Privacy Policy

Effective date: 3 August 2026 · Last updated: 29 September 2026

GameRot is a side project I build on weekends. It is free, it has no ads and nothing to buy, and there is no company behind it. This page explains what it does with your information, in plain language.

“I” and “me” below mean the one person who makes and runs GameRot. If you are in the EU or UK, that person is the data controller. You can reach me at askgamerot@gmail.com.

The short version. You can play every game without an account and without giving me anything. If you choose to sign in, I get your name and email from Google or Apple. I use Firebase Analytics and Mixpanel to see roughly how the app is used: which games people play, where they stop, how often they come back. It’s the same way any solo maintainer checks whether the thing they built for fun is landing with anyone. There are no ads, no tracking across other apps, and nothing is sold or shared. Your high scores never leave your phone.

What I collect

If you sign in (optional)

Google or Apple handle the sign-in, so I never see your password. Once you have signed in I receive your name, your email address, a profile image if Google supplies one, and an account ID generated by Firebase.

If you use Sign in with Apple and pick “Hide My Email”, Apple gives me a relay address instead of your real one. Everything works the same either way.

If you join the waitlist on the website

I store the email address you type in, plus the time you submitted it. I use it for exactly one thing: emailing you when GameRot is released. Then it is done. Ask me any time and I will delete it. That is your consent withdrawn, and it is the only reason I hold the address at all.

Automatically, whether or not you sign in

Firebase Analytics and Mixpanel record:

• a random app-install ID, which resets if you reinstall;
• your device model, OS version, language, and rough region from your IP address;
• when the app is opened, how long for, and which screens you saw, so I can tell how often people come back;
• whether you get through the first-launch intro screen, so I know if it’s doing its job;
• which games you start, finish, or swipe past, so I can see which ones people actually keep playing;
• the steps you take on your way to signing in or creating an account, including if you start and don’t finish, so I can see where that flow loses people;
• events I added by hand: sign_up, login, logout, account_deleted, game_start, game_complete, game_over, game_swipe, onboarding_shown, onboarding_completed, signup_screen_viewed, signup_started, signup_skipped and signup_failed, each noting only which sign-in provider, which game, or which step was involved.

If you are signed in, your account ID is attached to these so the numbers make sense across sessions and across both tools. That link ends when you log out or delete your account.

Your high scores stay on your phone

Scores are written to the app’s private storage on your device. They are never sent to me, to any server, or to anyone else. I cannot see them and I cannot restore them. They disappear when you uninstall the app.

What I never collect

• No advertising ID. The app does not link Apple’s AdSupport framework at all.
• No tracking of you across other apps or websites, which is why you never see the App Tracking Transparency prompt.
• No precise location.
• No contacts, photos, microphone, camera, health data or files.
• No payment details: there is nothing to buy.
• No biometric or other sensitive data.

What I do with it

Only these things:

• make your optional profile work, and show your username and picture in the app;
• see which games people actually keep playing, where the app loses people, and how often people come back, so I know what is worth fixing or building next;
• answer your emails and deletion requests;
• follow the law if I am required to.

GameRot doesn’t have a growth team or a roadmap driven by metrics. I look at this data the way you’d check if anyone starred your repo, mostly to know if the thing I built on weekends is actually fun for other people, and where it breaks. That curiosity is the whole reason any of this exists.

I do not sell your data. I do not share it for advertising. I do not use it to train AI models.

Why I am allowed to (EU and UK)

If GDPR or UK GDPR applies to you, my legal grounds are: your profile is processed because it is needed to give you the account you asked for; analytics rely on my legitimate interest in knowing whether the app works, which I think is fair given the data is pseudonymous and there is no advertising; support requests are handled to meet legal duties and that same legitimate interest; and anything you separately agreed to relies on your consent, which you can take back whenever you like.

Who else sees it

I do not sell anything to anyone. A few companies are involved because I use their tools:

• Google: Firebase handles sign-in, analytics and hosting, so it processes account details and usage events on my behalf. What Google does with it is at firebase.google.com/support/privacy.
• Mixpanel: handles the usage funnels and dashboards described above, so it processes the same kind of usage events as Firebase Analytics. What Mixpanel does with it is at mixpanel.com/legal/privacy-policy.
• Apple: only if you use Sign in with Apple, and only for the sign-in itself.

How long I keep it

• Account details: until you delete your account, which removes them immediately.
• Analytics: Google (Firebase) holds these for at most 14 months, then deletes them or keeps only aggregate totals. Mixpanel holds them under its own retention setting in my project, which I keep capped rather than what Mixpanel defaults to.
• Waitlist address: until you ask me to remove it.
• High scores: on your phone, until you delete the app. Never with me.

Your rights

You can ask me for a copy of your data, ask me to fix it, ask me to delete it, ask me to stop or limit what I do with it, or take back consent you gave. Just email me. I will reply within 30 days, and usually a lot sooner, since it is one person reading one inbox.

Deleting your account

You do not need to ask me. Open the app, tap the profile icon in the top-right, choose Delete account, and confirm. It happens straight away. If you have not signed in recently you may have to sign in again first. That is there so nobody else can delete your account, and deletion follows immediately. If you signed in with Apple, I also revoke the Apple token.

If you have already uninstalled the app, email me instead; the Delete Account page has the details. Analytics events already recorded are pseudonymous and age out as described above.

Where your data goes

Google, Mixpanel and Apple are US companies, so data may be stored and processed in the United States and other countries whose privacy laws differ from yours. When data leaves the EU, UK or Switzerland, it travels under the standard legal safeguards those providers use for international transfers.

Children

GameRot is not aimed at children under 13, or under the minimum age where you live, and I do not knowingly collect anything from them. If I find out I have, I will delete it promptly. A parent or guardian who thinks their child has sent me something should email me.

Keeping it safe

Everything travels over encrypted connections. Sign-in is handled by Google and Apple, so I never touch your password. Access to the Firebase project is restricted to me. That said, no system is perfectly secure and I am not going to pretend otherwise.

Links to other places

The app and site link out to other websites sometimes. I do not control them and I am not responsible for what they do with your data. Have a look at their own policies before handing anything over.

Changes

If I change this page I will update the date at the top, and if the change actually matters I will say so in the app or by email where the law requires it.

Getting in touch

Any question, request or complaint about this policy or your data:

askgamerot@gmail.com

Which law applies

Indian law governs this policy, without taking away any data protection rights you have where you live.

GameRot · Privacy Policy · Effective 3 August 2026