Privacy Policy

StackClear is an independent service operated by a sole developer in Quebec, Canada. StackClear is responsible for the personal information described in this policy, and its operator serves as Privacy Officer. Privacy questions, access or correction requests, complaints, withdrawal requests, and deletion requests can be sent to [email protected].

This policy applies to the StackClear website, Android application, accounts, early-access signup, and related services. It does not replace the privacy policies of app stores, identity providers, payment providers, connected gaming services, or other third parties you choose to use.

We may collect an account identifier, email address, authentication-provider identifiers, username, display name, avatar, profile background, preferences, privacy and audience settings, linked gaming identifiers, and session information. When you use the website or app, our providers may process an IP address, browser or device type, operating system, request time, referring page, approximate region, diagnostics, and security logs. StackClear uses local or session storage to keep sessions and interface preferences; it does not set advertising cookies. Patreon and infrastructure providers may use their own necessary storage or cookies under their policies. Game artwork, achievement icons, and trailers load directly from IGDB, connected gaming platforms, RetroAchievements, and YouTube, which receive standard request information such as your IP address; YouTube may also use its own cookies or storage when you play a trailer. We do not receive your external gaming-service password or full payment-card number.

We may process the games in your library, platforms, ownership source, status, progress, playtime, ratings, dates, achievements and unlock dates, reviews, review comments and likes, private notes, custom lists, favorite games, XP, statistics, daily check-ins, Weekly Drop and community-event rewards, equipped profile items, follows, mutual-follow relationships, blocks, notifications, social activity, feature requests, comments, content reports, and event-alert choices. We also process information generated when you use catalog, search, profile, leaderboard, review, custom-list, and social features.

When you request an import or account connection, we process the identifiers, authorization results, profile information, library metadata, and achievement or trophy data needed to complete it. Supported sources include Steam, Epic Games, GOG, Xbox or Microsoft services (reached through OpenXBL), PlayStation or Sony services, and RetroAchievements. For RetroAchievements, you provide a public username, and we retrieve that profile’s played games, achievements and unlock dates, Casual and Hardcore progress, awards, and recorded playtime. For Epic Games, we keep an encrypted refresh token so StackClear can refresh your Epic library without asking you to sign in again, until you disconnect it. If you are a Pro member and turn on auto-sync, StackClear repeats these imports for your connected accounts about once a day in the background, without a new request each time, until you turn auto-sync off, disconnect the account, or Pro access ends. IGDB or Twitch supplies game-catalog metadata. Connections are optional and can be disconnected where that control is available.

If you customize your profile, we process uploaded avatars or backgrounds. If you enable push notifications, we process an Expo push token, device platform, preferences, and delivery status. If you connect Patreon, we process your Patreon user and membership identifiers, membership and charge status, entitled tier identifiers, connection timestamps, and encrypted OAuth access and refresh tokens so we can verify Pro access. Patreon handles payment details; StackClear does not receive your full card or banking information. Early-access signup includes your email, locale, signup source, and request time. Feedback, bug reports, and support messages may include submitted text, an image attachment, account identifier, and account email.

We use information to create and secure accounts; sync and display libraries and profiles; calculate statistics, XP, and rankings; provide social features, event alerts, and notifications; complete requested imports and, when you turn it on, Pro auto-sync; verify and administer Pro access; send authentication and essential service emails; manage Android early access; respond to support and feedback; moderate public content; prevent abuse; diagnose failures; and meet legal obligations. Depending on the activity and applicable law, processing is based on performing our agreement with you, your consent, compliance with law, or legitimate interests such as security, service operation, support, and improvement. We do not sell personal information, use it for behavioural advertising, or display third-party ads.

Your username, avatar, profile background, avatar outline, equipped profile title, level, and supporter status remain public even when your profile is private. In Privacy & Content, you choose who can see your full name and biography, library and favorites, play history and statistics (including leaderboard placement), achievements, reviews, custom lists, and activity: the public, mutual follows, or only you. Lists can also be unlisted, so only people with the link can open them. The most restrictive applicable setting wins, and members you block, or who block you, cannot see this content. Uploaded avatars and backgrounds are public media, so do not upload images you want kept confidential. Reviews and custom lists are visible to the audience you choose, and comments on a review follow that review’s audience; feature requests and their comments are visible to other people.

We disclose information only as needed to operate StackClear, complete your request, protect rights and safety, or comply with law. Providers include Supabase for authentication, database, storage, and server functions; Cloudflare for website delivery, security, DNS, and the Steam callback; Google, Firebase, Google Play, Expo, and Resend for platform services, push delivery, app distribution, and email; Patreon for membership billing and Pro-status verification; Linear for private bug reports and attachments; Steam, Epic Games, GOG, Microsoft, Sony, RetroAchievements, IGDB, and Twitch for connections, imports, achievement data, and catalog data; OpenXBL, an independent Xbox data service, which receives the Xbox gamertag or Xbox user ID and game identifiers needed to look up Xbox profiles, games, and achievements; YouTube for game trailers you choose to play; and OpenAI for automated harmful-content checks on text submitted for publication. OpenAI receives only the public text being checked, not StackClear account identifiers, emails, private library notes, private custom-list text, private bug reports, or private content-report details. OpenAI states that Moderations API inputs are not used for training and have no provider abuse-monitoring or application-state retention. If public content is blocked, you may request human review at [email protected]. Providers process information under their own terms and privacy policies.

StackClear and its providers may process or store information outside Quebec, your province or state, Canada, the European Economic Area, or the United Kingdom. Information in another jurisdiction may be subject to that jurisdiction’s laws and lawful-access requirements. We assess disclosures as required, use established providers, and limit information to what is reasonably needed for the service.

We retain account and synced information while your account is active or as needed to provide the service. Early-access signup information is retained until the Android public launch and is then removed from the invitation list. Security, fraud-prevention, tax, accounting, dispute, or legal records may be kept longer when required. Account deletion removes current uploaded avatars and profile backgrounds before deleting the authentication account and associated StackClear records; if that cleanup cannot complete, the deletion stops and can be retried. Limited backups, provider logs, private support issues, or legally required purchase records may remain for a reasonable period.

You can update profile information, change privacy, audience, notification, and auto-sync preferences, disconnect supported services, clear local data, delete synced library data, or delete your account through available settings. You may contact the Privacy Officer to request access, correction, deletion, withdrawal of consent, or a portable copy where applicable, and to challenge compliance. Depending on where you live, you may also have rights to object to or restrict processing and to complain to a privacy regulator. Quebec complaints may be directed to the Commission d’accès à l’information. We may verify your identity before completing a request.

We use reasonable administrative, technical, and access-control safeguards, including authenticated access, database row-level security, restricted service credentials, and limited provider disclosures. No service can guarantee absolute security. Keep your sign-in method secure and contact [email protected] if you believe your account or information has been compromised.

StackClear is intended for users aged 14 and older and is not directed to children under 14. We do not knowingly collect personal information from a child under 14. A parent or guardian who believes a child under 14 provided personal information should contact [email protected] so we can investigate and delete it where appropriate.

We may update this policy to reflect changes in the service, providers, practices, or legal requirements. We will update the effective date and provide additional notice when a change is material or when required by law. Contact the StackClear Privacy Officer at [email protected].