Questly

Privacy Policy

Last updated:

Questly ("we," "us," "our") is built and operated by the Questly team. We respect your privacy and only collect what we need to make the app work. This policy explains what we collect, why, how we use it, and the choices you have.

1. Information we collect

1.1 Account information

When you create a Questly account we collect your email address, display name, date of birth, and (optionally) a profile photo and bio. Date of birth is used to confirm age and is never shown to other users.

1.2 Content you create

We store the lists you build, reviews you write, scores you give, games you've added, comments you post, play-journal entries (status, playtime, dates, notes), replay entries, and the ownership records you attach to your library (which platforms or services you own a game on). Public content (lists set to public, public reviews) is visible to other users. Private content is visible only to you.

1.3 Sign-in providers

If you sign in with Google or Discord, we receive your email address and a stable account identifier from that provider. We don't receive your password or contacts.

1.4 Third-party connections you initiate

If you choose to import your library from Steam, we read public information from your Steam profile (Steam ID, public game list, and the playtime Valve exposes on those games) and store it as part of your Questly library. We only read what Valve already makes public on a public Steam profile, we never receive your Steam password. You can disconnect or wipe the imported data at any time from Settings.

If you import library data from a CSV file you provide, we store the rows you uploaded as journal entries against your account. We don't share the file or its contents with anyone.

1.5 Technical information

When the app makes requests to our servers we automatically log technical details (IP address, device model, OS version, app version, timestamps, request paths). This is used to operate the service, debug errors, and protect against abuse. Logs are retained for up to 30 days.

When the app or website encounters an unexpected error we send an automated diagnostic report to our error-monitoring provider (Sentry) containing the stack trace, the version of Questly, the device model, the operating-system version, and an anonymous device identifier. We use this only to find and fix bugs. Diagnostic reports are retained for 30 days.

1.6 Purchase information

If you subscribe to Questly Pro, the actual payment is handled by Stripe (for purchases made on the website) or by Apple's App Store / Google Play, with RevenueCat acting as the subscription state manager (for purchases made inside the iOS or Android app). We do not see or store your full payment-card number — that information stays with the payment provider you chose. What we do store on our side is: the fact that you have an active subscription, the plan, the renewal/cancellation timestamps the platform reports to us, and the Stripe customer ID or RevenueCat user ID we map to your account so webhook updates from those providers can update your entitlement state.

1.7 Newsletter signups

If you give us your email on the Questly website to be notified at launch, we store that email and the date you signed up. We use it only to email you about the launch. You can unsubscribe at any time using the link in any email we send.

2. What we don't collect

  • We do not sell your data to anyone.
  • We do not track you across other apps or websites.
  • We do not use third-party advertising trackers in the app.
  • We do not access your contacts, photos, or microphone without an explicit prompt for a specific feature.

3. How we use your information

  • To create and maintain your account.
  • To show you recommendations based on what you've swiped, scored, and listed.
  • To display public profiles, lists, and reviews to other Questly users.
  • To send transactional email (account verification, password reset, confirmations).
  • To send the one-time launch announcement to anyone on the newsletter list.
  • To diagnose bugs and protect against abuse.

4. Sharing

We share data with a limited set of service providers strictly to operate the service: our cloud hosting provider, our transactional email provider (currently PrivateEmail by Namecheap), push notification providers (Apple Push Notification service, Firebase Cloud Messaging), our payment and subscription-management providers (Stripe for web purchases; RevenueCat for in-app subscription state on iOS and Android, working on top of Apple's App Store and Google Play), our error-monitoring provider (Sentry, which receives automated crash diagnostics as described in section 1.5), and the third-party authentication / data providers you choose to connect to your account (Google or Discord for sign-in; Valve's public Steam Web API if you import your Steam library). These providers process data on our behalf, or in Valve's case provide public profile data on request, under their own privacy policies.

We will disclose information when required by valid legal process, or to protect the rights, property, or safety of Questly, our users, or the public.

5. Data retention

  • Account data: kept while your account is active.
  • Deleted accounts: personal data is removed within 30 days of deletion.
  • Newsletter signups: kept until you unsubscribe or we send the launch email, after which we delete the list.
  • Server logs: up to 30 days.
  • Backups: rolling 30-day window for disaster recovery.

6. Your rights

You can access, correct, export, or delete your data at any time. The fastest way is in the app: Settings → Account, and Settings → Storage & Data for a one-tap CSV export of your library, journal, lists, reviews, and scores. You can also email support@questly.games and we'll handle it within a reasonable timeframe (and within any statutory deadlines that apply to you).

Depending on where you live, you may have additional rights under the GDPR, the UK GDPR, the CCPA, or other local laws. We honour all of them.

7. Children

Questly is not directed at children under 13 (or under 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact support@questly.games and we'll delete it.

8. Security

We use industry-standard measures to protect your data: TLS in transit, encrypted storage at rest, hashed passwords, and access controls on our infrastructure. No system is 100% secure, but we treat our users' data as if it were our own.

9. International transfers

Questly servers and service providers may be located in countries different from yours. By using Questly, you consent to the transfer of your information to those countries, subject to applicable safeguards.

10. Changes to this policy

When we change this policy materially, we'll update the "Last updated" date and for significant changes we will notify you in-app or by email. Continued use of Questly after a change means you accept the updated policy.

11. Contact

Questions about privacy can be sent to support@questly.games.