VideoGamesKeeperVideoGamesKeeper

Privacy Policy

Last updated: May 5, 2026

1. Introduction

This Privacy Policy explains how VideoGamesKeeper ("VGK", "the service", "we", "us") collects, uses, and protects your personal data when you use videogameskeeper.com.

VGK is operated as a personal project from Spain. We comply with the EU General Data Protection Regulation (GDPR) and Spain's Organic Law on Personal Data Protection (LOPDGDD).

2. Data Controller

The data controller is the individual operator of VideoGamesKeeper. You can contact us directly at hello@videogameskeeper.com or via the Contact page.

3. What data we collect

Account data:

  • Email address
  • Display name
  • Hashed password (we never see or store your password in plain text)

Library data:

  • The games you add and their status (Completed, In Progress, Backlog, Wishlist, Favorites)
  • Any ratings, notes, or playtime you choose to record
  • Timestamps related to your activity

Technical data:

  • IP address (processed by Cloudflare for security and delivery)
  • Browser type, operating system, and device information
  • Session identifiers (see our Cookie Policy)

We do not collect payment data, health data, biometric data, precise location, or any other sensitive categories.

4. Legal basis for processing

We process your data under the following GDPR legal bases:

  • Contract (Art. 6.1.b) — to provide the account and library service you sign up for
  • Legitimate interest (Art. 6.1.f) — to keep the service secure and functional
  • Consent (Art. 6.1.a) — for any optional processing, which you can withdraw at any time

5. Third parties

VGK relies on the following providers:

  • IGDB / Twitch Interactive, Inc. — We fetch public game metadata from IGDB. Your personal data is never sent to IGDB. All IGDB requests happen server-side.
  • Cloudflare, Inc. — Provides CDN, DDoS protection, and TLS termination. Cloudflare processes your IP address and request metadata.
  • MongoDB — Database used to store account and library data.
  • Resend, Inc. — Transactional email provider. We send your email address to Resend solely to deliver account-related emails (verification codes, sign-in OTPs, password resets).

We do not sell your data. We do not use third-party advertising or tracking.

6. International transfers

Some providers (Cloudflare, IGDB) are based outside the European Economic Area. These transfers are covered by Standard Contractual Clauses or equivalent safeguards under GDPR.

7. How long we keep your data

  • Account and library data: for as long as your account is active
  • Account deletion: when you delete your account, your personal data is removed within 30 days, except for data we must retain for legal reasons
  • Session data: automatically expires according to the TTLs described in our Cookie Policy

8. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw any consent at any time
  • Lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es)

To exercise any of these rights, contact us via the Contact page.

9. Security

We apply reasonable technical and organizational measures to protect your data, including:

  • HTTPS/TLS encryption in transit
  • Hashed passwords (never stored in plain text)
  • Session expiration and rotation
  • Limited access to production data

No online service can guarantee absolute security, but we do our best to protect what you entrust to us.

10. Children

VGK is not directed at children. If you are under 14 (the age of digital consent in Spain under LOPDGDD), please do not use the service without a parent or guardian's supervision.

11. Changes to this policy

We may update this Privacy Policy as the service evolves. Material changes will be communicated via the site. The "Last updated" date at the top always reflects the current version.

12. Contact

For any privacy-related questions or requests, reach out via the Contact page.