Privacy policy
Last updated
Prysm is a video-game backlog tracker. This policy says what data we collect, how, why, who receives it, and how you can delete it.
Publisher: TODO — legal entity name (Josh). Governing law: TODO — jurisdiction (Josh). Effective: TODO — go-live date.
1. What we collect, and how
Everything below is tied to your account. All of it is deleted when you delete your account, with the two exceptions named in section 3 (a purchase log, and emails you sent to support).
| Data | How we get it | Why |
|---|---|---|
| Email address and a sign-in credential | You, at sign-up, or from Google if you use “Continue with Google” | Signing you in. You sign in with a one-time emailed code, or with your Google account |
| Handle, display name, bio, profile photo or avatar colour, platforms you list | You | Your public profile |
| Your library: status, rating, notes, hours played, platform, dates added and finished | You, or an import you start | The core product |
| Wishlist, release reminders, games you watch | You | Saving games and release-day notifications |
| Games you open (viewing history) | Recorded automatically when you open a game page | The “recently viewed” row |
| Posts, comments, likes, poll votes, reposts, shares, images on posts | You | The social feed |
| Who you follow and who follows you; who you block; reports you file | You | The feed, safety and moderation |
| Notifications addressed to you, and who triggered each | Generated by the app | The notification bell and push |
| Links you share into the app (the URL, text read from it, the game it matched) | You, sharing from TikTok or YouTube | Turning a shared video into a library entry |
| Search phrases typed into vague search, and the result | You | Answering fuzzy searches |
| Linked gaming accounts: platform, its user id, display name and avatar URL, link date, last import counts | Steam, Xbox or Android, with your consent | Importing your library |
| Subscription state: whether Pro is active, until when, product and store, subscription-provider id | Our subscription provider, from the store | Unlocking Pro |
| Emails you send to support | You | Answering you |
Two things worth stating plainly
- Viewing history is recorded for you, not by you. Opening a game page saves a row. It is the one piece of behavioural data we collect without an explicit action from you.
- Images on posts and profile photos are public. An image you attach to a post, or upload as your profile photo, can be fetched by anyone who has its URL, for as long as it exists. Deleting your account removes it.
What we do not collect
No location, no contacts, no device advertising identifier, no analytics SDK and no ad network. We never store your passwords or access tokens for Steam, Xbox or any other gaming platform: Steam uses OpenID and Xbox uses a one-time claim code, and neither credential is kept.
2. Who receives your data
We do not claim your data is never shared. These services receive personal data, and we require them to protect it to the standard this policy describes.
| Service | What reaches them | Why |
|---|---|---|
| Supabase | Everything in section 1: database, sign-in and file storage (United States) | Hosting |
| RevenueCat | An app-user id tied to your account, and purchase events from the store | Subscription management |
| Resend | Your email address and the one-time code in each sign-in email | Sending sign-in emails |
| OneSignal | Your account id, a push token, a device record and the text of each notification | Push notifications |
| DeepSeek | The text of a vague-search query. No account identifier is attached | Interpreting fuzzy searches |
| Steam | Your Steam id, when you choose to link | Reading your owned games |
| Xbox, via OpenXBL | Your Xbox identity, when you choose to link | Reading your game history |
| TikTok and YouTube | The URL you shared, fetched to read its caption | Matching a video to a game |
| If you choose “Continue with Google”, Google performs the sign-in and returns your Google account’s email address and basic profile information | Signing you in | |
| Apple and Google | Purchase and subscription processing. We never see a card number | Payments |
| Vercel | Your IP address and browser details, in standard request logs, when you visit this website | Hosting this website |
| Cloudflare, then Google (Gmail) | Emails you send to support@prysmblast.com: Cloudflare routes them to our support inbox, which Gmail hosts | Receiving support email |
Game information comes from IGDB (with Twitch issuing IGDB’s access token). Our servers query IGDB on their own credentials and attach no user identifier, so these two receive no personal data. Game data provided by IGDB.com.
3. Retention, deletion and consent
- We keep your data for as long as your account exists.
- Deleting your account deletes all of it. In the app, open the Profile tab and choose Delete account; it is immediate. Without the app, sign in on the web deletion page to delete immediately; if you cannot sign in, email us and we will complete the request within 30 days.
- We keep a log of store purchase events for billing and accounting. It never contained your email address, and once your account is deleted the account identifier in it points at nothing.
- Emails you send to support live in our support inbox, not in your account, so deleting your account does not remove them. Ask and we will delete them.
- You can unlink a gaming account on its own without deleting your Prysm account.
- You can ask us for a copy of your data, or to correct it, at support@prysmblast.com.
Subscriptions. Prysm Pro is billed by the app store you bought it from, and deleting your account does not cancel it: Apple does not permit developers to cancel an App Store subscription at all, and a Google Play subscription has to be cancelled in Play. We will not delete an account with an active subscription until you have been shown where to cancel it (Apple, Google Play).
4. Security
Data is protected with transport encryption and access controls.
5. Children
Prysm is not intended for children under 13. Accounts we find belong to a child under 13 are removed.
6. Changes
We will update the date at the top of this page when this policy changes.
7. Contact
support@prysmblast.com. See also Support.