • Session identifiers (see our Cookie Policy). In the apps, the session is kept in your device's secure storage
  • On the website only: aggregated visit statistics from our own, cookieless Plausible Analytics server. It does not store your IP address or build a profile of you

We do not collect payment data, health data, biometric data, precise location, or any other sensitive categories.

4. Legal basis for processing

We process your data under the following GDPR legal bases:

  • Contract (Art. 6.1.b) - to provide the account and library service you sign up for
  • Legitimate interest (Art. 6.1.f) - to keep the service secure and functional
  • Consent (Art. 6.1.a) - for optional features such as push notifications or linking your Steam account, which you can withdraw at any time

5. Third parties

VGK relies on the following providers:

  • IGDB / Twitch Interactive, Inc. - We fetch public game metadata from IGDB. Your personal data is never sent to IGDB. All IGDB requests happen server-side.
  • Cloudflare, Inc. - Provides CDN, DDoS protection, and TLS termination. Cloudflare processes your IP address and request metadata.
  • MongoDB - Database used to store account and library data.
  • Resend, Inc. - Transactional email provider. We send your email address to Resend solely to deliver account-related emails (verification codes, sign-in OTPs, password resets). The reports you send also reach our moderation inbox through Resend.
  • Apple Inc. - Sign in with Apple, and the Apple Push Notification service, which delivers notifications to iPhone and iPad.
  • Google LLC - Sign in with Google, and Firebase Cloud Messaging, which delivers notifications to Android devices.
  • Valve Corporation (Steam) - Only if you link your Steam account: we use your Steam ID to read your games, playtime and achievements from the Steam Web API.

To deliver a notification, Apple or Google receive your device's push token and the text of that notification - for example, the start of a direct message.

We do not sell your data. We do not use third-party advertising or tracking.

6. International transfers

Some providers (Cloudflare, IGDB, Apple, Google, Valve) are based outside the European Economic Area. These transfers are covered by Standard Contractual Clauses or equivalent safeguards under GDPR.

7. How long we keep your data

  • Account and library data: for as long as your account is active
  • Account deletion: when you delete your account, your personal data is removed within 30 days, except for data we must retain for legal reasons. Our Delete your account page details what is erased and what is kept
  • Push tokens: until you sign out on that device, the push service reports the token as no longer valid, or you delete your account
  • Session data: automatically expires according to the TTLs described in our Cookie Policy

8. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw any consent at any time
  • Lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es)

To exercise any of these rights, contact us via the Contact page.

9. Security

We apply reasonable technical and organizational measures to protect your data, including:

  • HTTPS/TLS encryption in transit
  • Hashed passwords (never stored in plain text)
  • Session expiration and rotation
  • Limited access to production data

No online service can guarantee absolute security, but we do our best to protect what you entrust to us.

10. Children

VGK is not directed at children. If you are under 14 (the age of digital consent in Spain under LOPDGDD), please do not use the service without a parent or guardian's supervision.

11. Changes to this policy

We may update this Privacy Policy as the service evolves. Material changes will be communicated via the site. The "Last updated" date at the top always reflects the current version.

12. Contact

For any privacy-related questions or requests, reach out via the Contact page.