Privacy policy

Data we collect

• Account: email, name, avatar and identifiers received through email, Google or Discord sign-in.
• Profile and community: username, biography, preferences, reviews, lists, comments, activity and media you post.
• Steam, if connected: identifier, public name, games, play time and achievements available for features you request. We do not receive your Steam password.
• Technical data: IP address, browser information and cookies needed for sign-in, security and language.

How we use data

We use this data to maintain your account, show profiles and content, provide game features, send sign-in links, protect the service and review reports. Depending on the activity, the legal basis is providing the service, a legal obligation or our legitimate interest in community safety. We do not sell personal data.

What others can see

Profiles, reviews, comments, lists and activity may be public. Avoid posting phone numbers, addresses, identity documents or other sensitive information. Hiding social links or Steam does not make the entire profile private.

Cookies and external services

The session cookie keeps you signed in for up to 30 days. Temporary cookies complete sign-in; the language cookie may last up to one year. The browser also stores some interface choices. We use providers for hosting, databases, email and media storage. Google, Discord and Steam process data when you choose those integrations; IGDB/Twitch and Steam supply game data. External services have their own policies.

How long we keep data

Deactivation hides your profile and public content until you reactivate. A deletion request does the same and gives you 30 days to cancel. After that period, we delete the account and its content from the database and media storage. Backups may follow a separate retention cycle, which still needs to be documented. Minimal records remain only for a documented security, legal-claims or legal-obligation purpose, for as long as that purpose requires.

Your rights

You can request access, correction, a copy or deletion of data, along with other rights under the LGPD and GDPR where applicable. To export your data, contact [email protected] once the inbox is active. We may ask for minimal information to verify your identity. You can also complain to the ANPD or your competent EU data protection authority.

Copying other people’s data

Scraping, unauthorized APIs and other methods to copy or export other people’s personal data in bulk are prohibited. This does not prevent you from requesting a copy or transfer of your own data.

Minors

People aged 13 or over may browse the public catalog. Accounts are reserved for people aged 16 or over until guardian authorization and linking exist for younger users. The current age confirmation is a sign-in declaration; suitable server-side age assurance is still needed. See the child safety page.

Changes

If this policy changes materially, we will update its date and announce the change on the site. Changes do not remove rights granted by law.

Contact

Joysticked operates Joysticked. Contact: [email protected].