Privacy policy

Who we are

Gamoire runs this Gamoire instance and is responsible for the personal data it holds. Contact: privacy@gamoire.app. This Gamoire instance is run by its administrator, who is responsible for the personal data it holds.

What we collect

• From sign-in: your account id at the provider you sign in with, and the email address and name it shares. Steam shares no email; we keep your SteamID and Steam display name. Email sign-in accounts are created by an administrator.
• What you add: the games in your library with their status, favourite flag, dates and playtime; your play queue; your catalogs with their names, descriptions and games, and whether each is public; the games on your wishlist (added by you or imported from your Steam, Epic or GOG wishlist, if you turn that on) and when they were added, and the games you removed from it so imports don't add them back, private to you; suggestions you dismiss; your ratings and reviews of games; your theme and other settings.
• Your avatar: if you upload a picture, the 256 px version of it. Without one, your avatar is your initials, which need nothing stored.
• Your username and profile: the username you pick when you first sign in, the date your account was created ("Member since") and, only if you turn it on, your name. Your username can't be changed by you afterwards; an administrator can change it.
• AI answers about games: when you ask "Is this for me?" on a game, the verdict, the reasons, the game's genres, a fingerprint of your taste summary at the time (to tell when your library has changed), when you asked and which model answered. It is kept until you ask again or delete your account.
• Backlog review: the games the AI flagged as unlikely to be played with its reasons, which games it has looked at so far, a fingerprint of your taste summary at the time, when you ran it and which model answered. The review is kept until you run a new one or delete your account. When you mark a game "Will play", we keep that mark and the date so it is not flagged again, until the game leaves your library or you delete your account.
• Connections you choose to make: Steam (SteamID, account name, avatar and, if you add it, your own Steam Web API key), Epic Games and GOG (your account id and name on that store, and a sign-in token that lets Gamoire read your games; it is stored encrypted and deleted when you disconnect) and your own AI endpoint (address, model and API key). Keys are stored encrypted and are never shown again. For each store we also keep when your library was last imported and, if the latest import failed, when and a short reason; the same for your wishlist when you import it. Per connection we also keep how many imports in a row failed, the last problem and when you were told about it, and when you were last told about each kind of problem (only recent ones are kept); your own AI endpoint keeps the same notice state.
• Messages: anything you email to privacy@gamoire.app. anything you send the administrator of this instance.

What we store and why

Connecting Steam, Epic Games, GOG, EA, Ubisoft or Xbox is optional. It fills your library and playtime, and your wishlist if you turn that on, so you don't have to add them by hand.

• Steam: your SteamID, the profile name or link you entered, your Steam display name and avatar, your own Steam Web API key if you add one (encrypted and never shown again), the games we matched from your Steam library with your playtime and last-played date per game, the games we add to your wishlist from your Steam wishlist while its import is on, and when each import last ran or failed. Disconnecting deletes the connection, including your Web API key; only you can revoke the key itself, on Steam's website.
• Epic Games: your Epic account id and display name, an encrypted sign-in token that lets Gamoire read your games, the games we matched from your Epic library with your playtime per game, the games we add to your wishlist from your Epic wishlist while its import is on, and when each import last ran or failed. Disconnecting asks Epic to end Gamoire's session and deletes the connection with its token; you stay signed in to Epic everywhere else. Reconnecting asks Epic to end the previous Gamoire session too.
• GOG: your GOG account id and username, an encrypted sign-in token that lets Gamoire read your games, the games we matched from your GOG library with your playtime and last-played date per game, the games we add to your wishlist from your GOG wishlist while its import is on, and when each import last ran or failed. GOG has no way to end only Gamoire's session, so disconnecting asks GOG to sign you out on all your devices and apps, including GOG Galaxy, and deletes the connection with its token.
• EA: your EA nucleus id, the remid sign-in cookie you paste (stored encrypted; the short-lived access tokens made from it are never stored), the games we matched from your EA library with your playtime per game, the games we add to your wishlist from your EA wishlist while its import is on, and when each import last ran or failed. Disconnecting deletes the connection and its cookie; EA has no way to end only Gamoire's session, so you stay signed in to EA.
• Ubisoft: your Ubisoft account name, the sign-in ticket you paste (stored encrypted; the short-lived tokens made from it are never stored), the wishlist store site (taken from your account country, or the one you choose), the games we matched from your Ubisoft library with your playtime per game, the games we add to your wishlist from your Ubisoft wishlist while its import is on, and when each import last ran or failed. Gamoire never sees your Ubisoft password. Disconnecting deletes the connection and its ticket; Ubisoft has no way to end only Gamoire's session, so you stay signed in to Ubisoft.
• Xbox: your gamertag and Xbox user id, an encrypted Microsoft sign-in (refresh) token that lets Gamoire read your games, the games we matched from your Xbox library, the games we add to your wishlist from your Xbox wishlist while its import is on, your playtime where Xbox publishes it, and when each import last ran or failed. Gamoire never sees your Microsoft password. Disconnecting deletes the connection and its token; Microsoft keeps Gamoire's permission until you remove it at account.live.com/consent/Manage.
• Playnite: if you connect the Playnite extension, the name of each PC you connect and the extension version, and the games it sends: the game's name and Playnite id, where it came from, your playtime, status, favourite flag and score. Access tokens are stored only as hashes. We keep no IP address or hardware id. Disconnecting a PC revokes its token; the playtime, statuses and games it sent stay in your library.
• Import now: when you last ran an import by hand for each store, kept to apply the daily limit. It stays after you disconnect, so reconnecting does not reset the limit.
• After you disconnect: games already in your library stay. Games imported from a store wishlist are ordinary wishlist entries, so they stay too, even after you turn the import off, until you remove them.
• What we never store: your store password, the email address on your store account, payment details, your friends list or your purchase history.
• Who sees it: imported games and playtime become part of your library, which feeds the sections of your public profile (profiles are public unless you change it in Settings). Other users never see your store account names or ids.

Cookies and browser storage

We use one sign-in cookie (gamoire.auth) and short-lived cookies while you sign in with a provider. Your browser also remembers two preferences, your theme (gm-theme) and search mode (gm-search-mode). There are no analytics or advertising cookies.

How we use it

Only to run the service: showing your library, building your suggestions, importing games and answering your emails. We don't sell your data, show ads or profile you beyond the suggestions you see.

Google sign-in

If you sign in with Google, Gamoire asks only for your basic profile and email address (the openid, email and profile scopes) and keeps your Google account id, email address and name. It has no access to your Gmail, Drive, contacts or any other Google service. We use them only to sign you in, to show your account details to you and, only if you turn it on, to show your name on your profile. They are never sold, shared with third parties, used for advertising, sent to an AI service or used to train AI models. Gamoire's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Gamoire's access in your Google Account under Security, and deleting your Gamoire account deletes them.

What other people can see

When this instance has social features on, other signed-in users can see your username, your member-since date, your name if you chose to show it, and your public catalogs (their names, descriptions and games), on your profile and through each catalog's share link. Your profile shows only the sections you switch on (stats, top games, now playing, top rated, reviews, wishlist, catalogs, taste details), or nothing if you make it private. Your top game picks (up to 10 favourites, with their order) are stored for this. When your profile is public, signed-in users see a taste match with you, computed from both libraries and ratings; the figure is cached for a few minutes and not stored. Private catalogs and your queue are never shown to others; library games, statuses and playtime appear only in the profile sections you switch on (and with your reviews). Social pages are not visible to people who aren't signed in. The administrator can switch social features off, and you can make any catalog private at any time.

Gamoire stores which public catalogs you like and follow, and when. Other people see only the counts, never who. A copy of a catalog records the catalog it was copied from, but doesn't show it.

Comments you write on public catalogs are shown with your username to everyone who can open the catalog. Removed comments are kept so administrators can review reports, but their text isn't shown; a removed comment with replies keeps its place as “Comment removed”. If you report a comment, Gamoire stores the reason and your note; the author isn't told who reported it.

Ratings and reviews are shown to everyone signed in to this instance, with your username, your avatar, the hours you played the game and its status in your library. Other users can mark a review helpful; the votes are counted and you are told who voted. Reviews you write are removed with your account. The hours and status shown with a review are a snapshot from when you wrote or last edited it; they stay on it after the game leaves your library. If an administrator removes a review, its text isn't shown any more, but it is kept, and administrators can still see it, until you delete the review or your account.

Pictures you upload are resized in your browser, then re-encoded on the server. Only the 256 px result is stored, in this instance's database. The original file isn't kept, and the result carries no location or camera data. Removing your picture deletes it, and your avatar goes back to your initials. Other signed-in users can see your avatar.

If you report a review or an avatar, Gamoire stores the reason and your note, as for comments; the person you report isn't told who reported them.

Gamoire stores in-app notifications (who acted, on which catalog, comment or wishlisted game, the release date it reports, the store, the problem, a short reason and import counts, when, and whether you read them) and deletes them after 90 days. Notification preferences are stored with your settings. The administrator's health checks keep anonymised (hashed) user ids for up to 24 hours to tell a store outage from one account's problem.

Gamoire stores who you follow and who follows you. It also keeps a 90-day log of your status changes, reviews, favourites, Top games changes, public catalogs, and library adds, removals and imports. Your followers see these items while your profile is public and the matching Share toggle in Settings is on. The follows and the log are deleted with your account.

On a game's page, players who follow you can see that you loved it, are playing it or have it on your wishlist, with your rating and hours played. The same signals, with your username and avatar, also appear on their Home card of games popular with the players they follow. This is read from data Gamoire already stores and is hidden when your profile is private or you turn off Show me in friends’ game signals in Settings → Profile.

Gamoire stores nudges: short messages between players who follow each other. They are kept for up to 90 days (longer while a report on one is open), including ones the recipient deleted or an administrator removed, so reports can be reviewed. It also stores the players you blocked from nudging you. Nudges and blocks are deleted with either account.

Services that receive data

• Sign-in providers (Google, Discord, Steam or Twitch, as this instance enables them) take part in signing you in.
• Steam receives your SteamID, and your own key if you added one, when your library or wishlist is imported. Steam's store also receives the ids of wishlisted games Gamoire doesn't know yet, to look up their names.
• Epic Games and GOG, if you connect them, receive requests made with your sign-in token to read the games you own, your wishlist if you turn its import on and, where the store offers it, your playtime, and a sign-out request when you disconnect, reconnect Epic Games, or delete your account. EA, if you connect it, receives requests made with your stored cookie to read the games you own, your wishlist if you turn its import on and your playtime; it gets no sign-out request. Ubisoft, if you connect it, receives requests made with your stored sign-in ticket to read the games you own, your wishlist if you turn its import on and your playtime; it gets no sign-out request. Microsoft (Xbox), if you connect it, receives requests made with your stored sign-in to read the games you own, your wishlist if you turn its import on and your play stats; nothing is written to your account.
• An AI service, when this instance enables one, receives game data and your own library details (statuses, hours played, queue positions, favourites, when you added them, the ratings you gave, and owned games similar to one you ask about) to build suggestions, or the text you type into Describe search, what you ask For you, or to judge whether a game suits you, or to review your backlog. It never receives your name, email, account id, anything you wrote in reviews or comments, or anything about other players. If you set your own AI endpoint, your data goes to that provider under its terms.
• Game data sources (IGDB, HowLongToBeat, SteamGridDB, GOG) receive game names and ids only. Steam and IGDB reviews on a game page are fetched by the server and contain no personal data of yours.
• Images and videos load directly from those services' servers (for example IGDB, Steam and YouTube), which see your IP address.

Logs

Server logs record errors and requests and may contain your account id or SteamID. They are kept for a limited time for troubleshooting and used for nothing else.

Last seen and moderation records

We record when you were last active, at most once an hour, so administrators can see which accounts are in use. If an administrator restricts or suspends your account, we keep the restrictions, the reason category, the message shown to you and an internal note, with who set them and when. Records about you (restrictions, last seen, notifications about them) are deleted with your account.

For moderation and support, administrators can see an account's library size; its catalogs (private ones appear in a list, but administrators can't open them); its reviews and comments, including removed ones; how many followers and follows it has and how many nudge blocks; the reports it has filed; the names of its Playnite devices; the status of its store and AI connections; the sign-in methods linked to it; and when it last imported a library, sent a nudge or wrote a comment. Secrets such as tokens and keys are never shown.

Moderation actions (such as restricting or suspending an account, removing content, changing a username or creating an account) are kept in an administrator audit log: who acted, on which account, when, and a short summary, never the content itself. When an account is deleted, its entries stay with no link to it and its username replaced by "Deleted user"; the same applies to an administrator's name on actions they performed.

Retention

We keep your data while your account exists. Audit log entries are kept after that, without your username or any link to your account.

Deleting your account

Open Settings → Profile, choose Delete account and confirm. You'll be asked to sign in first if you aren't.

• Removed at once: your account and its sign-in links, library, play queue, wishlist, catalogs, suggestions, settings, store connections and stored keys, your ratings and reviews, and your uploaded avatar. Your comments on other people's catalogs are removed and their text erased. Connected Epic Games and GOG sessions are ended first; for GOG this signs you out on all your devices and apps.
• What stays: game entries shared by all users, which hold no personal data; server logs, until they expire; emails you sent us; administrator audit log entries, with your username replaced by "Deleted user".
• Can't sign in any more? Email privacy@gamoire.app from the address on your account, or tell us which sign-in provider you used. We delete the account within 30 days. Contact the administrator of this instance, from the address on your account or saying which sign-in provider you used. They delete the account within 30 days.
• The last administrator can't delete their own account until another admin exists.

Your rights

You can see and correct your data in the app, export your queue, and delete your account at any time. For anything else, such as a copy of your data, email privacy@gamoire.app. ask the administrator of this instance.

Children

Gamoire is not intended for children under 13, or under 16 in the EEA and the UK.

Changes

When this policy changes, the date at the top changes too. Significant changes are announced in the app.