Privacy Policy

Every visit records the page you're on, the language you're reading, a random id created when you open the site and destroyed when you close the tab, the country and city the request travelled through, and a coarse description of your device: phone or computer, operating system, browser, window width. None of it is a cookie, and none of it can be linked to you or to a previous visit.

Your IP address is never stored and never written to any log. Location comes from the network that delivered the page and is kept as a place name only.

One thing: a randomly generated id kept in your browser for a year, so a returning visit can be counted as returning rather than new. Nothing about you is attached to it. If you decline, everything above still works and you appear in every report except that one.

With your permission the site also loads PostHog, an analytics service hosted in the European Union, which receives allowlisted page and product interactions. If you sign in, it uses your internal Supabase user id to connect the anonymous pre-signup journey to later product use. It never receives your email, name, access token, private notes, notification content, or search text.

An account stores your email address, tracked games, lists, and preferences. We use email to confirm your address, reset your password, and send the release alerts you choose.

When you create an account, core GameDropRadar guidance and product updates are enabled so you can learn the account features. You can turn either category off separately in Settings or through the unsubscribe link in an email. Game-release alert emails remain off until you enable them yourself.

We record send, delivery, click, bounce, and complaint status so we can suppress unwanted mail and protect delivery quality. An open alone never decides whether another email is sent, and we do not use a personally identified open-tracking pixel.

The apps request public game information from the same Supabase database. They keep a small recent public catalogue cache, your language choice, and your signed-in session on your device. Private library rows remain on the server and are protected by your account.

On-device release reminders are optional and remain scheduled entirely by your device. If you separately enable Push alerts while signed in, GameDropRadar links an Expo push token and random installation id to your account together with the platform, app version, build number, and language needed to deliver and troubleshoot those alerts. The alert payload is limited to public game copy, a validated GameDropRadar destination, and a notification id; it excludes email, private notes, library status, report evidence, and social actor identity. Optional app analytics and crash diagnostics are off by default and have separate controls. When app analytics is enabled, GameDropRadar and PostHog EU receive only allowlisted screen and product actions, a random app-session id, platform, app version, language, and your internal Supabase user id after sign-in. They never receive email, name, access tokens, notification content, search text, advertising ids, contacts, or precise location. Disabling analytics stops both analytics streams and resets PostHog identity. Account-creation platform and the optional discovery answer are operational registration records kept separately even if analytics is off. There is no session replay, screen recording, advertising profile, fingerprinting, or cross-app tracking.

Trailers are optional YouTube embeds. The app does not connect to YouTube until you choose Play here with YouTube. YouTube then receives the request information needed to serve the video, may process the playback interaction, and may show non-personalized ads under Google's policies. The player uses YouTube's privacy-enhanced mode in an isolated session with shared and third-party cookies disabled. GameDropRadar does not receive your YouTube identity or playback history.

We store the Google-account email you submit, your language, the consent wording version, and the dates needed to manage your Android test invitation. The address is used only to authorize and contact you about that test; it is not added to marketing. It stays in the private tester queue until the test closes or you ask us to remove it.

Signing in sets a session cookie, which is what lets the site know you're signed in. Beyond that there are exactly two, both optional, and neither is set unless you agree:

• gdr_consent

  Remembers your answer to the consent question, so you aren't asked again.

• gdr_vid

  The returning-visitor id described above.

Supabase stores the database, account identities, and private feedback you submit. Vercel serves the site and the server-side connected-account exchange. Steam verifies a Steam connection and, only with separate permission and public provider settings, may return friends or owned games. Discord verifies identity with the identify scope only and does not provide GameDropRadar a global friends list. Microsoft, PlayStation, and Nintendo do not receive connection requests while Xbox and PlayStation remain public-username-only and Nintendo remains Friend-Code-only. Brevo delivers email. PostHog EU receives allowlisted product interactions only if you enable app analytics; Sentry receives scrubbed crash and performance diagnostics only if you enable diagnostics. Neither receives session replay, screen recordings, email, private notes, connected-account secrets, reports, or notification content. Expo routes enabled app push alerts to Apple or Google. YouTube serves an embedded trailer only after you choose playback. Game information comes from IGDB. Each processor sees only what it needs for the feature you requested.

When the GameDropRadar team connects an official social account, we store its authorization token encrypted together with the account identifier and the boards or pages selected by our team. For Pinterest, we read only GameDropRadar’s own boards and Pins to select the publishing board, prevent duplicates, confirm delivery, and retrieve basic performance metrics, and we create only Pins approved by our team. We do not read other Pinterest users’ data, sell this data, or share it with third parties. A GameDropRadar administrator can disconnect the account at any time; we then delete the stored access tokens and stop accessing the account.

You can view, correct, export or delete your account data at any time from Settings, or by writing to the address below. You can change or withdraw analytics consent whenever you like, and declining later also deletes the id it created. These rights apply under the GDPR and under Saudi Arabia's Personal Data Protection Law.

Analytics rows are deleted after 180 days, leaving only daily totals that identify nobody. Automated crawler traffic is deleted after 7 days. Account data is kept until you delete the account. Connected-account authorization attempts expire after 10 minutes. Steam friend-match observations expire within 30 days; disconnecting, withdrawing discovery permission, or deleting the account removes connection secrets, matches, and imported presence while preserving manual game tracking. Provider access tokens are not exposed to clients; Discord's short-lived exchange token is discarded after identity verification. An opted-in push registration is refreshed when that installation opens while opted in; an active registration expires after 30 days without refresh, and its disabled record is removed within another 30 days. Completed push delivery and receipt diagnostics are removed within 30 days. Disabling Push alerts, signing out, switching accounts, or deleting the account retires that installation. If a profile or public player note is reported, a moderator-only snapshot keeps an internal random account reference used only to correlate safety cases, the public handle and name shown at filing and, for a note, its text and game identity. It excludes email, avatar, bio, private library data, and IP, and does not provide access to the deleted account. The report and snapshot are deleted no later than 365 days after filing or 90 days after review, whichever comes first. The reporter's identity is not copied into the snapshot.

Questions about anything on this page: hello@gamedropradar.com

hello@gamedropradar.com