Privacy Policy

1. Scope and controller

This Privacy Policy explains how Marcos Morais ("we," "us," or "our") processes information when you use the Played application for iPhone, iPad, and Mac, its widgets and system integrations, and related online services (collectively, the "Service").

For applicable privacy laws, the data controller is:

Marcos Morais
Email: marcosatmorais@gmail.com
Website: marcostmorais.com

2. Information we process

Personal library and journal data

Played stores the games you add, planning states, playthroughs, platforms, hours, milestones, timeline events, tags, custom and Smart Lists, favorites, private reviews, preferences, and screen customizations. This information is stored locally using Apple's SwiftData framework. If iCloud synchronization is available and enabled for your device, Apple privately synchronizes this data through your iCloud account using CloudKit.

We do not receive or operate the private CloudKit database that stores your personal library. Apple processes that data under your relationship with Apple.

Catalog requests and cached content

When you browse, search, or open game details, Played sends the requested section, search terms, game identifier, and ordinary network information such as IP address and request metadata to our Firebase Cloud Functions. The function retrieves catalog information from IGDB. Catalog responses and artwork may be cached on your device to improve speed and offline availability.

Anonymous community participation

Played creates a random installation identifier. This is not an advertising identifier and is not intended to identify you by name. When you use community features without signing in, this identifier accompanies requests so we can associate your reviews, hype reactions, aggregate library state, reports, and rate limits with that installation.

Community content may include the game involved, rating, review text, spoiler setting, display name, hype or reaction state, whether a game is counted as backlogged or completed, report information, and timestamps. Reviews and associated display names are public.

Optional profile and Sign in with Apple

If you create a profile, Played sends your Sign in with Apple identity token and a security nonce to our server for verification. We store a cryptographic hash derived from Apple's stable account identifier rather than the Apple identifier itself. We do not store your Apple ID password, and the current service does not store the email claim from your Apple identity token.

We may store your profile identifier, name, nickname, biography, privacy setting, follower and following relationships, profile image, badge identifiers, membership presentation, timestamps, and an opaque session token hash. Session tokens expire after 90 days unless revoked sooner.

Public profiles and published library snapshots

Profiles are private by default. If you make your profile public, Played publishes a limited snapshot that can include selected game identifiers and names, cover image links, current high-level placement or status, platform, favorite ranking, badge identifiers, and update dates. It does not publish your private playthrough timeline, milestones, manual hours, tags, custom lists, private reviews, or private CloudKit records.

After the first public snapshot establishes a baseline, later status changes may create public activity entries for people who follow you. Returning a profile to private prevents other users from accessing its public profile, library, connections, and activity through the Service.

Purchases and subscriptions

Played uses Apple's StoreKit for Played+ subscriptions and optional support purchases. Apple processes billing details. Played receives product information, transaction verification results, subscription status, renewal state, expiration, revocation, and offer eligibility needed to provide purchased features. We do not receive your full payment-card details.

Device features you choose to enable

• Notifications: reminder preferences and scheduled local notifications are handled on your device.
• Calendar: if you grant permission, Played can create release events in a calendar you select. Calendar access is used only for that requested feature.
• Spotlight, widgets, Siri, and Shortcuts: limited library information may be indexed or copied to an Apple App Group on your device so these Apple system features can work.
• Photos: if you choose a profile picture, the selected image is uploaded to our profile service. Played does not require broad access to your photo library when the system picker can provide the selected item.

Technical information

Our hosting providers may automatically process IP addresses, dates and times, request paths, response status, device or browser network metadata, and security logs when you communicate with our servers. Played also produces privacy-aware diagnostic logs on your device. The current version does not include third-party advertising, cross-app tracking, or a product analytics SDK.

3. How we use information

Depending on your location, our legal bases may include performing our contract with you, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the Service without overriding your rights. Where consent is the legal basis, you may withdraw it at any time.

We do not use your data for solely automated decisions that produce legal or similarly significant effects.

4. Service providers and sharing

We do not sell or rent personal information. We disclose information only as described below:

• Apple: provides iCloud and CloudKit synchronization, Sign in with Apple, StoreKit payments, notifications, Calendar, Spotlight, widgets, Siri, and Shortcuts. Apple processes information under its own privacy terms.
• Google Firebase and Google Cloud: host our Cloud Functions, Firestore community and profile data, Cloud Storage profile images, and operational security logs. Direct Firestore access from the app is disabled; requests pass through our server functions.
• IGDB/Twitch: supplies game catalog metadata. Played accesses IGDB through our server-side gateway and does not place IGDB or Twitch credentials in the app.
• Other users and the public: receive content you intentionally publish, such as public reviews, display names, public profiles, published library snapshots, follower relationships, and public activity. Content you publish can be copied or captured by others.
• Legal and safety recipients: may receive information if reasonably necessary to comply with law or legal process, enforce agreements, investigate fraud or abuse, or protect rights, safety, and security.
• Business transfers: information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.

We require service providers acting on our behalf to protect personal data and process it only for authorized purposes, subject to their applicable contractual commitments.

5. Your choices and controls

• You can use the personal library without creating a public profile.
• You decide which games enter your library; Played does not seed personal library records.
• You can keep a profile private, make it public, return it to private, edit it, sign out, or delete it from within Played.
• You can edit or remove your reviews, reactions, hype, and community library state through the related app controls.
• You can disable notification and calendar access in Apple system settings and remove calendar events you created.
• You can manage or cancel Played+ from your Apple subscription settings. Subscription expiration does not delete your personal library or premium-created data.
• You can export or reset local data using Played's settings, subject to the options available in your installed version.
• You control iCloud availability and synchronization through your Apple ID and device settings.

6. Retention and deletion

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, resolving disputes, and meeting legal obligations.

• Local and iCloud data: remains until you delete records, reset the app, remove the app's data, or manage it through your Apple account. Synced deletion timing is controlled in part by Apple and your devices.
• Catalog cache: remains on your device until refreshed, evicted by the system, cleared by the app, or removed with app data.
• Community content: generally remains until you remove it or request deletion. Aggregate counts may change when the underlying record is removed.
• Profiles: remain until deleted. In-app profile deletion removes the profile, active sessions, public profile library, profile image, profile activity, follow relationships, and profile-authored public reviews from the active service.
• Sessions: expire after 90 days and can be revoked earlier by signing out. Expired security records may persist temporarily until routine cleanup.
• Safety and moderation records: reports, rate-limit records, audit material, backups, and records required for fraud prevention or legal compliance may be retained for a reasonable period after related content is removed. Where practical, we delete or de-identify these records when no longer needed.

Deletion from active systems may not be immediate in encrypted backups, caches, or provider logs. Residual copies are isolated from ordinary use and expire according to applicable backup and security cycles.

7. Your privacy rights

Depending on where you live, you may have rights to request confirmation of processing, access, correction, portability, deletion, anonymization, restriction, or objection; receive information about sharing; withdraw consent; and appeal or complain to a data-protection authority.

Brazilian users may exercise rights provided by the Lei Geral de Proteção de Dados Pessoais (LGPD). Users in the European Economic Area, United Kingdom, and similar jurisdictions may exercise applicable data-subject rights under their local law. California and other U.S. state residents may have additional rights, including information, correction, deletion, and non-discrimination rights where the relevant law applies.

To make a request, email marcosatmorais@gmail.com with the subject “Played Privacy Request.” We may need to verify that you control the relevant profile or installation before acting. We will not discriminate against you for exercising a privacy right.

If your request concerns data held solely by Apple in your private iCloud account or payment records held by the App Store, you may also need to submit the request directly to Apple.

8. Security and international transfers

Played uses measures intended to protect information, including HTTPS in transit, provider encryption at rest, private-by-default profiles, server-side validation, hashed Apple account references and session tokens, Keychain storage for the session token on your device, rate limits, restricted database access, and privacy-aware logging.

No security system is perfect, and we cannot guarantee absolute security. Keep your devices and Apple account secure and contact us if you believe your Played profile or data has been compromised.

Apple, Google, and their subprocessors may process information in countries other than where you live. Where required, we rely on recognized safeguards for international transfers and the contractual protections offered by our service providers. Service locations may depend on the configured Apple and Google cloud regions and their global infrastructure.

9. Children's privacy

Played's account, profile, and community publishing features are not directed to children who cannot legally consent to the processing of their personal data. We do not knowingly collect personal data from such children without authorization required by law. If you believe a child has provided personal information improperly, contact us so we can investigate and delete it where appropriate.

10. Changes to this Policy

We may update this Privacy Policy as Played evolves or legal requirements change. We will update the “Last updated” date and provide additional notice in the app or through another appropriate channel when a change is material. Your continued use after the effective date is subject to the updated Policy, except where additional consent is required by law.

11. Contact us

Questions, concerns, and privacy requests are welcome:

Marcos Morais
Independent developer of Played
marcosatmorais@gmail.com
marcostmorais.com