Privacy Policy
This policy explains how MyGameList handles personal information when you use the service or contact us.
Last updated: October 11, 2026
Who operates MyGameList
MyGameList is independently operated. In this policy, “we,” “us,” and “our” refer to the operator of MyGameList. For privacy questions or requests, contact contact@mygamelist.co.
Information we handle
- Account information: your email address, username, account identifiers, account creation details, and email verification status.
- Sign-in information: protected password credentials if you use email and password, or account identifiers and profile information provided by Google if you choose Google sign-in. This can include your name, email address, and profile image, depending on the information Google supplies.
- Profile information: your uploaded avatar, biography, location, social usernames and links, featured-game and banner selections, and profile display and privacy preferences.
- Game collection information: the games you log, statuses, scores, platforms, playtime, replay counts, dates, difficulty and emotional-impact ratings, completion details, favorites, notes, and privacy settings you choose to save.
- Diary information: gaming activities, dates, time records, notes, and saved game and platform details used to display your history.
- Community content and interactions: reviews, custom lists and their game selections, comments and replies, votes, spoiler flags, visibility choices, and associated timestamps.
- Content reports: the reporting account's identifiers, username and email address, the reason and explanation, and a snapshot of the reported content and relevant author and page details used to review the report.
- Technical information: session identifiers, IP addresses, browser information, timestamps, and records needed to operate authentication, deliver account emails, troubleshoot problems, and protect the service.
- Correspondence: the information you send when asking for help, suggesting a feature, reporting a problem, or making a privacy request.
How we use information
We use this information to create and maintain accounts, sign users in, display profiles, store game collections and Diary history, publish reviews and lists according to their visibility settings, support comments and voting, deliver account and content-report emails, respond to requests, investigate abuse, and maintain the security and reliability of MyGameList. We use analytics to understand page usage and performance.
Where applicable law requires a legal basis, we process information as needed to provide the service you request, pursue legitimate interests in operating and protecting it where permitted, meet legal obligations, or obtain consent where required. Choosing Google sign-in authorizes that sign-in flow; it is not permission for unrelated uses of your information.
Public and private information
When your profile is public, other people can view your username, profile address, profile details you choose to share, and public game logs. Public logs can include scores, playtime, dates, and notes. New logs are public by default unless you select the private option.
Private game logs are hidden from other users through the service. They remain stored and processed so that we can provide your collection and operate MyGameList. Your account email address is not included in the public profile response.
You can make your entire profile private in Profile settings. This restricts profile access to you and also hides your public lists and reviews from other users and discovery. Your content remains stored so that we can provide the service.
Reviews and custom lists have their own public or private visibility settings. Their visibility is separate from the privacy of an individual collection log. Comments and replies are shown within the discussions where they are posted; do not put sensitive personal information in public discussions.
Your Diary is public by default when your profile is public and has a separate privacy setting in Profile settings. When you make your Diary private, other users cannot see its activities, dates, notes, calendar markers, or time totals. Diary entries for a game marked private in your collection are also hidden from other users. Changing Diary privacy does not change collection visibility.
Removing a game from your collection keeps its Diary history. The saved game and platform details needed to display that history may remain stored after removal.
Please avoid putting sensitive information about yourself or others in public notes, profile details, reviews, lists, or comments. Other people may copy information you make public; changing visibility or deleting content cannot remove copies held outside MyGameList.
Services involved in operating MyGameList
MyGameList uses services for authentication, hosting, database storage, email delivery, and game information. These services receive information needed for their role.
If you use Google sign-in, Google processes information under its own privacy policy and supplies information needed to authenticate your account. Resend is used for production account-email and content-report delivery and processes recipient addresses and message content. IGDB provides game information and artwork; loading artwork from its servers sends normal web-request information, such as your IP address, to those servers.
RackNerd hosts the application and database. Amazon Web Services stores encrypted recovery backups and profile images, and CloudFront delivers profile images. Purelymail handles correspondence sent to our contact and reporting mailboxes. Availability monitoring uses UptimeRobot and Healthchecks.io; job heartbeats report completion or failure without sending application logs or user payloads.
Cloudflare helps deliver and protect the website and processes web-request information for those purposes. We also use Cloudflare Web Analytics to measure page views and website performance.
When you submit an in-app content report, a snapshot of the report is stored and queued for email to our reporting mailbox. It includes the reporter's account details and email address, the report reason and explanation, and the reported content and relevant context. This supports manual review even if the content later changes.
Service providers may process information outside your country. Where required, appropriate arrangements must be in place for international transfers. Contact us for information about the providers and transfer arrangements applicable to your account.
How long we keep information
We retain account and profile information, game collections, Diary history, and community content while your account remains open and as needed to provide the service. You can remove individual game logs and manage your other content through the service, or request deletion of your account. Removing a collection log does not remove its Diary history.
Technical, support, and content-report records are retained for the purposes for which they were collected, including resolving requests, investigating security issues, and meeting applicable legal obligations. We review whether information is still needed and delete it or make it anonymous when it is no longer required.
When we delete information from active systems, copies may remain temporarily in backups until those backups expire. Recovery backups normally cover a 30-day window and may include an older base backup needed for recovery. Failed backup schedules can cause older copies to remain longer. Operational logs are kept for up to 30 days; size limits can remove them earlier. Backup copies are restricted to recovery purposes, and deletions must be reapplied if a backup is restored. We may retain limited information where required by law or necessary to establish, exercise, or defend legal claims.
Your choices and requests
You can edit your profile, manage game logs and other content, and change the available privacy settings through the service. To request a copy of your account data, correct information you cannot edit, or delete your account, email contact@mygamelist.co. We handle these requests manually and may verify your identity before acting.
Depending on the law that applies, you may also have rights to object to or restrict processing, receive portable data, withdraw consent for processing based on consent, or complain to an appropriate data-protection authority. We respond within applicable legal time limits. Withdrawing consent does not affect processing that was lawful before withdrawal.
Do not send your password, authentication tokens, or password reset links with a request.
Children
MyGameList accounts are for people aged 13 and older. We do not offer accounts for children under 13. If you believe an account belongs to someone under 13, contact contact@mygamelist.co. When we learn that we hold personal information from an account holder under 13, we take steps to remove the account and delete the associated information.
Additional rules may apply to minors in their country. This age policy does not override protections or parental-consent requirements imposed by applicable law.
Changes and contact
We may update this policy when the service or our practices change. We will update the date on this page and provide additional notice when required. Contact contact@mygamelist.co with any questions.