Privacy Policy

1. Data we process

We process essential technical data such as IP address, browser type, and security logs, as well as email, username, profile, game library, reviews, lists, comments, blocks, reports, and preferences when you use those features.

During registration, we collect your birth date to apply age protection based on Brazil's age-rating system. It is not shown on your profile and, as an integrity measure, cannot be changed after confirmation. The date entered by the user is self-declared and may be supplemented by risk-appropriate age-assurance methods.

Supabase provides authentication and database services; Resend delivers transactional email configured through Supabase; Cloudflare Turnstile prevents abuse; and ImgChest hosts avatars and banners you voluntarily upload. Google, Discord, or Twitch process data when you choose that sign-in provider. Catalog data comes from IGDB.

When you choose to load an embedded demo, the spawnd.gg player connects and may process your IP address, technical data, cookies, and play-session information under spawnd's own terms and privacy policy. The player remains blocked until that explicit action.

When you request a Backloggd import, we send only the request needed to read the public collection you identify. We process game links only, validate matches against IGDB, and retain the temporary preview only as long as needed for your confirmation; we do not collect Backloggd credentials, reviews, notes, or journal data.

We use necessary session cookies and functional storage as described in the Cookie Policy. We do not currently use analytics or marketing.

2. Purposes

• Provide, personalize, and improve the platform.
• Keep accounts and preferences synchronized.
• Prevent fraud, abuse, and security incidents.
• Restrict games that are incompatible with the registered age group.
• Moderate content and protect the community.
• Comply with legal obligations and respond to valid requests.

3. Legal bases and sharing

We process data under the applicable legal bases of Brazil's LGPD, including contract performance, consent, assessed legitimate interests, and compliance with legal obligations. We share only what is necessary with infrastructure and security providers and services requested by you. We do not sell personal data.

4. Retention and security

We keep data for as long as necessary for the stated purposes, legal obligations, and the defense of rights. We apply access controls, minimization, encrypted communications, and monitoring, but no system is completely immune to risk.

5. Your rights

You may request confirmation, access, correction, portability where applicable, anonymization, deletion, information about sharing, or withdrawal of consent by emailing [email protected]. We may request information to verify your identity.

6. Children and teenagers

Processing must always consider the best interests of children and teenagers. Registration requires a minimum age of 12; we do not currently offer a child-account flow with parental consent. We apply data minimization, accessible language, and protective defaults. See our Child Safety page.

7. Contact

For privacy questions or to exercise your rights, email [email protected].