Privacy Policy

Information We Collect

Most of this is optional. An account needs an email address; almost everything below it is something you choose to add.

• Account information: Your email address, plus a username and avatar URL if you set them.
• Chat history: Your conversations with the advisor, including the recommendations it made, so you can reopen a past session. Stored when you save a session or turn on autosave.
• Wishlist data: Games you save, with any categories, priorities, notes, target prices and purchase details you add to them.
• Gaming preferences: The genres, session length, difficulty and other answers you give on your Gaming Profile, plus games you list as favourites or ask us to avoid.
• PC specifications: Optional hardware details you enter, auto-detect, or upload as a DxDiag file, used to judge whether a game will run on your machine. A DxDiag file is read for its hardware fields and is not retained.
• Connected game libraries: If you connect Steam or itch.io, we store the account identifier, the public display name and avatar, and the list of games on that account — for Steam, including playtime. This is what lets the advisor stop recommending games you already own. Disconnecting deletes the stored library.
• Dismissed recommendations: Games you dismiss from a set of picks, so they are not suggested to you again.
• Membership state: If you support the project, we store your plan, its status and the date access runs until, along with the email address and transaction id Ko-fi sends us so the payment can be matched to your account. We never see or store your card details.
• Diagnostic and usage data: Error reports, page-loading measurements, and counts of which pages are visited and which features are used — how many people started a chat, saved a game, or opened the support page. These counts are anonymous and aggregated: they carry no identifier for you, no cookie, and nothing you typed.

Payments and Card Details

We never see, receive or store your card details. Memberships are paid through Ko-fi, and card details are handled entirely by Ko-fi and its own payment processors. They do not reach our servers at any point.

What we receive from Ko-fi is the email address you paid with, the amount, and a transaction id — only what is needed to match the payment to your account and switch your membership on.

How We Use Your Information

• To answer what you ask the advisor, and to make its answers fit you
• To save your preferences, wishlist and sessions across devices
• To check games against the PC specifications you provided
• To send price alerts for games you are tracking, if you set one
• To process and manage a subscription, if you buy one
• To diagnose errors and keep the service working

We do not sell your personal data, and we do not use your chat history to train AI models.

How Recommendations Are Personalised

Alongside the preferences you fill in, GameAtlas infers a taste profile from what you do — which games you save to your wishlist, and which you dismiss. It stays on your account, is used only to weight recommendations, and is always outranked by what you actually asked for in the current conversation. Clearing your wishlist and dismissals clears it.

Wishlists You Share

Sharing a wishlist creates a link that works without an account. That is the feature — a link you can send to someone who has never heard of GameAtlas — but it means anyone holding the link can see that list, including anyone you forward it to. The page shows the games and the title you gave it; it does not show your email address. You can set an expiry when you create the link, you can see how many times it has been opened, and you can delete it from your wishlist at any time, which breaks the link immediately.

We ask search engines not to index these pages, so a link that ends up somewhere public does not also become a search result. That is a request rather than a guarantee, and it is the reason to treat a share link as unlisted rather than private. Deleting your account deletes the share links you made along with everything else.

Data Storage & Security

Your data is stored with Supabase, our database and authentication provider, and is protected by row-level security so one account cannot read another's. Passwords are hashed and never stored in plain text, and all traffic is encrypted over HTTPS. The application is hosted on Vercel.

We keep what you create for as long as your account exists, because it is what the account is for — a wishlist you saved two years ago should still be there. We do not expire your sessions, wishlist or profile on a schedule. The exceptions are narrow: a share link can be given an expiry when you create it, and diagnostic logs from the hosting platform age out on that platform's own retention, which is weeks rather than years. Deleting your account removes everything immediately rather than after a grace period.

Third-Party Services

We use the services below. Those marked “receives your data” are sent something about you or your request; the rest we only read from.

• Supabase: Database, authentication and file storage. Receives your data.
• Vercel: Hosting, and page performance measurement. Receives your data.
• OpenRouter, routing to Google Gemini: Generates the advisor's replies. Your message and the profile context described above are sent in order to produce an answer. Receives your data.
• Ko-fi: Payment processing for memberships. Payment details are handled entirely by Ko-fi and its own processors and never reach our servers; we receive only the email address, amount and transaction id needed to apply your membership. Receives your data.
• Vercel: Hosting, and the anonymous page-view and performance measurements described above. Cookieless, with no identifier tying a visit to you.
• Resend: Sends price-alert and digest emails, if you enable them. Receives your data.
• IGDB, a Twitch service: The game catalogue the advisor searches.
• RAWG: Playtime, Metacritic scores, screenshots and artwork.
• CheapShark: Prices, deals and store links.
• Steam and itch.io: Sign-in and library access, only if you connect an account. Steam is also read for published system requirements.

Your Rights

You can access, correct or delete your personal data at any time. Settings has a Delete Account control that removes your account and everything attached to it — sessions, wishlist, profile, specs and connected libraries — permanently, with no recovery window. You can disconnect Steam or itch.io on their own from the Gaming Profile page, and cancel a subscription from Billing. If you have never signed in, your data only exists on your device and clearing your browser data removes it. For anything you cannot do from within the app, contact us below.

You can take your data with you. Settings has an Export control that downloads everything the account holds as a single JSON file — your chats and their messages, wishlist and categories, share links, gaming profile, PC specs, price alerts, dismissed games and any linked store account.

You can stop the emails without closing your account. Price alerts and the weekly digest are separate switches in Settings, and every email we send carries a one-click link that turns its own kind off without needing you to sign in — because the person who wants a digest stopped is often the one who no longer has a password to hand. Turning off price-alert emails leaves your target prices alone; the alerts still appear in the app, we just stop mailing them. Mail you cannot opt out of is limited to things you asked for or must receive: confirming your address, resetting your password, and receipts for a membership.

Cookies & Local Storage

We use your browser's local storage and IndexedDB for things that do not need an account: your wishlist while signed out, dismissed recommendations, filter and sort preferences, and whether you have seen the walkthrough. This stays on your device, and signing in merges it into your account.

Supabase sets a cookie to keep you signed in. Beyond that, GameAtlas sets no advertising, analytics, or tracking cookies of any kind. Clearing your browser data removes everything described here.

Children

GameAtlas is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us information, contact us and we will delete it.

Contact Us

For questions about this Privacy Policy, reach us at support.gameatlas@gmail.com. You can also use the Help button in the app.