Last updated: 2 September 2026
Privacy policy
Controller
Ana Gissela Torres Cruz, Spain. Data protection contact: rgpd@gameslibrary.app.
What we process and why
Account data (email, password hash, name, username, language) to provide the service — legal basis: contract. Collection data (games, platforms, prices paid, notes, photos you upload) to provide the service — contract. Billing data (handled by Stripe; we store customer and subscription identifiers, plan and status) — contract and legal obligation. Usage of AI features (counts per month) to enforce plan limits — contract. Technical logs (IP address, user agent, timestamps) for security — legitimate interest. Analytics cookies only with your consent.
Processors
Supabase (database and authentication, EU region Paris), Cloudflare (hosting and network), Stripe (payments), Anthropic and Google (AI features: the photo or query you submit is sent to the model to be processed and is not used to train models under our agreements), IGDB/Twitch and RAWG (game metadata lookups), Google Tag Manager/Analytics (only with consent). Where data leaves the EEA, transfers rely on adequacy decisions or Standard Contractual Clauses.
Retention
Account and collection data: while your account exists and up to 30 days after deletion in backups. Billing records: as long as tax law requires (Spain: generally 4–6 years). Logs: up to 12 months.
Your rights
Access, rectification, erasure, restriction, portability and objection. You can export your collection (CSV) and delete your account from Settings. For any request write to rgpd@gameslibrary.app. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local authority.
Security
Data is encrypted in transit and at rest, access is restricted per user by row-level security, and passwords are never stored in clear text.
Children
The service is not directed at children under 16.