Privacy Policy

1. Data controller

The controller of the personal data processed through Game News is the app's publisher, Yannis Fouzi, operating as a sole trader (SIRET 93759473700010, 18 rue Serge Delcauvry, 95130 Le Plessis-Bouchard, France), reachable at: contact@fouzi-dev.fr.

2. Data processed

The following are processed, insofar as they are necessary for the service:

• your Steam identifier (SteamID);
• library and playtime data synced from Steam;
• your recently played games history;
• your Steam wishlist;
• the list of games you follow;
• your favorite news items;
• the display language selected in the app;
• your notification and follow settings (news notifications, library and wishlist modes, confirmation preferences);
• the technical tokens and identifiers required to send push notifications (FCM), associated with your device's platform;
• limited technical logs (security, diagnostics, service availability).

3. Purposes and legal bases

Provision of the account and the service (performance of this agreement / pre-contractual measures): Steam sync, news display, management of followed games.

Sending push notifications: where required by law, your consent or your explicit opt-in in the system and app settings; otherwise, legitimate interest limited to messages strictly related to the service you requested.

Security, abuse prevention and reliability improvement: legitimate interest.

Compliance with legal obligations where applicable: legal obligation.

No data is sold and no advertising profiling is carried out.

4. Recipients, processors and transfers

Data is hosted and processed on the publisher's infrastructure and that of its technical providers, listed below:

• Railway (Railway Corp.) — hosting of the backend API and database; servers primarily in the United States; transfers covered by the safeguards provided for by the GDPR (standard contractual clauses).
• MongoDB Atlas (MongoDB, Inc.) — managed database hosting account data; servers in Europe; transfers covered by the safeguards provided for by the GDPR.
• Google Firebase Cloud Messaging (Google LLC / Google group companies) — sending push notifications; may process technical data in the United States or other countries; transfers covered by the European Commission's standard contractual clauses and Google's privacy policy.
• Sentry (Functional Software, Inc.) — error and performance monitoring; receives the SteamID of the user involved in an event, as well as technical context information (app version, platform, error type, the event log preceding the error); servers hosted in Germany (eu.sentry.io).
• Official Steam / Valve Corporation APIs — retrieval of public Steam information (games, wishlist, profile); under Valve's applicable policy.
• SteamGridDB — retrieval of game artwork for in-app display; no user data is transmitted to it.

No other category of recipient is planned; where applicable, other processors could act solely on the controller's instructions.

5. Retention periods

Account and preference data is kept for as long as your account is active; it is deleted or anonymized within a reasonable time after the account is deleted from the app (the Delete my account feature available in the settings), unless a legal retention obligation applies.

Technical logs are kept for a limited period, strictly necessary for security and diagnostics (typically 90 days for Sentry monitoring events, a few months for server logs, except during a prolonged incident).

Invalid notification tokens are deleted or replaced on subsequent connections.

6. Your rights

In accordance with Regulation (EU) 2016/679 (GDPR) and French law, you have, subject to legal conditions and exceptions, the rights of access, rectification, erasure, restriction of processing, objection and portability (where they apply).

You can exercise these rights:

• directly in the app (account deletion from the Settings screen);
• by email at contact@fouzi-dev.fr; proof of identity may be requested in case of reasonable doubt about your identity.

You may lodge a complaint with the competent supervisory authority — in France, the CNIL (www.cnil.fr).

7. Security

Appropriate technical and organizational measures are implemented to protect your data: HTTPS encryption on all network exchanges, encrypted storage of session tokens on the device (iOS Keychain / Android Keystore), server authentication via signed token (HMAC SHA-256), HTTP header hardening, and per-IP rate limiting.

No processing is entirely free of risk; in the event of an incident affecting your data, a notification may be made in accordance with regulations (notably Article 33 of the GDPR for the supervisory authority and Article 34 for the data subjects where the risk is high).

8. Cookies, trackers and advertising

The mobile app does not use browsing cookies. No third-party advertising tracker is integrated for targeting purposes. A local cache may be used solely to improve display performance on your device.

9. Minors

The service is intended for persons able to contract with Steam and use the app (generally from age 13 under Valve's terms). If you believe a minor has provided us with data without authorization, contact us at contact@fouzi-dev.fr so that we can take appropriate measures.

10. Changes to this policy

This policy may be updated; the date of the last revision appears at the top of this document. We encourage you to review it regularly. In the event of a material change, users may be informed by notification or in-app message.

11. Contact

For any question regarding this policy or your personal data: contact@fouzi-dev.fr.