1. Scope and accountability

This Privacy Policy applies to personal information handled by My Game Archive (“MGA,” “we,” “us,” or “our”) through the Service. MGA is responsible for personal information under its control and has designated a privacy contact at privacy@mygamearchive.com. Third-party services linked from MGA have their own privacy practices.

2. Information we collect

• Account information: Google account identifier, name, email address, profile image, authentication events, and account timestamps.
• Profile and community content: handle, biography, location if supplied, avatar, visibility choices, friends, messages, comments, reactions, lists, reports, uploads, and catalogue contributions.
• Game and integration data: library entries, ratings, notes, playtime, achievements, schedules, wishlist items, Steam identifier and public Steam profile or library data you authorize us to retrieve.
• Technical and usage information: IP address and request metadata processed by our hosting and security providers, browser and device information, logs, error records, cookie choices, and security events.
• Optional analytics and advertising data: MGA currently uses no analytics service and displays no advertisements. If introduced with appropriate notice and consent, analytics or advertising providers may receive device identifiers, cookie identifiers, IP address, approximate location, browser information, page and ad interactions, and inferences used for measurement or personalization.
• Support and rights requests: communications, verification information, and records needed to respond.

Please do not submit sensitive personal information that the Service does not request.

3. Sources

We receive information directly from you; automatically from your browser and device; from Google when you authenticate; from Steam when you choose to connect it; from public game-data providers such as IGDB; and from other users who interact with you or report content. We limit collection to information reasonably needed for identified purposes.

4. How we use information

• Provide accounts, profiles, game tracking, integrations, community functions, and requested support.
• Authenticate users, prevent fraud and abuse, protect the Service, debug errors, and maintain availability.
• Personalize features according to your settings and remember choices you request.
• Moderate content, investigate reports, enforce our Terms, and comply with legal obligations.
• Measure and improve the Service where permitted and, for optional analytics technologies, only after required consent.
• If advertising is introduced, deliver, limit, personalize, and measure ads only as disclosed and permitted by your choices and applicable law.
• Communicate about the account, security, material policy changes, and requested services.

Depending on where you live, our legal bases may include performing our contract with you, your consent, compliance with law, and legitimate interests such as security and Service improvement where those interests are not overridden by your rights. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.

5. How we disclose information

We do not sell personal information. We may disclose limited information to service providers that process it for us, including Supabase for database, authentication, and storage; Cloudflare or Vercel for hosting and network delivery; Google for authentication; Valve/Steam for a connection you request; and game-data or technical service providers needed to fulfil a request. These providers may process information in other countries and are bound by their own terms and, where applicable, contractual safeguards.

Public profile details and public User Content are visible to other users and may be indexed or reshared. We may disclose information when reasonably necessary to comply with valid legal process, protect rights and safety, investigate abuse, or complete a corporate transaction. In a transaction, information remains subject to this Policy until you are notified otherwise.

If MGA later activates Google advertising, Google and its advertising partners may place or read cookies, use web beacons or IP addresses, and receive interaction data to serve and measure ads. Personalized ads may use prior activity, interests, approximate location, or demographic inferences. We will identify active advertising providers, link to their practices, update this Policy, and obtain required consent before activating those technologies.

6. International processing

MGA and its providers may process information in Canada, the United States, and other countries. Information processed elsewhere may be subject to local laws and lawful access by authorities. Where required, we use contractual or other recognized safeguards for cross-border transfers. Contact us for more information about relevant providers or safeguards.

7. Retention

Account, profile, library, integration, social, and private-upload information is kept while your account remains active or until you delete the relevant item. OAuth state and other transaction-security records expire after short operational periods. Cookie choices remain for the periods listed in the Cookie Policy. Security, error, and infrastructure logs are retained only for the period reasonably needed to protect and operate the Service or meet legal obligations.

When account deletion succeeds, account-linked production records and private uploads are removed immediately through the deletion workflow, subject to the anonymized thread placeholders described below. Residual copies in encrypted provider backups are isolated from ordinary use and expire when those backups are overwritten under the provider’s backup cycle. Information required for an unresolved legal claim, fraud or security investigation, or statutory obligation may be retained only for that purpose and only as long as required.

Shared catalogue entries may remain after account deletion where they have become part of MGA’s common game catalogue, but the deleted account’s attribution is removed. We periodically review retention needs and delete or anonymize information that no longer serves an identified purpose.

8. Safeguards

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including access controls, encrypted transport, managed authentication, least-privilege database rules, and security logging. No system is completely secure. You should protect your Google account, use secure devices, and notify us promptly of suspected misuse.

9. Your choices and rights

You can edit profile details and visibility settings, disconnect supported integrations, adjust cookie preferences, and delete content using available controls. Depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; or complain to a privacy regulator. We may verify your identity and may retain or refuse certain information where law permits or requires.

Send requests to privacy@mygamearchive.com. We will respond within the period required by applicable law. Canadian users may also contact the Office of the Privacy Commissioner of Canada or an applicable provincial regulator; EEA and UK users may contact their local supervisory authority.

10. Deactivation and account deletion

MGA does not currently offer a separate account-deactivation state. You can temporarily limit visibility by choosing “Only me” under Settings → Privacy and disconnecting Steam. To permanently delete your account, open Settings → Account → Delete account. The confirmation identifies exactly what will happen before deletion proceeds.

Successful deletion removes your Google-linked MGA account, profile, library, wishlist, lists and their items, list likes and comments associated with those lists, your likes and reactions, friends, direct messages, schedules, connected accounts, achievement data, legal-acceptance record, and private avatar and screenshot uploads. Your comments on another person’s list are deleted. Public catalogue entries you contributed may remain with your attribution removed.

Threaded game discussions need parent rows to keep replies by other users connected. For that reason, MGA replaces each game comment authored by the deleted account with “This comment was removed when its author deleted their account.” The original text, account identifier, display name, handle, avatar, profile link, playtime, rating, and reactions are removed. The placeholder cannot be linked back to the deleted account through the Service. Account deletion is permanent and cannot be reversed.

11. Cookies, analytics, and advertising

We use essential cookies for authentication, security, network delivery, and recording privacy choices. Optional functional storage is used only after your choice to remember local layouts, settings, and drafts. MGA does not currently activate an analytics service and displays no advertisements. You can accept, reject, or customize Functional, Analytics, and Advertising categories and later change them through “Cookie preferences” in the footer.

If MGA introduces analytics or Google-served advertising, the relevant technology will remain inactive unless your choice and applicable law permit it. We will update this Policy and the Cookie Policy with active providers, purposes, and retention information before activation. Personalized advertising will not be based on activity known to concern a child under 13. See the Cookie Policy for details.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. A user under the age of majority must have a parent or legal guardian authorize use. If you believe a child provided information contrary to this Policy, contact us so we can investigate and take appropriate action.

13. Changes and contact

We may update this Policy as the Service or law changes. We will post the revised version and effective date and provide additional notice for material changes where required. Questions, complaints, and privacy requests may be sent to privacy@mygamearchive.com.