Last updated: August 20, 2026
🛡️ Transparency & GDPR

Privacy Policy

Your privacy and data security are our absolute priority.

1. Data Controller & Commitment

GameTome (https://gametome.app) is an independent game tracking platform built by gamers for gamers. We are committed to protecting your personal data in full compliance with the EU General Data Protection Regulation (GDPR 2016/679) and global privacy standards.

2. Zero Ads and No Sale of Personal Data

We NEVER sell, rent, or share your personal data, gaming history, or reviews with data brokers, advertisers, or commercial third parties. GameTome contains zero banner ads or invasive tracking pixels.

3. Personal Data We Collect

We only collect data strictly necessary to provide the service:

  • Account Data: username, email address, secure bcrypt-hashed password (or Google OAuth unique identifier when using 1-click Google Sign-In).
  • Gaming Chronicle: games added to your backlog, status (Playing, Completed, Wishlist, etc.), star ratings, reviews, spoiler flags, completion dates, and custom lists.
  • Interactions: comments posted on reviews, likes given, and follower/following connections with other gamers.

4. Cookies & Persistent Sessions

We exclusively use strictly necessary technical cookies. Your session token (authjs.session-token) is stored with HttpOnly, SameSite=Lax, and HTTPS security flags, retaining your session securely for up to 30 days across device restarts.

5. Integrated Technical Services

We rely on trusted technical infrastructure partners to power key platform features:

Google OAuth

Google OAuth: for instant 1-click authentication without sharing any sensitive data beyond public email and display name.

IGDB / Twitch API

IGDB / Twitch API: for fetching 1080p high-definition game cover art, game synopses, and catalog metadata.

Steam Web API

Steam Web API: to automatically synchronize games from your public Steam library upon your direct request.

Transactional SMTP

Transactional SMTP Service: for delivering welcome emails and 6-digit password reset OTP codes (valid for 15 minutes).

6. Your Privacy Rights (GDPR & Data Portability)

At any time, you hold the complete right to:

  • Export your entire gaming chronicle, logs, and reviews in open JSON or CSV formats directly from your profile.
  • Unlink your Google account with 1 click from your security settings.
  • Request the permanent and total deletion of your account and all associated records by contacting gametome.official@gmail.com.

7. Privacy Contact

If you have any questions or data requests regarding this Privacy Policy, contact our team at: gametome.official@gmail.com

    Informativa sulla Privacy & GDPR - GameTome | GameTome