How Checkpointr handles your data.

1. Information We Collect

2. How We Use Information

• Create and manage accounts, authenticate users, and support password reset, verification, sign-in, and sign-out flows.
• Operate core product features such as profiles, checkpoints, reviews, lists, groups, social discovery, notifications, and sharing.
• Sync optional Steam-related features including owned games, playtime, and now-playing status.
• Index eligible data for search and discovery, including public profile, list, and group information.
• Send service emails and security emails such as password reset, verification, password-change notices, and account-deletion confirmations.
• Enforce rules, investigate abuse, respond to reports, prevent fraud, and protect the integrity of the service.
• Measure app reliability, analyze performance, diagnose crashes, and improve product quality.
• Comply with legal obligations and respond to lawful requests.

3. What Other Users May See

Checkpointr is a social gaming app. Some information may be visible to other users depending on your privacy settings and the content you choose to post.

• Your username, avatar, banner, bio, selected public profile details, and certain counts may appear on your profile.
• Reviews, comments, lists, group content, social actions, and other content you create may be visible based on the relevant visibility setting or feature design.
• If you connect Steam and do not hide now-playing status, Steam-derived play status may appear in supported parts of the app.
• If you request account deletion and choose not to remove public comments or reviews, those items may remain in anonymized form marked as deleted.

4. How We Share Information

We share information only as needed to operate Checkpointr, comply with law, or provide features you request.

• Google and Firebase service providers: Firebase Authentication, Firestore, Cloud Functions, Cloud Storage, Firebase Messaging, App Check, Firebase Analytics, Firebase Crashlytics, and Firebase Performance.
• Search infrastructure providers: Typesense may process limited account, profile, and public-content records needed to power search and discovery.
• Email delivery providers: transactional email providers may process your email address and message metadata so we can send security and account emails.
• Steam: if you connect Steam, we exchange limited information with Steam to authenticate the connection and retrieve the profile and library data you request us to sync.
• Other users: when you choose to publish or share content, or when a feature is inherently social.
• Legal and safety disclosures: when required by law, to protect rights, investigate abuse, or respond to valid legal process.
• Business transfers: if ownership of the service changes, subject to applicable law.

5. Data Retention and Deletion

• We retain account and feature data for as long as needed to operate the service, secure the platform, and meet legal or operational requirements.
• Push tokens, device-session records, diagnostics, and logs may be retained for a limited period while they remain relevant to notifications, fraud prevention, support, or reliability.
• If you request permanent account deletion from inside the app, we start a backend deletion flow that removes private account data, device data, and uploaded media from storage.
• During deletion, you can choose whether public comments and reviews should also be deleted or should remain in anonymized form.
• To protect the platform against abuse and account recycling, your deleted email address and username may remain reserved after deletion and may not be available for reuse.
• We may keep limited information where necessary for security, fraud prevention, legal compliance, or dispute handling.

6. Your Choices and Rights

• You can edit profile details, visibility settings, notification preferences, and email preferences inside the app.
• You can disconnect Steam, hide Steam now-playing status, and clear Steam-derived taste data from recommendation features.
• You can request permanent account deletion from the app settings.
• You can contact us to request access, correction, deletion, or additional help regarding your personal data, subject to applicable law and identity verification.

7. Children’s Privacy

Checkpointr is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child has provided personal information to us, contact us and we will review the request and take appropriate action.

8. Security and International Processing

• We use technical and organizational measures designed to protect data, including authenticated access controls and encrypted transport such as HTTPS.
• No system can be guaranteed to be completely secure, and you should also help protect your account credentials.
• Your information may be processed in countries where our service providers operate. By using the service, you understand that data may be transferred and processed internationally as permitted by applicable law.

9. Contact Us

For privacy questions, support requests, or data-related inquiries, contact support@checkpointr.com.

For account-security concerns, contact security@checkpointr.com.

For account deletion or selected data deletion requests, visit Account Deletion or Data Deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date above and provide additional notice where required by law.