Data stored on your device
Your game library, trackers, tracker items, user templates, recipes, selected game covers, note images, preferences, local cache and local safety backups are stored on your device. You can use Game Tracker as a guest without creating an account.
Game Tracker creates a random device identifier for library usage accounting and legacy conflict resolution. Guest-created own templates initially use a random local creator identifier; when their library is migrated into an account, eligible own templates are associated with that account so the author can manage them across devices. These app-generated identifiers are distinct from advertising identifiers that an advertising SDK may process.
Optional accounts
If you sign in with Apple or Google, the provider sends Game Tracker an identity token. Game Tracker validates it and stores an internal account identifier, provider-specific identifier, optional verified email address, optional display name, account creation date and hashed session credentials. Provider identity tokens are not used as Game Tracker sessions.
You may link Apple and Google to the same Game Tracker account. Signing out removes the local session and asks the service to revoke it. For Sign in with Apple, the service securely stores an encrypted refresh token only so that Apple authorization can be revoked when the account is deleted. It is not used for advertising or profiling.
Cloud backups and local libraries
Your games, trackers, items and own templates remain on your device. Library edits are not automatically synchronized between devices. Cloud upload requires sign-in. Without an account, backups stay only on the device. When signed in and a manual or qualifying automatic backup is created, the app queues a compressed file containing the library, own templates and library images for upload to your account's Cloudflare-hosted storage. Login credentials, billing credentials and advertising reward balances are excluded from portable backups.
Manual backups are created only by your action. Automatic backups are created before game deletion, backup restoration or sign-out, at most once every 24 hours. Ordinary editing, app launches and inactivity do not create automatic backups. Offline copies remain locally queued; upload retries use a delay. Loading the cloud backup list and restoring data are explicit actions.
Backup metadata includes an identifier, category, device identifier, platform, creation time, file size and checksum. Free includes one manual and one automatic cloud copy within 50 MB; Plus includes ten of each within 150 MB. The cloud history and allowance belong to the account. A new successful upload rotates older copies according to the active plan. Superseded files may remain briefly before cleanup.
To transfer data between devices, restore a selected backup with Merge or Replace. Existing identity reconciliation and creation limits still apply. Separate identifiers and usage records needed for account ownership, creation limits, subscriptions and rewarded capacity may be processed without uploading tracker text or images. Account deletion removes cloud backup files and their metadata. Switching to the backup model does not silently delete cloud content retained from earlier app versions.
Versions before 0.5 may continue using their older entity synchronization while users upgrade. Existing legacy cloud records are retained; the 0.5 library uses explicit backups instead of that automatic flow.
Account avatars and appearance
Signed-in Free and Plus users can select an included silhouette or upload a profile photo. We store the selected avatar identifier, optional processed photo, selected frame and profile revision with your account and synchronize them across your signed-in devices. The avatar is private account data in 0.5; it is not published in a public community profile.
Selected photos are oriented, center-cropped, resized to 512 × 512 and re-encoded as JPEG before upload, removing original EXIF/location metadata. One current profile image is retained independently of the library-image quota and replaced when you change it. You can change or remove the photo in Account → Edit avatar. Account deletion removes the server profile and photo.
Theme and dashboard-metric selections are stored locally on each device. They are not synchronized profile fields. Dashboard counts are calculated from your library and current subscription status, not from game-save monitoring or social profiling.
Game catalog lookup, metadata and covers
When you add a game without catalog metadata, Game Tracker may send the title you entered to the catalog proxy for a background metadata-only match. This does not download a cover; ambiguous or unsuccessful matches are ignored. If you choose Find Cover Automatically, you can explicitly select a matching game and cover.
The service checks its shared cache before requesting public game information from IGDB. Public metadata and covers may be cached in Cloudflare D1 and R2 so repeated requests do not require another provider request. Your device also keeps a system-purgeable local cache. A lookup failure never prevents you from creating or using a local game.
Photos and notifications
Game Tracker accesses only images that you explicitly select through the operating system's picker. Reminder notifications are scheduled locally after you grant notification permission.
Local diagnostics and support
Game Tracker keeps privacy-conscious diagnostic journals on your device for up to 7 days. They contain timestamps, technical event names, identifiers, counters and status values needed to investigate synchronization and app failures; they are designed not to include user-authored tracker text. When you choose Bug Report, logs from the two most recent available days are attached to the draft message. They leave your device only if you review and send that message. Feedback and feature-request messages do not attach these logs.
Optional rewarded advertising and privacy choices
Game Tracker 0.5 integrates Google AdMob through the Google Mobile Ads SDK and uses Google's User Messaging Platform (UMP) to manage applicable advertising privacy choices. Ads are optional: you choose a rewarded ad when requesting extra creation capacity. The app does not show banner ads or forced interstitial ads; active Plus users do not need or receive rewarded ads.
During advertising requests, Google and participating ad partners may process IP address (including approximate location derived from it), device or app identifiers, ad interactions, diagnostics and performance information for ad delivery, measurement and fraud prevention. The identifiers available and whether ads are personalized depend on platform settings, permissions and applicable privacy choices. We do not send your tracker text, notes, selected avatar photo, account email or game-library contents as ad targeting data.
The app presents a privacy message when required and checks whether ads can be requested before loading them. Where available, use the app's advertising privacy options to review or change your choices, and use operating-system privacy controls for advertising identifiers and tracking permissions. A consent form is not necessarily shown on every launch. Declining optional advertising does not stop local tracking within Free limits; it may affect the availability or type of reward ads.
Google's disclosures describe SDK data handling for iOS and Android. See Google's Privacy Policy and the partner information in the applicable consent message. Advertising providers have their own data-retention practices.
Reward verification and usage records
To credit a reward safely, Game Tracker creates an account-bound reward session with an opaque identifier. This session identifier is sent as AdMob verification custom data; our server verifies Google's signed callback. We record reward transaction identifiers, completion times, reward type, applicable game/action scope, remaining units and creation-operation status. These records prevent duplicate rewards, preserve unused capacity and recover interrupted operations. They do not grant AdMob access to the underlying tracker content.
We also record account-level curated-template weekly use and authorized additions to enforce the published limits. Subscription and reward records are service-access records, separate from the operational catalog analytics below.
Operational analytics
The Cloudflare-hosted service records operational information such as normalized API route, response status, response duration, platform, cache source, public catalog identifier/title and the game title submitted for catalog search. Cloudflare supplies a country code inferred from the network request; Game Tracker does not request GPS or precise location, and IP addresses are not stored in Game Tracker analytics.
Search text and matched catalog results may be retained for up to 90 days to evaluate match quality, reliability, API usage and cache efficiency. These analytics are not linked to a Game Tracker account, email address, provider identity or device identifier. Authorization credentials and user asset identifiers are not included.
Retention and deletion
Local diagnostic journals are retained for up to 7 days. Operational analytics may be retained for up to 90 days. Public game metadata, covers and shared catalog cache entries may remain in the shared cache because they are not tied to a Game Tracker account. Account records and cloud backups are kept while the account is active and are removed when the account is deleted, except where retention is required by law.
You can delete games, trackers and tracker items in the app. To delete the entire account, open Account and choose Delete Account. This removes its authentication identities, server records and cloud assets, and revokes associated Apple authorization where applicable, while keeping the current device's library as local guest data. Other devices may retain a signed-in session until they next contact the service; that session can no longer access the deleted account.
If you cannot access the app, use the account deletion instructions on the Support page to submit a request. Removing the app deletes its local data, subject to backups managed by the operating system.
Your choices
You can decline rewarded ads, review applicable advertising privacy options, change or remove your avatar, use Game Tracker in guest mode without creating an account, decline access to photos and notifications, revoke operating-system permissions at any time, clear the system-purgeable cache through device settings, sign out, delete the Game Tracker account in the app, or request deletion through Support. Deleting an account does not remotely erase guest data stored only on a device.
Service providers
Game Tracker uses Apple and Google for optional sign-in and store billing, Cloudflare for API, database, analytics and object-storage infrastructure, IGDB/Twitch for public game metadata and covers, and Google AdMob/UMP for optional advertising, verification and advertising privacy choices. Providers process the data needed for their services under their applicable terms and privacy policies. Advertising partners are identified in the applicable privacy message.
Subscriptions
On iOS, Plus can be purchased and restored without a Game Tracker account. StoreKit verifies App Store transactions and subscription expiry for on-device access. No name, email or social sign-in is required for this purchase. A random appAccountToken contains no personal information. If you optionally sign in and link account benefits, Game Tracker verifies the signed transaction and current Apple subscription status before associating the purchase with that account. Google Play purchases remain account-based. For linked purchases, Game Tracker uses your account and store-verified purchase identifiers, product, subscription status and expiry to provide account benefits across iOS and Android. Ownership checks use hashed purchase identities. Original Apple transaction IDs are retained for server-side status checks; recoverable Google Play purchase tokens are encrypted. Payment-card details are handled by the original store, not Game Tracker. Store notifications and server checks update renewal, cancellation, expiry, refund or revocation status so access remains consistent across devices. Free cloud image storage is 50 MB; Plus is 150 MB per application account.
Privacy requests
Contact us to request access, correction or deletion of account data, or to exercise other rights available under the law applicable to you. We may need to verify account ownership. For data processed independently by a store or advertising provider, that provider's privacy controls and request process also apply. Never include passwords, verification codes or payment-card details in a request.
Changes and contact
This policy will be updated before material data practices change. Questions and privacy requests can be sent to notprogamersupport@gmail.com.