Welcome to GameLog (“we”, “our”, “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information about you when you use our service at gamelog.app (the “Service”).

Please read this policy carefully. By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.

We collect the following categories of information:

• Account data: Your email address and password (stored as a secure hash) when you register an account.
• Usage data: Information about the games you log, their statuses, ratings, and notes that you voluntarily provide within the Service.
• Technical data: IP address, browser type, and operating system may be captured automatically in server logs for security and diagnostic purposes.

We do not collect payment information directly. Any future billing will be handled by a third-party payment processor subject to their own privacy policies.

We use your personal data for the following purposes:

• To provide, maintain, and improve the Service.
• To authenticate your account and keep it secure.
• To send transactional emails (e.g., password reset links).
• To respond to your support requests and communications.
• To comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your data is stored in a SQLite database. If you are using the hosted version of GameLog, your data is stored on our servers with industry-standard security measures. If you self-host GameLog, you are responsible for the security of your own infrastructure.

We use secure, hashed storage for all passwords and issue JSON Web Tokens (JWTs) for session management. JWT secrets are auto-generated and are unique to each instance.

Despite our efforts, no data transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal data for as long as your account is active. If you delete your account, we will permanently delete all associated data within 30 days, except where we are legally required to retain it for longer.

GameLog uses the RAWG Video Games Database API to power its game search functionality. When you search for a game, your query may be sent to RAWG's servers. We encourage you to review RAWG's Privacy Policy.

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the data we hold about you.
• Right to rectification: Request that we correct inaccurate data.
• Right to erasure: Request that we delete your data (exercisable by deleting your account).
• Right to data portability: Request your data in a portable format (e.g., CSV export if available).

To exercise any of these rights, please contact us at the email below.

GameLog uses essential cookies and session tokens strictly to authenticate your session. We do not use tracking, analytics, or advertising cookies.

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated effective date. Your continued use of the Service after the change constitutes your acceptance of the new policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us via GitHub Issues at github.com/horlesq/gamelog/issues.