Privacy Policy
Last updated: [FECHA DE PUBLICACIÓN]
1. Who we are
Playmoir is operated from Spain. If you have questions about this Privacy Policy or how your data is handled, you can reach us at hello@playmoir.app.
2. Information we collect
2.1 Information you provide directly
| Data | Purpose |
|---|---|
| Email address | Account creation, login, verification, password reset, service communications |
| Username | Public identity within the Service |
| Password | Stored as a one-way cryptographic hash (bcrypt); we never store or can view your plain-text password |
| Profile photo | Optional, displayed on your public profile |
| User-generated content | Reviews, journal entries, and any text or images you choose to add about the games you play |
2.2 Information collected automatically
| Data | Purpose |
|---|---|
| IP address | Security, rate limiting, abuse prevention, server logs |
| Device and app version information | Debugging, error monitoring, compatibility |
| Usage data (crash reports, error logs) | Improving stability and fixing bugs |
3. How we use your information
- To create and manage your account.
- To provide the core features of the Service: game tracking, journaling, reviews, and social features (friends, activity feed).
- To send you service-related emails (email verification, password reset). We do not send marketing emails unless you separately opt in.
- To detect, prevent, and address technical issues, abuse, or violations of our Terms of Use.
- To improve and maintain the Service.
We do not sell your personal information, use it for third-party advertising, or share it with data brokers.
4. Legal basis for processing (EEA/UK users)
Where GDPR applies, we process your data on the following legal bases:
- Contractual necessity — to provide the Service you signed up for.
- Legitimate interest — to secure the Service, prevent abuse, and maintain logs necessary for debugging.
- Consent — for optional features such as adding a profile photo or making journal entries public.
5. Third-party service providers
We use the following third-party providers to operate the Service. Each processes data only as necessary to perform their function for us, under their own privacy and security commitments:
| Provider | Purpose |
|---|---|
| Railway | Application hosting and database infrastructure |
| Cloudflare | DNS, CDN, and object storage (R2) for uploaded images |
| Resend | Transactional email delivery (verification, password reset) |
| Sentry | Error monitoring and crash reporting |
We do not use Google Analytics, Meta/Facebook Pixel, advertising networks, or any other third-party tracking or remarketing service.
6. International data transfers
Our infrastructure providers may process data in the United States or other countries outside the EEA/UK. Where this occurs, we rely on the safeguards provided by our providers (such as Standard Contractual Clauses) to ensure your data remains protected to a standard equivalent to that required under GDPR.
7. Data retention
We retain your personal data for as long as your account remains active. If you delete your account, your personal data and user-generated content are deleted or anonymized within a reasonable period, except where retention is required by law (e.g., for fraud prevention or legal compliance).
8. Data security
We apply industry-standard security measures, including: password hashing (bcrypt), encrypted connections (HTTPS/TLS) across the Service, JSON Web Token-based authentication with short-lived access tokens, rate limiting on authentication endpoints, and restricted, need-to-know access to production systems.
No system is perfectly secure. In the unlikely event of a data breach affecting your personal information, we will notify the relevant supervisory authority and affected users as required by applicable law (including within 72 hours under GDPR, where applicable).
9. Your rights
Depending on where you live, you may have some or all of the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data (“right to be forgotten”).
- Restriction — request that we limit how we process your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to certain types of processing.
You can exercise most of these rights directly from the app (editing your profile, deleting entries, or deleting your account from Settings). For anything else, contact us at hello@playmoir.app. If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).
If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what personal information we collect, the right to delete it, and the right to non-discrimination for exercising these rights. We do not sell or share personal information as defined under the CCPA.
10. Children’s privacy
The Service is not directed at children and is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
11. Cookies and tracking technologies
The Playmoir mobile app does not use cookies. Our website may rely on strictly necessary technical cookies set by our infrastructure provider (Cloudflare) for security purposes (e.g., bot protection). We do not use analytics or advertising cookies, and we do not currently respond to Global Privacy Control (GPC) signals, as we do not engage in the type of data sale or sharing these signals are designed to prevent.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at the address associated with your account before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.
13. Contact
Questions, concerns, or requests regarding this Privacy Policy or your personal data can be sent to hello@playmoir.app.