Privacy Policy — lobbylob

This Privacy Policy describes how lobbylob ("we", "our", "the app") collects, uses, and shares information when you use our mobile application. By using the app, you agree to the practices described here.

1. Who we are

lobbylob is a video game tracking app developed by a solo independent developer. If you have questions about this policy or your data, contact privacy@lobbylob.com.

2. Information we collect

Account information

Email address (when you sign up with email, Google Sign-In, or Sign in with Apple)
Display name and username (chosen by you)
Authentication tokens / unique user identifier issued by our identity provider

Content you create

Game library entries (games you mark as playing, wishlist, completed, etc.)
Reviews and ratings you write
Discussion posts and replies
Friends list and friend requests
Notification preferences and account settings
Bug reports you submit, including any screenshots or videos you attach and basic device and app information, which are visible only to the lobbylob team.

Device information

Device push notification token, used to deliver friend request, reply, and game release notifications
Time zone, used to schedule notifications at appropriate local hours
Active session details (device model, operating system version, and sign-in method) so you can review the devices signed into your account and sign them out
App version and operating system, used for diagnostics
Crash reports and basic performance data (collected automatically and anonymized)

We do not collect your precise location, contacts, microphone, or camera data. We only collect photos or videos when you explicitly attach them to a bug report.

3. How we use your information

To provide core app functionality: authentication, syncing your library, displaying reviews and discussions, friend connections
To send you notifications you have opted into (friend requests, replies, daily release reminders, wishlist game releases)
To send you account-security emails, such as an alert when your account is signed into from a new device (delivered through Firebase). These are transactional messages tied to your account security, not marketing.
To improve app quality through anonymized crash and performance data
To prevent abuse, spam, and violations of our community standards

We do not use your data for advertising. We do not sell your data. We do not track you across other apps or websites.

4. Third-party services we use

We rely on the following services to provide app functionality. Each has its own privacy policy governing their handling of data:

Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging, Cloud Functions, Crashlytics): Privacy Policy
Supabase (game catalog database): Privacy Policy
Google Sign-In (optional sign-in method): Privacy Policy
Sign in with Apple (optional sign-in method): Privacy Policy
YouTube (embedded video player for game trailers, only when you tap to play): Privacy Policy
Cloudflare Turnstile (anti-spam verification at sign-up): Privacy Policy

Read-only data sources

The app fetches game catalog data from the following sources but does not send your personal information to them:

IGDB (game metadata, cover art, screenshots, trailers)
IsThereAnyDeal (PC game pricing across stores)
HowLongToBeat (gameplay duration estimates)
Steam (game data and achievements)
Wikidata (character, cast, and staff information)

We are not affiliated with any of these services.

5. Where your data is stored

Your account information and content are stored on Google Cloud Platform (Firebase) and Supabase, both of which operate data centers in the United States. By using the app, you consent to your data being processed and stored in the United States.

6. How long we keep your data

We retain your data for as long as your account is active. If you delete your account, we will delete your personal information (email, display name, authentication record) within 30 days. Public content you posted (reviews, discussion threads) may remain visible in anonymized form unless you delete it before deleting your account.

Anonymous guest accounts that remain inactive for 30 days are automatically deleted.

7. Your rights and choices

Access: You can see all of your account data inside the app at any time.
Edit: You can edit your display name, bio, avatar, reviews, discussions, and notification preferences from within the app.
Delete: You can delete your account from the in-app Account & Security screen. This removes your authentication record and personal data within 30 days.
Notification control: Toggle individual push notification categories in Settings → Notifications. You can also disable notifications entirely at the operating system level.
Block: You can block other users from their profile. A blocked user's reviews and discussions are hidden from you, and they can no longer send you friend requests.
Export: If you would like a copy of your data, contact us at privacy@lobbylob.com.

Canada

You have the right to access and correct the personal information we hold about you. If you have a concern about how we handle your data, you may contact us at the email below, and you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy authority.

California

If you are a California resident, you have the right to know what personal information we collect, to request that we delete or correct it, and to not receive discriminatory treatment for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any of these rights, contact us at the email below.

8. Children

This app is not directed at children under 13 (or under 16 in regions where that is the applicable age of consent). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us at privacy@lobbylob.com and we will delete it promptly.

9. Security

We use industry-standard security practices including encrypted transport (HTTPS), authenticated access controls, and reputable cloud providers. No system is perfectly secure; we cannot guarantee absolute security but we work to minimize risk.

If a data breach occurs that we determine poses a real risk of significant harm to you, we will notify you and the relevant privacy authorities as required by applicable law.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. We will inform users in-app of material changes.

11. Contact

Questions, requests, or complaints? Email privacy@lobbylob.com.