Privacy Policy

Learn how GamePassTracker collects, uses, and protects your personal information.

Last Updated: September 29, 2025

1. Introduction

Welcome to GamePassTracker.online ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

  • Account Information: Email address, username, password (encrypted via Supabase Auth)
  • Profile Data: First name, last name, avatar image
  • OAuth Data: When you sign in with Google, we receive your name, email address, and profile picture
  • Contact Information: When you contact us through our forms

2.2 Content Information

  • User-Generated Content: Articles, comments, reviews, and other content you create
  • Usage Data: Game preferences, wishlists, and interaction history
  • Device Information: IP address, browser type, operating system

2.3 Automatically Collected Information

  • Analytics Data: Page views, session duration, click patterns
  • Technical Data: Device type, screen resolution, referrer URLs
  • Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

  • Create and manage your user account
  • Authenticate your identity and provide secure access
  • Display your content and manage your preferences
  • Provide personalized game recommendations

3.2 Communication

  • Send account verification and welcome emails
  • Notify you about important service updates
  • Respond to your inquiries and support requests
  • Send newsletters and promotional content (with consent)

3.3 Improvement and Analytics

  • Analyze usage patterns to improve our services
  • Monitor and prevent fraudulent activities
  • Conduct research and development

4. Third-Party Services

We work with the following trusted third-party providers:

4.1 Supabase (Database & Authentication)

  • Purpose: User authentication, data storage, and real-time features
  • Data Shared: Account information, user-generated content
  • Privacy Policy: supabase.com/privacy

4.2 Google OAuth

4.3 Content Delivery Networks

  • Purpose: Fast delivery of static assets (images, CSS, JavaScript)
  • Data Shared: IP address, browser information

5. Data Security and Storage

5.1 Security Measures

  • Encryption: All data transmission is encrypted using HTTPS/TLS
  • Password Security: Passwords are hashed and never stored in plaintext
  • Database Security: Row Level Security (RLS) policies protect user data
  • Access Control: Role-based permissions limit data access

5.2 Data Storage

  • Location: Data is stored on Supabase servers (AWS infrastructure)
  • Backups: Regular automated backups ensure data protection
  • Retention: We retain data as long as your account is active

6. Your Rights and Choices

6.1 Account Management

  • Access: View and update your personal information in your profile
  • Correction: Update incorrect or incomplete information
  • Deletion: Request deletion of your account and associated data

6.2 Data Portability

  • Export: Request a copy of your personal data in a portable format
  • Transfer: Move your data to another service (where technically feasible)

6.3 Communication Preferences

  • Email Notifications: Opt-out of promotional emails via unsubscribe links
  • Account Emails: Essential service emails cannot be disabled

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Authentication: Keep you logged in across sessions
  • Preferences: Remember your settings (theme, language)
  • Analytics: Understand how you use our service
  • Performance: Optimize loading times and user experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our service.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

11. Effective Date

This Privacy Policy is effective as of September 29, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.