Privacy Policy
At GamerLobby, privacy is a fundamental principle. We do not sell your personal data or track you across the web. Here is an exact account of how we protect your personal information.
We never sell your email, username, or gaming habits to data brokers or advertising networks. Your gaming diary and reviews exist to connect you with fellow players, and you retain complete control to edit, export, or delete your account at any time.
01. Information We Collect
We collect information in the following ways:
- Account Credentials: When you register, we collect your email address and encrypted password credentials (managed securely via Supabase Auth).
- Profile Data: Your public username, display name, avatar URL, bio text, and custom visual preferences (fonts, backdrops).
- Gaming Activity: Games logged, review texts, 5-star ratings, custom lists created, and public community comments.
- Linked Gaming Accounts: If you choose to link your Steam ID, PlayStation Network, Xbox Gamertag, or Nintendo Friend Code, we store these identifiers to display badges on your profile.
- Transactional Data: If you purchase a patron tier, payment credentials are sent directly to Stripe; GamerLobby never receives or stores your full credit card number.
02. Lawful Bases & How We Use Information
Under the EU GDPR and UK GDPR, we process personal data under the following legal bases:
- Contract Performance: To authenticate your account, maintain your gaming diary, render your profile, and deliver digital subscription perks.
- Legitimate Interests: To prevent fraud, detect malicious bots, maintain platform stability, and calculate community aggregation metrics (e.g., average community game rating).
- Consent: For optional non-essential browser caching and local diagnostic storage.
03. Public vs. Private Information
Your username, display name, avatar, bio, published reviews, public lists, 5-star ratings, followers, and public profile badges.
Your email address, hashed passwords, billing transaction IDs, private unlisted collections, and internal notification logs.
04. Authorized Third-Party Subprocessors
We partner with industry-standard, compliant infrastructure vendors to host and operate GamerLobby:
| Vendor / Entity | Purpose | Data Handled | Location & Safeguards |
|---|---|---|---|
| Supabase Inc. | Database, Auth & Realtime Sync | Account profiles, encrypted credentials, reviews | United States (AWS), SOC2 Type II, DPA with Standard Contractual Clauses (SCCs) |
| Stripe Inc. | Payment Processing | Billing details, subscription tokens | United States, PCI-DSS Level 1 Certified |
| Valve Corp. (Steam API) | Steam Account Linking & Pricing | Steam OpenID 64-bit ID, public library status | United States, public storefront telemetry |
| Resend Inc. | Transactional Email Notifications | Email address, verification links | United States, SOC2 Type II |
06. Your Privacy Rights (GDPR & CCPA/CPRA)
Regardless of your geographical residency, GamerLobby extends full privacy control rights to all users:
- Right of Access & Portability: You may request a machine-readable export of all your published reviews, ratings, and diary entries.
- Right to Rectification: You can edit your profile, bio, avatars, and reviews directly at any time.
- Right to Erasure ("Right to be Forgotten"): You may permanently delete your account and all associated reviews via Account Settings (/settings).
- Do Not Sell or Share My Personal Info: GamerLobby does NOT sell or share personal information with third parties for cross-context behavioral advertising.
07. Data Retention & Account Deletion
We retain your account information for as long as your account remains active. When you delete your account through your settings panel, our database immediately cascades deletion across your profile, reviews, comments, and follower records.
08. Security Architecture
All traffic to GamerLobby is encrypted in transit using Transport Layer Security (TLS 1.3). Database tables are safeguarded with strict PostgreSQL Row-Level Security (RLS) policies, preventing unauthorized cross-user modifications.
09. Children’s Online Privacy Protection (COPPA)
GamerLobby is directed to general audiences aged 13 and older (or 16 and older in the EEA/UK). We do not knowingly solicit or collect personal information from children under 13. If we become aware that a child under 13 has registered, we will promptly terminate the account and purge the data.
10. Contact Our Privacy Team
To exercise your privacy rights, request data exports, or submit privacy complaints: