1. Who we are
GamerList is operated by BrightFox ("BrightFox," "we," "us," or "our"). Questions or privacy requests can be sent to support@brightfox.fun.
2. Information we collect
Account and profile information
- A stable account identifier, email address, display name, and profile image provided directly or through Google or Apple sign-in.
- Profile details you choose to add, such as a username, biography, avatar, and preferred language or appearance settings.
Library and content information
- Your game library, backlog status, favorites, ratings, custom lists, play sessions, progress, and resume notes.
- Journal entries and images you choose to attach.
- Reviews, review comments, reports, feedback, and other content you choose to submit.
- Interactive map progress and custom markers, including notes you add to those markers.
Linked gaming services
If you choose to link a supported gaming account, we may process the account identifier and available library, playtime, trophy, achievement, or recently played data needed to provide the import feature. GamerList does not ask for or store the password to your gaming-service account.
When you enable ongoing sync for a supported service, GamerList may retain a service-issued credential or token in encrypted storage so it can perform syncs you request later. You can remove the stored credential by disconnecting that gaming account or deleting your GamerList account.
Purchases and subscriptions
We process the product purchased, store transaction or receipt identifiers, subscription status, and expiration date to verify and provide GamerList Pro. Google Play and Apple process payment details; GamerList does not receive your full card or bank information.
Product analytics
We use Firebase Analytics (Google Analytics for Firebase) and PostHog to understand product interactions, feature usage, and purchase and subscription activity. These services process interaction events, app and device context, and purchase and subscription analytics. When you are signed in, analytics are associated with your stable GamerList account identifier; this is account-linked data, not anonymous data.
Session replay, surveys, rage-click capture, and advertising personalization through analytics are disabled.
Device, diagnostic, and advertising information
- App version, device and operating-system details, crash traces, diagnostics, and technical events needed to identify failures.
- Google Mobile Ads may process IP-derived approximate location, app, vendor, or device identifiers, ad interactions, and diagnostics for free users. This processing can occur even when Apple's advertising identifier (IDFA) is unavailable.
- Security information needed to operate and protect the service.
3. How we use information
- Authenticate your account and sync your library and content across devices.
- Provide game tracking, journals, reviews, interactive maps, imports, and other requested features.
- Verify subscriptions, unlock Pro features, prevent purchase abuse, and respond to purchase support requests.
- Analyze product interactions and purchase and subscription activity with Firebase Analytics and PostHog to understand usage and improve GamerList.
- Display and measure ads for free users, subject to applicable consent and device settings.
- Diagnose crashes, maintain security, prevent abuse, and improve reliability.
- Respond to support, privacy, and account-deletion requests.
- Comply with legal obligations and enforce our rights.
5. Advertising choices
Free users may see ads provided by Google Mobile Ads. Starting with version 1.0.6, GamerList explicitly requests non-personalized ads and does not request Apple's App Tracking Transparency (ATT) permission or authorization to access the IDFA. Earlier versions may use standard ad requests, with personalization depending on applicable consent, settings, and the ad provider. Non-personalized ads can still involve the advertising data described in section 2 for ad delivery, measurement, and diagnostics.
GamerList uses Google's User Messaging Platform (UMP) for advertising-consent messages where required. In version 1.0.6 and later, when Google requires a privacy-options entry point, you can reopen those options from Profile. These controls concern advertising, not Firebase Analytics or PostHog product analytics, and do not enable personalized ad requests in version 1.0.6 and later.
GamerList Pro removes in-app ads while the entitlement is active; it does not turn off product analytics or crash reporting.
6. Data retention
- Account, profile, library, and user-created content are retained while your account remains active.
- Linked-service credentials retained for ongoing sync are removed when you disconnect that service or delete your account.
- Active subscription records are retained while needed to provide access, resolve disputes, prevent fraud, and meet store or legal requirements.
- Crash and security logs are generally retained for no longer than 90 days unless a longer period is needed to investigate abuse or comply with law.
- When you delete your account, the active account and associated user-owned production records are deleted. Residual copies may remain in restricted backups or security logs until routine rotation, ordinarily no longer than 90 days.
- Aggregated or de-identified information that can no longer reasonably identify you may be retained for service analysis.
7. Your choices and rights
You may update supported profile details in the app, control optional uploads and linked accounts, adjust advertising choices, and request access, correction, or deletion by contacting us.
GamerList does not currently provide a general in-app analytics on/off toggle. The UMP advertising choices described above do not control product analytics or Sentry crash reporting. Contact us with analytics-related privacy requests.
You can permanently delete your account from inside GamerList or submit an external request. See the GamerList Account Deletion page for steps and details.
8. Security
We use HTTPS/TLS in transit, access controls, Supabase Row Level Security, restricted server credentials, and store-side purchase verification. No system is completely secure, and we cannot guarantee absolute protection against every threat.
9. Age restrictions
GamerList is intended for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a minor has provided information to GamerList, contact us so we can investigate and delete it.
10. International processing
BrightFox and its providers may process information in countries other than your own. Where required, we rely on appropriate safeguards for international transfers.
11. Changes to this policy
We may update this policy as GamerList, applicable law, or our providers change. We will post the revised policy here and update the date above. Material changes may also be communicated in the app where appropriate.
12. Contact us
BrightFox, operator of GamerList
Email: support@brightfox.fun
For account-specific requests, include the email associated with your GamerList account. We may ask you to verify account ownership before fulfilling a request.