1. Scope And Key Terms

This policy applies to TrackGames accounts, profiles, game tracking features, community features, feedback tools, support requests, analytics, logs, cookies, and related website features.

"Personal data" means information that identifies you or can reasonably be linked to you, such as your email address, IP address, account profile, comments, or gameplay logs tied to your account. Some information, such as aggregated statistics about how many people use a feature, may not identify you. We treat account-linked activity as personal data when it can be connected back to your account.

2. Data We Collect

We collect information in a few ways: when you provide it, when you use the service and when cookies or similar tools record it.

• Account data: email address, username, sign-in details, connected authentication providers, account identifiers and security-related records.
• Profile data: username, bio, avatar or profile images, profile styling choices, associated dates you add to your profile, social links and preference settings.
• Game and library data: games you add, statuses, lists, logs, game logs, manually entered gameplay times, play sessions, dates attached to logs, notes, ratings, reviews, tags and related tracking history.
• Community and interaction data: comments, likes, follows, reports, feedback, moderation messages, notifications and other interactions with users or content.
• Technical data: IP address, device and browser information, cookie identifiers, session information, pages viewed, features used, timestamps, referral information, error reports and usage logs.
• Analytics data: information about how people use TrackGames, such as page views, navigation paths, feature usage, approximate location derived from IP address and performance events.
• Support and contact data: messages you send us, feedback you provide, reports you submit and information needed to respond.

We do not intentionally collect special-category data such as health information, political opinions, religious beliefs, or biometric data. Please do not put that kind of information in your profile, comments, reports, feedback, or game notes.

3. How We Use Your Data

We use your data for the following purposes:

• To create, maintain, secure and authenticate your account.
• To display your profile, game library, logs, lists, reviews, comments, likes and other features you choose to use.
• To save preferences such as display settings, privacy settings, content settings and interface choices.
• To provide community features, notifications, reporting tools, moderation and abuse prevention.
• To respond to feedback, support requests, bug reports and legal or safety concerns.
• To understand how TrackGames is used, improve performance, fix errors, develop features and measure service health.
• To detect, investigate and prevent spam, scraping, security incidents, fraud, policy violations and unlawful activity.
• To comply with legal obligations, enforce our Terms of Service and protect our users, service and rights.

Some content is visible to other users or the public depending on the feature and your settings. For example, public profiles, public game logs, comments, likes and other public interactions may be shown to other people. Private account details, such as your email address, are not shown publicly by default.

4. Legal Basis For Processing

If the GDPR applies to you, we need a legal basis to process your personal data. We rely on the following bases:

• Contract: we process account data, profile settings, library data, logs, gameplay times, comments, likes and other feature data so we can provide the TrackGames service you request.
• Legitimate interests: we process technical data, logs, analytics, reports, feedback, moderation records and security records to operate, improve, protect, and troubleshoot TrackGames. We balance these interests against your privacy rights.
• Consent: we rely on consent where required, such as for optional non-essential cookies, optional analytics (including Google Analytics), or advertising and personalization where applicable. You can withdraw consent at any time and withdrawal does not affect processing that happened before withdrawal.
• Legal obligation: we process and retain data when needed to comply with law, respond to valid legal requests, preserve required records, or handle rights requests.
• Vital or public interests: these will rarely apply, but we may process limited information if needed to protect someone's safety or comply with an urgent lawful requirement.

5. Cookies, Analytics and Tracking

We use cookies, local storage and similar technologies to keep TrackGames working and to understand how the service is used. Cookies are small files stored on your device. Local storage is browser storage that can remember settings on the same device.

• Essential cookies keep you signed in, maintain sessions, support authentication and protect against abuse.
• Preference storage remembers choices such as theme, display settings, cookie choices, or other interface preferences.
• Analytics help us understand page views, feature usage, performance, errors and general service health. This includes our own privacy-friendly, cookieless analytics and, with your consent, Google Analytics.
• Advertising: we do not currently show ads, but we may use Google advertising and measurement products (such as Google Ads) in the future. Any advertising or personalization cookies are used only with your consent.
• Security logs may record IP addresses, device data, timestamps and request details to detect abuse or suspicious activity.

When you first visit, we ask for your cookie choices through a consent banner and you can change or withdraw them at any time from the "Cookie preferences" link in the footer or the Data tab in your account settings. You can also control cookies through your browser settings. Blocking essential cookies may prevent sign-in or core features from working.

Google Analytics runs under Google Consent Mode v2: until you opt in, it loads without advertising or analytics cookies and receives only aggregated, cookieless signals and granting consent enables full analytics measurement.

We do not sell your personal data. We do not use your personal data for third-party behavioral advertising without your consent and we only enable advertising or personalization cookies if you opt in.

6. Third-Party Sharing

We share data only when needed to run TrackGames, provide features, comply with law, or protect the service. Depending on how you use TrackGames, recipients may include:

• Hosting, database, storage, logging, analytics, security and infrastructure providers.
• Analytics and advertising providers, including Google (Google Analytics and Google Ads if enabled in the future), which may process data in the United States.
• Email, authentication, support and communication providers.
• Game data or media providers whose content is displayed in the service, such as IGDB or embedded video providers.
• Moderation or abuse-prevention tools, where needed to review reports and protect users.
• Law enforcement, courts, regulators, or other parties when legally required or necessary to protect rights, safety, or security.
• A successor organization if TrackGames is involved in a merger, acquisition, reorganization, or transfer of assets.

When third-party content loads, the provider may receive technical request information such as your IP address, browser information and the page where the content appears. Their own privacy policies apply to their processing.

Some providers may process data outside your country, including outside the European Economic Area. When GDPR transfer rules apply, we use appropriate safeguards where required, such as standard contractual clauses, adequacy decisions, or another lawful transfer mechanism.

7. Data Retention

We keep personal data only as long as reasonably needed for the purposes described in this policy, unless a longer period is required or allowed by law. Our retention periods depend on the type of data, your choices, legal requirements and operational needs.

• Account, profile, settings, game library, logs, comments, likes and similar account data are usually kept while your account exists.
• Public content may remain visible until you delete it, change its visibility, or delete your account, subject to moderation and backups.
• Security logs, access logs, analytics records and error logs are kept for a limited period needed for security, debugging and service health.
• Reports, feedback, support messages and moderation records may be kept longer where needed to resolve disputes or prevent repeated abuse.
• Backups may keep deleted data for a limited time until they rotate out in the ordinary backup cycle.
• Records needed for legal compliance, rights requests, accounting, disputes, or enforcement may be kept as long as necessary for that purpose.

When you delete your account or request deletion, we will delete or anonymize personal data that is no longer needed. We may keep limited information where the law allows or requires it, such as security records, moderation history, records of your request, or data needed to defend legal claims. Deletion from active systems is usually completed within a reasonable operational period, while backup copies are removed through normal backup rotation.

8. Our Ability To Manage Data

We may access, review, process, restrict, hide, modify, move, anonymize, or delete data when reasonably necessary to operate TrackGames, maintain security, enforce our Terms of Service, correct technical issues, respond to your requests, comply with law, prevent abuse, or protect users and the service.

This does not mean we can ignore your rights. We will use this discretion within the limits of applicable law, including GDPR. We will not use it to remove rights you have under data protection law and we will assess deletion, correction, objection and restriction requests fairly.

9. Data Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration and disclosure. These measures include access controls, authentication safeguards, encryption in transit where supported, secure password handling, logging, backups and limiting access to people and providers who need it.

No online service is perfectly secure. You can help protect your account by using a strong password, keeping sign-in credentials private and telling us if you think your account or data has been compromised.

10. Your Choices And GDPR Rights

You can use account settings and feature controls to update profile details, change preferences, adjust visibility and delete content where available.

If the GDPR applies to you, you also have the following rights under Articles 15 to 21:

• Access: ask for a copy of your personal data and information about how we process it.
• Rectification: ask us to correct inaccurate or incomplete personal data.
• Erasure: ask us to delete personal data, subject to exceptions such as legal obligations, security needs, or legal claims.
• Restriction: ask us to limit how we process certain personal data in specific circumstances.
• Portability: ask for certain data you provided to us in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests, including certain analytics or security processing where applicable.
• Withdraw consent: withdraw consent for processing based on consent, without affecting processing that happened before withdrawal.

To exercise these rights, email us at trackgames@yamikhal.com. We may need to verify your identity before responding. We will respond within the timeframe required by law. If we cannot fully honor a request, we will explain why, unless the law prevents us from doing so.

You also have the right to lodge a complaint with a data protection supervisory authority, especially in the EU or EEA country where you live, work, or believe an issue occurred. We would appreciate the chance to address your concern first, but you do not have to contact us before contacting a regulator.

11. Children

TrackGames is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has provided personal data to us, contact us and we will take appropriate steps. If local law requires a higher minimum age for consent to online services, you must meet that age or have valid parental consent.

12. Automated Decisions

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you. We may use automated signals, rules, or logs to detect spam, abuse, security risks, or technical issues, but important account or moderation decisions may be reviewed by a person where appropriate.

13. Changes To This Policy

We may update this Privacy Policy as TrackGames changes, as our data practices change, or as legal requirements evolve. When we update it, we will change the "Last updated" date above. If a change is material, we will take reasonable steps to notify you, such as by posting a notice on the website or sending an account notice when appropriate.

Your continued use of TrackGames after an updated policy takes effect means the updated policy applies to later use of the service. If a change requires your consent, we will ask for it.

14. Contact Information

For privacy questions, rights requests, complaints, or security concerns, contact:

• Controller: TrackGames
• Email: trackgames@yamikhal.com

You can also reach us through the contact page.