Privacy policy

Effective date: October 8, 2026

GameDeck (gamedeck.gg) is operated by Victor Iglesias. This privacy policy explains what data we collect, why we collect it, and how you can control it. We believe in being straightforward: no hidden tracking, no selling your data.

1. Information we collect

Information you provide

Account data: email address, username, display name, and optional bio when you sign up
Authentication data: provider name and provider account ID. For Google or Apple sign-in, the account record may also store provider-supplied access and refresh tokens, token expiration times, granted scope, and ID token.
Profile content: game ratings, reviews, lists, favorites, and library data you add to your profile
Social activity: users you follow, and interactions with other users' content
Imported data: your Steam ID and imported game name, Steam app ID, playtime, and last-played time, if you choose to connect your Steam account

Information collected automatically

Usage data: pages visited, features used, and general interaction patterns
Device data: browser type, operating system, and screen size
Log data: IP address, access times, and referring URLs

2. How we use your information

We use your information to:

Provide, maintain, and improve GameDeck
Create and manage your account
Display your profile, reviews, ratings, and lists to other users, unless you make your profile private in Settings. A private profile shows other people only your name and photo; anonymous totals, like a game's average rating, still count your ratings.
Send transactional emails (account verification, password resets, important updates)
Enforce our Terms of service and protect against abuse
Analyze aggregate usage trends to improve the platform

We do not sell your personal information to third parties. We do not use your data for advertising or ad targeting.

3. Third-party services

GameDeck relies on the following third-party services to operate:

Service	Purpose	Data shared
Vercel	Hosting	Request data, IP addresses
Neon	Database	All stored user data
Upstash Redis	Rate limiting & caching	IP addresses, hashed email addresses, request identifiers
Have I Been Pwned	Checking a new password against known breaches	The first 5 characters of a one-way hash of the new password, never the password
Resend	Transactional email	Email addresses
Apple	Authentication	OAuth tokens, email, profile info
Google OAuth	Authentication	OAuth tokens, email, profile info
Steam API	Game library import	Steam ID (user-initiated)
IGDB API	Game metadata and completion times	Search queries
HowLongToBeat	Archived play-time estimates	Stored durations only. Live title lookups are retired.
PostHog	Privacy-conscious product analytics	Explicit feature events, page URLs, device data, and a pseudonymous account identifier after sign-in
Sentry	Error monitoring and performance diagnostics	Error details, stack traces, request and device context; session replay is disabled

Scroll sideways for the whole table.

GameDeck no longer sends live title lookups to HowLongToBeat. Completion times now come from IGDB. Existing game records may still display archived estimates derived from HowLongToBeat when IGDB does not have a completion-time record. An archived estimate is replaced only when IGDB supplies completion-time data for that game.

If you import a Steam library, GameDeck stores this Steam data with Neon in the United States.

Data sources and credits lists what each catalog service supplies and what GameDeck calculates itself.

4. Cookies & local storage

Session cookies: to keep you logged in. Essential for the platform to function.
Local storage: for limited client-side preferences and launch-safe app behavior.
Product analytics: PostHog stores a pseudonymous identifier in local storage so we can understand whether core features help people return.
Service worker cache: only for public assets when offline mode is explicitly enabled.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. PostHog DOM autocapture and session recording are disabled: we only send explicit, reviewed product events and page views. Sentry session replay is also disabled.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days.

Product analytics are retained only as long as needed to understand feature adoption and improve GameDeck, then deleted or aggregated. Resetting local site data removes the analytics identifier stored in your browser.

6. Your rights

Regardless of where you live, you can:

Access and update your profile data from your account settings
Export your library, reviews, lists, favorites and Top 4 as CSV from settings, or contact us for a broader portable copy
Correct your data. Update your profile at any time
Delete your account at any time in Settings, or email hello@gamedeck.gg. We process requests within 30 days.

7. Data security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), secure database access, hashed credentials, and rate limiting.

8. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we'll notify you at least 14 days before the changes take effect.

9. Contact

Questions about this privacy policy? Contact us at hello@gamedeck.gg.