1. Overview
GameDEX (“we”, “our”) operates a personal game library service. This policy describes what data we collect, why, and how you can control it.
2. Data we collect
- Account data: Email address and password (stored hashed).
- Library data: Games you add, platforms (e.g. Steam, GameDEX), and status (playing, wishlisted, etc.).
- Steam import: If you use Steam import, you provide your Steam profile URL or ID. We fetch your owned games list from Steam’s public API. We do not store your Steam password.
- Technical data: We use an HttpOnly cookie to keep you logged in (not accessible to JavaScript, reducing XSS risk).
- Cookie consent: If you accept our cookie banner, we store your choice (localStorage) and may persist theme and language preferences.
3. Purpose and legal basis
We use your data to provide the service: account management, library storage, and Steam import. Legal basis: contract performance and your consent.
4. Third-party services
- RAWG: Game metadata (names, covers, release dates) comes from RAWG. We do not share your personal data with RAWG.
- Steam: When you import from Steam, we read your public game list via Steam’s API. We do not store Steam credentials.
5. Your rights
You can access, correct, or delete your data at any time:
- Export: Download your data (Account → Settings → Export my data).
- Delete account: Permanently remove all your data (Account → Settings → Delete account).
Under GDPR you also have the right to object, restrict processing, and data portability. Contact us to exercise these rights.
6. Data retention
We keep your data until you delete your account. Game metadata may be cached for performance; caches are cleared periodically.
7. Security
Passwords are hashed (bcrypt). We use HTTPS and secure token handling. We do not sell or share your data with advertisers.
8. Contact
For privacy inquiries, contact us via the email associated with your account or through the app’s support channels.