Privacy
The app works without an account, and then nothing leaves your computer. This page is about the optional account. It keeps your trophies when you play on another computer and puts you on the leaderboard.
What the server keeps
- Your email address and player name
- Your password as a scrypt hash. The password itself is not stored
- Sign-in tokens, also as hashes, so the app stays signed in
- Game data from the app: achievements with their dates, achievement counters, walkthrough steps marked done, play time, the last place seen and the shop items you bought
Your settings stay on your computer. That includes where your ROMs are and your MobyGames key.
What is public
The leaderboard shows your player name, points, level and trophy counts. It never shows your email address.
Addresses and logs
The web server keeps no access log. To slow down password guessing, the server counts sign-in attempts per network address in memory for up to an hour. These counts are not saved anywhere.
Where
The server is a Hetzner machine in Helsinki, Finland. Password reset emails go out through Resend, which sees your email address for that one message.
How long
Your data stays until you delete the account. In the app, open Profile and click Delete account. The account and its data are removed from the server at once. Database backups roll over within 14 days, and Hetzner's own server backups within 7.
Your rights
You can see your data in the app and delete it there. Your own copy is in the settings file on your computer.
Who runs it
Kemény Gergely, 2363 Felsőpakony, Eötvös u. 28., Hungary. Write to this address with any question about your data. You can also complain to the Hungarian data protection authority (NAIH, naih.hu).