Privacy Policy

Last updated: March 17, 2026

Summary We collect the minimum personal data needed to run GameFold — your email, username, date of birth (for age-gating), and anything you create in the app. Analytics and crash reporting are off by default and only collected if you opt in. You can delete your account and all data at any time.

1. Data Controller

GameFold ("we", "us", "our") is responsible for the processing of your personal data.

Contact: privacy@gamefold.app

For any privacy-related inquiries, data access requests, or complaints, you may contact us at the email above.

2. Information We Collect

We collect the following categories of personal data:

Account data (provided by you)

Email address — for authentication and account recovery
Username — public identifier within the app
Date of birth — for age verification (COPPA and minor content filtering)
Profile avatar — optional, uploaded by you

User-generated content

Game reviews, ratings, and lists you create
Follow relationships and social interactions

Automatically collected data

Device type and operating system
App version
Anonymous usage analytics (screen views, interactions) — only if you consent
Error and crash logs — only if you consent

We do not collect location data, contacts, photos (beyond your avatar upload), or financial information.

3. Legal Basis for Processing

Under the GDPR and the Spanish LOPDGDD, we process your data on the following legal bases:

Contract performance (Art. 6.1.b GDPR): Account data and user-generated content are necessary to provide the service you signed up for.
Consent (Art. 6.1.a GDPR): Analytics (PostHog) and error tracking (Sentry) are only active if you opt in. You may withdraw consent at any time in Settings without affecting the core service.
Legitimate interest (Art. 6.1.f GDPR): Basic security measures, abuse prevention, and service stability.

4. How We Use Your Data

We use your data to:

Provide and maintain the GameFold service (account, reviews, lists, social features)
Authenticate you and protect your account
Filter mature content for users under 18
Improve app performance and fix errors (only with your consent)
Analyze usage patterns to improve the experience (only with your consent)
Send push notifications (only if you grant permission)
Detect and prevent abuse or misuse of the service

5. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Supabase (database and authentication) — your account data and content are stored on Supabase infrastructure. Servers located in the EU or US depending on project configuration.
PostHog (product analytics) — collects anonymized usage data. Only active if you consent. Privacy: posthog.com/privacy
Sentry (error tracking) — collects crash and error reports. Only active if you consent. Privacy: sentry.io/privacy
RAWG API (game data) — we query game information on your behalf; no personal data is shared with RAWG.
Google Sign-In (optional authentication) — if you choose to sign in with Google, Google's privacy policy applies to the authentication flow.

We do not sell, rent, or share your personal data with advertisers or data brokers.

6. International Data Transfers

Some of our service providers (Supabase, PostHog, Sentry) may process data outside the European Economic Area (EEA). When this occurs, we ensure adequate safeguards are in place, such as:

EU Standard Contractual Clauses (SCCs)
The service provider's adherence to recognized data protection frameworks

By using GameFold, you acknowledge that some data may be processed outside the EEA under these safeguards.

7. Data Retention

Account data: Retained as long as your account is active. Deleted when you delete your account.
User-generated content (reviews, lists): Retained as long as your account is active. Permanently deleted upon account deletion via cascade.
Analytics data: Anonymized and aggregated. Individual session data is not retained beyond 90 days.
Error logs: Retained for up to 30 days in Sentry, then automatically purged.
Push notification tokens: Cleared upon sign-out or account deletion.

When you delete your account, all associated personal data is permanently and irreversibly removed from our systems. See our account deletion page for details.

8. Your Rights

Under the GDPR and Spanish LOPDGDD, you have the following rights:

Access — View your data directly in the app (profile, reviews, lists, settings).
Rectification — Edit your profile, reviews, and lists at any time.
Erasure ("Right to be forgotten") — Delete your account permanently. All data is cascade-deleted.
Data portability — Request an export of your data by contacting us.
Withdraw consent — Disable analytics and error tracking at any time in Settings → Privacy & Safety.
Restriction of processing — Contact us to request restriction.
Object — Contact us to object to processing based on legitimate interest.
Lodge a complaint — You may file a complaint with the Agencia Española de Protección de Datos (AEPD) or with your local supervisory authority.

To exercise any of these rights, use the in-app features or contact us at privacy@gamefold.app. We will respond within 30 days.

9. Children's Privacy

GameFold is not intended for children under 13. We enforce a minimum age of 13 during registration (COPPA compliance).

Users between 13 and 17 are automatically opted out of mature/NSFW content.

If we become aware that we have collected personal data from a child under 13, we will promptly delete that data. If you believe a child under 13 is using GameFold, please contact us.

10. Security

We take reasonable technical and organizational measures to protect your personal data, including:

Encrypted data transmission (HTTPS/TLS)
Row-Level Security (RLS) on all database tables
Secure authentication via Supabase Auth
Session token management with automatic refresh

No system is 100% secure. If you discover a security vulnerability, please contact us responsibly at privacy@gamefold.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

Update the "Last updated" date at the top
Notify you in the app (via the legal acceptance modal if major changes require re-consent)

Continued use of GameFold after changes constitutes acceptance of the updated policy.

12. Contact

For any questions, data requests, or concerns about your privacy:

Email: privacy@gamefold.app

You may also exercise your rights by using the account management features in Settings.

← Back to home