Your history stays under your control.

What we use

• Account details, profile settings, sessions, and security records needed to sign you in and protect the service.
• Journal entries, playthroughs, milestones, ratings, reviews, lists, comments, and the visibility you assign to them.
• Attributed observations from a provider only after you explicitly connect it.
• Short-lived technical logs and, with your consent, privacy-minimized beta analytics used to improve reliability and product flows.

Your choices

Profiles, libraries, activity, reviews, and lists default to private. You can widen visibility deliberately, disconnect a provider, opt out of beta analytics, export your data, or request account deletion from settings.

A sync can add attributed observations, but it cannot overwrite a status, rating, review, playtime entry, completion, or mastery milestone you authored manually.

How long data stays

• Authentication sessions last up to 30 days unless revoked sooner, and application logs are retained for 30 days.
• Portable exports are available for 7 days. Provider observations are removed when you disconnect that provider or delete your account.
• Account content is removed after the 7-day deletion cooling-off period; deleted data ages out of backups within 35 days.
• Consented aggregate product analytics are retained for up to 13 months, after which only non-identifying aggregates may remain.

Safety and requests

Provider credentials stay on the server. Never send passwords, session cookies, provider tokens, or private exports to support. Use the published support channel for access, correction, export, deletion, or privacy questions.