Privacy Policy

The controller of your personal data is Mauricio Borges Reis, an individual (sole proprietor) based in Brazil, who operates PLYSE at https://plyse.app. For any privacy question or request, email support@plyse.app.

You can browse PLYSE without an account. In that case your list, follows and settings stay in your browser's storage on your device and are not sent to us.

The table below lists what we process when you use PLYSE, and the legal basis we rely on under the EU and UK GDPR.

Visit counting without cookies.To know how many people visit, PLYSE counts page views without cookies or personal identifiers. For each page view we record only the page path (dropping any query string except the utm_source, utm_medium and utm_campaign campaign tags), the referring site's domain, the country our host derives from the request, and whether the device is mobile or desktop. These are added to daily totals; we don't store your IP address, browser details or any ID, so the totals can't be linked to you.

We don't make decisions about you with legal or similarly significant effects based only on automated processing.

These providers process personal data on our behalf, under contracts that limit how they can use it:

• Supabase: sign-in, database and file storage (profile pictures), and account emails.
• Vercel: hosting, server functions and request logs.
• PostHog: product analytics, only if you accept analytics.
• Browser push services (for example Google for Chrome and Android, Mozilla for Firefox, Apple for Safari): deliver push notifications to your device. The notification content is encrypted so the push service cannot read it.
• Vercel AI Gateway and the AI model provider it routes to (currently OpenAI): translate and tidy up public game texts such as game summaries and update titles. We don't send your personal data for this.
• Paddle, when Premium launches: Paddle sells Premium as Merchant of Record and processes payments. For payment and tax data, Paddle acts as an independent controller under its own privacy policy.

Third parties whose content you load

• IGDB (owned by Twitch)is our source of game data. Cover art and screenshots load from IGDB's image servers, which receive your IP address and browser details.
• YouTube (Google) and Twitch: video thumbnails load from YouTube's image servers. Trailers and videos play in embedded players (YouTube in its privacy-enhanced mode), and event pages may embed an official YouTube or Twitch broadcast. Once a player loads, the platform may set cookies and collect data under its own privacy policy.
• Stores and affiliate networks: when you click a link to a store, you leave PLYSE. The store, and any affiliate network involved, may set cookies to attribute your purchase. Their privacy policies apply. See our Affiliate Disclosure.

We are based in Brazil, and our providers operate in the United States and other countries, so your data is processed outside your country, including outside the EU and UK. Where EU or UK law requires it, we rely on recognized safeguards, such as adequacy decisions, the EU-U.S. Data Privacy Framework and its UK extension where a provider is certified, or the Standard Contractual Clauses (with the UK addendum) that our providers offer.

• Account data(profile, preferences, list, follows, history, personalization signals, devices and notification records) is kept while your account exists. When you delete your account, it is deleted. Copies can remain in our providers' backups for a limited time until they are overwritten.
• Premium waitlist entries are kept until we have sent the Premium launch emails, or until you unsubscribe or ask us to delete yours, whichever comes first.
• Analytics events are tied only to a random ID and are kept for a limited period set in our analytics provider.
• Server logs are kept for a short period by our hosting provider.
• Emails you send us are kept as long as needed to handle your request and any follow-up.
• Billing records, once Premium launches, are kept by Paddle and us for as long as tax and accounting laws require.
• Data in your browser stays on your device until you clear it.

EU and UK (GDPR and UK GDPR)

You can ask to access your data, get a copy in a portable format (export), correct it, delete it, restrict its use, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time; this does not affect processing that already happened. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).

California (CCPA/CPRA) and other US states

You can ask to know what personal information we hold about you, and to correct or delete it. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We won't treat you differently for using your rights.

Brazil (LGPD)

You have similar rights under the LGPD, including confirmation, access, correction, deletion and portability, and you can complain to the ANPD.

How to use your rights

• Signed in: go to Account → Security to export your data or delete your account. See Delete your account for step-by-step instructions and what gets deleted.
• Or email support@plyse.app from the address on your account. We may need to confirm it's you before acting, and we will reply within the time the law requires.
• To leave the Premium waitlist, use the unsubscribe link in any email from us, or email us.

PLYSE itself does not use advertising cookies. It stores some information in your browser (local storage and similar technologies):

• Essential: your sign-in session, settings, saved list and follows, region and platform choices, and short-lived technical markers (for example, to avoid counting the same action twice). These are needed for the service to work and don't require consent.
• Analytics, only with your consent: a random ID used for product analytics (PostHog).
• Media embeds, only with your consent: YouTube and Twitch players can set their own cookies when they load.
• Affiliate partners: stores and affiliate networks may set cookies on their own sites after you click a store link. PLYSE does not set these.

You can change your choices at any time with "Cookie settings" in the footer.

PLYSE is not directed at children under 13. You must be at least 13 to create an account, or older where local law requires a higher age (see our Terms). If you believe a child has given us personal data, contact us and we will delete it.

Data is encrypted in transit (HTTPS). Database access rules ensure each account can only read its own data, and server keys never reach the browser. No system is perfectly secure; if a breach affects you, we will notify you and the authorities where the law requires.

We will update this policy when our data practices change. The "Last updated" date above shows the current version. For significant changes, we will tell you in the app or by email.

Privacy questions and requests: support@plyse.app. See also the Contact page.