New Game+ — Privacy Policy

Last updated: [DATE PUBLISHED]

Who we are

New Game+ ("the app," "we," "us") is operated by New Game + LLC, contactable at support@newgameplus.gg. New Game+ lets you log the games you've played, rate and review them, and get recommendations for what to play next.

What we collect

• Account information. Your email address and password (passwords are stored hashed by our authentication provider, never in plaintext). If you sign in with Google or Apple, we receive a basic identifier and, where you permit it, your name.
• Profile information. Username, display name, optional bio and avatar.
• Your game activity. The games you log, their status (playing, finished, backlog, etc.), your ratings, reviews, lists, and "hype" reactions.
• Taste profile. A summary of your preferences derived from your ratings, which you can view and edit, used to generate recommendations.
• Steam data (only if you connect Steam). Your public SteamID and the list of games in your Steam library, used to import your library. We verify your SteamID through Steam's official OpenID sign-in; we never see or ask for your Steam password.
• Purchase status (when subscriptions launch). Whether your account has an active NG+ subscription, via a receipt from the app store. We never see your card number — payment runs entirely through Apple or Google.
• Basic usage and diagnostic data needed to operate, secure, and debug the service (for example, request logs and rate-limit counters).

We do not collect precise location, contacts, browsing history, or payment card numbers. The app currently includes no third-party analytics or advertising SDKs.

How we use it

To create and secure your account; to store and display your library, ratings, lists, and reviews; to generate "what to play next" recommendations and taste summaries; to import your Steam library when you ask; to enforce free-tier usage limits and prevent abuse; and to maintain, debug, and improve the service. We don't use your data for advertising, and we don't sell it.

AI-generated content

Recommendations, "why you'd like it" explanations, and taste summaries are generated with artificial intelligence (large language models), using the game metadata and the ratings and preferences you provide. To do this we send our AI provider (see next section) your editable taste summary, your rating history in summarized form, and metadata about candidate games — never your email address, password, or account identifiers. AI-generated text can be inaccurate; your taste summary is editable so you always have the last word on how the app describes you.

What's public

New Game+ is a social app. By default your profile, your game log, ratings, reviews, lists, and follows are visible to other users — similar to Letterboxd. Don't post anything in a review or bio you wouldn't want public. Your email address is never public. (If private accounts ship, this section will be updated to describe them.)

Who we share it with (service providers)

We share data only with providers that run the service, each acting on our behalf:

• Supabase — database, authentication, and edge-function hosting (servers in the United States).
• IGDB / Twitch (Amazon-owned) — game metadata. We send search terms and game IDs, not your identity.
• Steam (Valve) — only if you connect Steam, to verify your SteamID and fetch your list of owned games.
• AI provider: OpenRouter. Recommendation and summary text is generated through OpenRouter, a US-based routing service, which passes the request to a third-party model host. Depending on the model in use, **processing may occur on servers outside the United States** (current models include DeepSeek-family models; some DeepSeek first-party hosting is in China). What we send is described in "AI-generated content" above; we do not send your email, password, or account identifiers. [BEFORE PUBLISHING: enable OpenRouter's zero-data-retention / no-training routing setting in the account dashboard, then add: "and we use the provider's zero-data-retention routing." If not enabled, delete this bracket and ship the sentence without that claim.]
• RevenueCat (when subscriptions launch) — subscription receipt validation. Receives a pseudonymous app user ID and store receipt data; never your card number.

We do not sell your personal information, we do not share it with data brokers or advertisers, and we don't use cross-app tracking.

Data retention and deletion

You can permanently delete your account and all associated data at any time in the app: Profile → Delete account (two-step confirmation). Deletion is immediate and irreversible: it removes your profile, library, ratings, reviews, lists, taste profile, hype reactions, and Steam link. You may also email support@newgameplus.gg to request deletion. We retain data only as long as your account exists, except for minimal records we must keep to comply with law or resolve disputes.

Your rights

Depending on where you live (for example, the GDPR in the EU/UK, or state privacy laws like the California CCPA/CPRA, Texas TDPSA, or Virginia VCDPA), you may have rights to access, correct, export, or delete your personal data, to opt out of sales or targeted advertising (we do neither), and to non-discrimination for exercising those rights. We honor access, correction, export, and deletion requests for everyone, regardless of where you live. Use the in-app tools or contact support@newgameplus.gg; we'll respond within 45 days. If you're in the EU/UK, our legal bases are performance of contract (running the service you signed up for) and legitimate interests (security and abuse prevention), and you may lodge a complaint with your supervisory authority.

Children

New Game+ is not directed to children under 13, and we don't knowingly collect personal information from them. If we learn we've collected data from a child under 13, we'll delete it — contact support@newgameplus.gg. The app's store age rating is set consistently with this policy. Game content displayed in the app (covers, descriptions) may include mature-rated titles.

Security

We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, database row-level security scoping every row to its owner, column-level restrictions on sensitive fields, server-side rate limiting, and storage of authentication tokens in the device's secure keystore. No system is perfectly secure, but security findings are tracked and fixed before launch — and we'll notify you of any breach as required by law.

Changes

We'll update this policy as the app evolves and revise the "Last updated" date. For material changes we'll give notice in the app before they take effect.

Contact

support@newgameplus.gg · New Game + LLC · [MAILING ADDRESS — use the Northwest registered-agent address]