Privacy Policy

What we collect

Account info: your email and a username/display name. We use email for sign-in (magic links / password reset) and, if you opt in, notifications.

Content you create: reviews, lists, posts, comments, play logs, and your follows — this is the core of the product and is visible per your privacy settings.

Steam data (optional):if you connect Steam, we store your Steam ID and read your public profile, owned games, recent playtime, and presence to power your library and the live status features. If you choose “Use Steam avatar,” we copy that picture into our storage so it can render reliably. You can disconnect Steam at any time in Settings.

Push notification tokens (iOS):if you grant push permission on iOS, we store the device's anonymous APNs token so we can send you notifications about follows, replies, and other activity directed at you. The token is removed when you sign out, disable notifications, or delete the app.

Safety signals: if you block another user or report content, we store the relationship and the report so the product can hide blocked content from your feed and moderators can review flagged content.

Basic technical data: standard server logs needed to operate and secure the service.

Usage analytics:we record a short list of actions — opening Lobbies, signing up, following a game, adding to your library, posting, reviewing, publishing a list, opening a share sheet, running a search — so we can tell which parts of the product are worth building on. Each record holds the action, whether it came from the web or the app, the app version, and a small amount of context such as a game's slug or a library status. It never holds anything you typed, including what you searched for. If you're signed in it's tied to your account; if you're not, it carries a random id stored on your own device so that one person browsing ten pages isn't counted as ten people. We don't store IP addresses, user agents or device fingerprints with it. This runs on our own database rather than through a third-party analytics service, and the records are deleted after 180 days. Our host, Vercel, also counts pageviews on the website without cookies or cross-site tracking.

What we don't do

We don't sell your personal data. We don't show third-party advertising. We don't collect more than we need to run Lobbies.

Who we share with

We use a small set of infrastructure providers to run the service — for example Supabase (database, auth, storage), Vercel (hosting), an email provider for transactional mail, and Apple Push Notification service for iOS pushes. They process data only to provide their service to us. Game data comes from IGDB and presence from Steam as described above.

Your controls

You can edit your profile, set it private, disconnect Steam, and change your email or password from Settings. You can permanently delete your account at any time from Settings → Danger zone — this erases your profile and all associated content.

Cookies

We use only the cookies required for authentication and to keep you signed in. We don't use advertising or cross-site tracking cookies.

Data retention

We keep your data while your account is active. When you delete your account, your profile and content are removed. Some minimal logs may persist briefly for security and operational reasons. Usage analytics are deleted after 180 days, and deleting your account detaches your identity from any that remain within that window.

Children

Lobbies isn't intended for anyone under 13 (or the minimum age of digital consent where you live). We don't knowingly collect data from children.

Contact

Questions or data requests? Email privacy@lobbies.app.