Privacy Policy

Last updated: 13 September 2026

MyGameShelf ("the app") is a game-collection shelf for iPhone, Android, and the web. The short version: your shelf lives on your device and stays there unless you choose to sign in or share it. Signing in with Apple, Google, or an email one-time passcode is entirely optional; if you do, your shelf syncs through our own developer-operated server. Sharing a shelf publishes that shelf's content at an unguessable link until you take the link down or it expires. The phone apps show optional rewarded ads (Google AdMob) and offer the optional annual Collector's Pass subscription and one-time Founder Edition purchase (processed by the app stores via RevenueCat). The app also sends anonymous, content-free usage and crash analytics through our own privacy relay. All of this is described below.

Who we are (data controller)

The data controller for any personal data processed through MyGameShelf is Geometry Lab L.L.C-FZ, Licence No. 2651608.01, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. Geometry is our trading style. See geometryapps.com.

EU representative (Art 27 GDPR): Prighter EU Rep GmbH, Schellinggasse 3/10, 1010 Vienna, Austria. UK representative (Art 27 UK GDPR): Prighter Ltd, 20 Mortlake High Street, London, SW14 8JN, United Kingdom. Exercise your rights at app.prighter.com/portal/geometry — or email support@mygameshelf.xyz.

What data MyGameShelf handles

• Your shelf: the games you add (title, platform, rating, notes), your shelves and their planks, decorations and trophies, and display preferences. This is stored on your device.
• Account information (optional): if you sign in with Sign in with Apple, Sign in with Google, or an email one-time passcode, we store an account identifier and, for most accounts, your email address, and your shelf syncs to our server so it follows you across devices.
• Shared shelves (optional): a shelf you explicitly share is published at an unguessable link — see "Sharing a shelf" below.
• Game searches: the search terms you type in Discover, forwarded to the game database — see "Game database" below.
• Anonymous usage & crash analytics: content-free feature-usage events and app-health diagnostics, described under "Usage analytics" below.

Where your shelf is stored

• On your device (or in your browser's local storage on the web). This is where your shelf lives if you never sign in, and the app remains fully functional this way. Signing in is not required.
• If you sign in, your shelf document additionally backs up and syncs across your devices through our own developer-operated server (a Cloudflare Worker with a Cloudflare D1 database, reachable at mygameshelf.xyz). Because that data is stored on our own server, we can access it there for signed-in accounts, together with your account identifier and, for most accounts, your email address. Your data is scoped to your account and never shared with other accounts.
• If you do not sign in or share a shelf, we cannot see or access it.

Accounts (optional)

MyGameShelf works fully without an account. If you sign in, we create an account identified by an internal account ID and, for most accounts, your email address (there is no MyGameShelf password). Email one-time passcodes are delivered by Resend, our email processor, from mygameshelf@mygameshelf.xyz; sign-in codes are stored only as hashes.

Deleting your account: from You → Account & Sync → Delete account you can permanently delete your account and every synced shelf document from our server. Data on your device is not affected. Signing out (without deleting) simply stops syncing.

Sharing a shelf (optional)

If you choose to share a shelf, the content of that shelf — its games, planks, decorations, trophies, and shelf name — is published on our server (a Cloudflare Worker with Cloudflare KV) at an unguessable link, so anyone you give the link to can view it in a browser.

• A shared shelf is a live mirror. While the link exists, changes you make to that shelf keep appearing to whoever holds the link.
• Link-based access. The link is unguessable and the shelf is not listed publicly or searchable, but anyone who has the link can open it — share it only with people you trust.
• Taking it down. You can take a link down from the app at any time, which deletes the published copy from our server. A link also expires on its own after 120 days without any update from you.
• No identity attached. The published document contains your shelf content only — no account identifier, email address, or device identifier is stored with it.

Reporting a shared shelf: when you submit a report, we store a report identifier, the shared shelf's identifier, your selected reason, a snapshot of the shelf name and up to 50 level names, the report's status, and the submission time in Cloudflare D1. We use your IP address to limit report submissions, but do not store it in the report record. You do not need to provide an email address. Submitting a report does not automatically take the link down.

Game polls (optional): you can publish a poll with 3 games from your shelf. Anyone with the link can see the selected games’ titles and covers and vote without an account. To remember a browser’s vote, we set a random cookie for that poll, with the Secure and HttpOnly flags. The server stores a hash of that cookie value and the chosen game. Voting again from the same browser updates its vote. The page shows vote counts, without identifying voters. Access to a poll ends after 7 days or when its shelf link is taken down. This access limit does not mean that stored poll records are deleted at that moment.

Game database

Search and browse in Discover query IGDB (a game database operated by Twitch Interactive, Inc.) through our own proxy server, which forwards only the search text and platform filter — never your identity, account, or shelf. Game cover images load directly from IGDB's image servers (images.igdb.com), which — like any web server you fetch images from — see your IP address.

Rewarded ads (phone apps)

The Merchant in the Shop can offer you a decoration in exchange for watching a rewarded ad. Ads are served by Google AdMob. Watching one is always your explicit choice — the ad plays only after you accept the Merchant's pitch. Where required (EEA/UK), a consent prompt governs whether ads are personalised; elsewhere, Google may process device identifiers for ad serving and frequency capping under its own policies. Holding the Collector's Pass removes all ads. Anonymous impression-level ad-revenue figures are shared with RevenueCat to measure the app's economics.

Purchases

The Collector's Pass is an annual auto-renewable subscription. The Founder Edition is a one-time purchase. Purchases are sold and processed by Apple's App Store, Google Play, or Samsung Galaxy Store, depending on which store you use. RevenueCat, our purchase-management processor, receives your purchase history and an app-generated subscriber identifier to validate purchases and manage entitlements. We never see or store your payment details.

Usage analytics (anonymous, no personal content)

To understand which features are used and improve the app, MyGameShelf records anonymous in-app activity — for example which screen you open or when a game is added (counts, never titles). Analytics are content-free: they never include your game titles, notes, shelf names, email, or account identifier.

• No analytics SDK in the app. Events go over an encrypted connection to our own relay (a Cloudflare Worker on our domain), which forwards them to PostHog (our analytics processor, EU hosting). The app holds no analytics key.
• The relay anonymises by region. For users in the EEA, the UK, and Switzerland (and any user whose region can't be determined), each event gets a fresh random identifier per event, the IP address is stripped, and no profile is built. Elsewhere, events are tied only to a random app-generated identifier — never your identity — still with no IP.
• Your choice: in Germany and Austria (and where your region is unknown), analytics are off until you opt in. Everywhere else they are on by default and you can opt out any time in the app's menu. It is never used for advertising attribution, involves no cross-app tracking and no IDFA, and is never linked with third-party data or sold.

App-health diagnostics (crash & performance)

The app also reports anonymous app-health diagnostics (Apple MetricKit on iOS; Android platform diagnostics on Android). These contain no personal data and no shelf content, and exist solely to find and fix crashes and slowdowns. They are sent on a legitimate-interest basis and are not affected by the usage-analytics opt-out.

Sub-processors

• Apple: App Store / StoreKit (purchases), Sign in with Apple (authentication).
• Google: Google Play Billing (purchases), Sign in with Google (authentication), Google AdMob (rewarded ads in the phone apps).
• Samsung: Galaxy Store (purchases).
• Cloudflare: hosts the web app, the account/sync service, published shared shelves (Cloudflare KV), the game-database proxy, and the analytics relay.
• Twitch Interactive (IGDB): processes game search queries and serves cover images.
• RevenueCat: purchase-management processor; receives purchase history, an app-generated subscriber identifier, and anonymous impression-level ad-revenue figures. No onward sharing, no advertising use.
• PostHog (EU hosting): analytics processor; no onward sharing or advertising use.
• Resend: email-delivery processor; sends the one-time passcode email when you sign in by email, so it receives your email address for that purpose only.

Your control & rights

• Remove games, shelves, decorations, or the whole collection at any time in the app; unshared data never leaves your device.
• Take down a shared link at any time from the app.
• Delete your account and all synced data any time from You → Account & Sync → Delete account, or sign out to stop syncing without deleting anything.
• Opt out of usage analytics any time in the app's menu (where analytics default on).
• GDPR / UK GDPR rights (access, rectification, erasure, objection, portability): contact us or use the rights portal above. For a signed-in account, Delete account is the fastest way to exercise erasure for synced data. The EEA/UK/CH analytics branch is anonymous at source, so there is no linkable analytics record tied to you to export or erase.
• CCPA / CPRA rights (California residents): you have the right to know what personal information we collect, to request its deletion, and to request correction — email support@mygameshelf.xyz or use the rights portal above. We do not sell or share your personal information (including no sale or sharing for cross-context behavioral advertising).

International transfers

Analytics are hosted in the EU (PostHog EU). Where data is processed outside the EEA/UK, it relies on appropriate safeguards (EU Standard Contractual Clauses / UK IDTA / Swiss FADP addendum) via our processors. The controller is established in the UAE; the Art 27 representatives above act as the EU/UK points of contact.

Children

MyGameShelf is not directed at children and does not knowingly collect data from children.

Changes

We may update this policy from time to time; material changes are reflected by the date above.

Contact

Questions about this policy: support@mygameshelf.xyz