Updated 29 October 2026

Privacy policy

Ludarium helps you organise your games, connect gaming accounts, share what you play and discover what to play. We do not sell personal data, show ads, or track you across other companies’ apps or websites.

Who is responsible

Sebastian Oltedal Thorp, operating Ludarium from Norway, is the data controller. Contact sebastian@rework.no for privacy questions or requests. You can use this address for support, privacy requests and questions about these terms.

Your account and Library

When available, Sign in with Apple and Continue with Google authenticate through Supabase. Supabase processes your account ID, email address (which may be an Apple private relay address), provider identity and security information. Google sign-in requests basic identity, email and profile information through the openid, email and profile scopes; profile information may include your name and profile-picture URL. Apple and Google verify sign-in; Ludarium does not receive your Apple or Google password. Email/password accounts created in earlier versions remain handled by Supabase, but email/password is not offered in the current sign-in flow. Passwords are not stored by the Ludarium API or in app preferences.

Continue as guest uses device-local access without creating a Ludarium account or a Supabase anonymous session. Guest Library data stays on your device; you can choose to sign in later to sync it. Public catalog and website requests can still produce the operational records described below.

Signed-in Library sync stores your selected games, owned and wishlisted games, progress status, completions, ratings, notes and sync metadata. Lists, bookcase layout metadata and Gaming Plan sync may depend on your app and server version; local photos and scan files are not uploaded by this sync. Signed-out Library data stays on your device.

Signed-in playthrough and journal sync stores the runs you log (game, status, start and end dates, platform, difficulty, your own estimate of hours, a rating for that run and notes) and your journal sessions (date, minutes, notes and tags). These records are private: other players never see them. Hours from playthroughs only feed the anonymous time-to-finish figures described under Community numbers.

Ludarium on the web offers Continue with Google or Sign in with Apple through Supabase, or continuing as a guest. It keeps your sign-in session and Library data in your browser’s local storage; as a guest, your Library stays in that browser. Signing out leaves your Library in that browser, as the app does; deleting your account erases it there.

Connected gaming accounts

• Steam: with your consent, the server reads your Steam ID, public profile, owned-game list, playtime, recent games and available achievements. Steam sign-in runs on Steam; Ludarium does not receive your Steam password.
• Xbox: Microsoft authorises sign-in. The server stores encrypted connection credentials and reads available profile and achievement-progress history. Xbox history does not prove ownership and does not supply playtime here.
• PlayStation: the experimental connection runs on your device. Tokens are kept in the device Keychain. Available titles, playtime and trophies are read on-device; Sony tokens are not sent to the Ludarium backend. Games you choose to import may enter your Library and, if signed in, Library sync.

Disconnect in Profile → Settings → Connected accounts (or Library’s account connection controls). Disconnecting stops future access; it does not automatically erase games you previously imported. You can also revoke access through the provider’s settings. Never send provider passwords or tokens to support.

Friends and activity

A social profile can include a name, handle and bio. Discoverability, platform friend matching and automatic activity sharing are opt-in. When enabled, the backend may process provider friend identifiers and matching results, follows, blocks and evidence-backed game activity. Sharing choices control what other players can see. You can disable sharing and matching or disconnect in the app. Private Discovery feedback, challenge progress and congratulations do not become public merely because they exist.

If you report a profile, Ludarium stores your account ID, the reported profile’s ID, the selected reason, any details you submit, and a snapshot of the reported profile’s handle, name and bio. Reports are private and processed to review and address safety concerns; they are not published to other players. Deleting either account removes the associated report records.

Reviews and shared lists

You can write one review for each game. A private review is visible only to you. Public and followers-only reviews, and comments on reviews and lists, need a discoverable social profile (“Let people find me”). They show your profile name, handle and picture together with what you write, your rating for the game and any details you choose to add, such as platform, hours, whether it was a replay and, if you turn it on, your progress. Spoilers you mark are hidden in review feeds until someone opens the review. Other signed-in players can like, comment on and report reviews; likes and votes appear only as counts.

You can publish one of your custom lists as public (shown in Browse and search) or unlisted (visible to anyone with its link). A shared list shows its title, description, tags, the games in it and the notes you add to them, with your profile name, handle and picture and counts of likes, votes, comments and copies. It does not show whether you own, play or have rated those games. Publishing needs a discoverable profile.

Nothing is posted or published automatically, and anything you post can be seen by other players, so don’t include personal details you don’t want to share. You can edit or delete a review, comment or shared list at any time. If you later turn off “Let people find me”, your reviews and review comments are limited to people who follow you, and your shared lists and list comments are hidden from others; deleting your social profile hides all of them from others. Blocking hides reviews, comments and lists in both directions. Reports of reviews, comments and lists store your account ID, the reason, any details you add and a private copy of the reported content. They are not published; we use them to review and address safety concerns, which can lead to content being hidden.

Community numbers

Game pages can show anonymous community numbers based on signed-in Ludarium Libraries: how many players have a game, want it, are playing it or have finished it, how ratings are spread, the finish rate and typical time to finish (from hours logged on playthroughs). This is on by default: your synced Library counts unless you turn it off. Guest Libraries kept on a device and your notes are never used.

A game shows these numbers only when at least 10 players count towards it, and each figure also needs at least 10 players; below 100 players, counts are rounded to the nearest 5. The totals never include names, pictures or account IDs. If you share your activity, people who follow you may also see on a game’s page that you have it, want it or which progress status you gave it, never your rating or notes. Blocking stops this in both directions.

To turn it off, switch off “Include my library in community numbers” in Settings → Privacy in Ludarium on the web, or email sebastian@rework.no and we will switch it off for your account. Turning it off also stops people who follow you seeing your games there. Changes take effect within about 30 minutes, and your choice is kept until you change it or delete your account.

Friends leaderboard

The friends leaderboard is off unless you turn it on, and it needs a social profile. When it is on, people you follow who follow you back and also have it on see your rank, your points and finishes for the chosen period, and your level and title, with your profile name and picture. Points come from finishes and play days recorded at the time; your Library, ratings and notes are not shown. Challenges you join and badges you earn sync to your account so they match across devices; they are private. Turning the leaderboard off removes you from it at once.

Purchases and reminders

Apple processes App Store payments. RevenueCat validates purchases and manages subscription status using transaction information and an app customer identifier, with technical information such as app and OS version. Ludarium does not receive your payment-card details. When you buy on the web at ludarium.gg, RevenueCat runs the checkout and Stripe processes the payment: they receive your card and billing details, email address, country and the Ludarium account ID that links the purchase to your account. Stripe also processes this information for its own fraud prevention and legal obligations under its privacy policy. After sign-in, Ludarium connects membership to your account using its account ID in RevenueCat. When signed out, RevenueCat uses an anonymous customer ID. Local trial reminders require notification permission and a confirmed trial. You can also choose local release-day reminders for games with a confirmed release date. These reminders are scheduled on your device, not through a remote push service.

Catalog, media and searches

Catalog facts, artwork and gaming information come from sources including IGDB and Steam; game data is credited in the app. Public searches and catalog/media requests go to Ludarium’s API and relevant providers. Opening a news publisher or other external website is subject to that site’s privacy policy. Provider artwork is generally memory-only; the Library widget may persist a rendered image containing covers in the shared App Group.

Discovery feedback and technical information

The service records signed-in Discovery choices such as saved, dismissed and opened items to tailor your recommendations. Public API and website requests can produce operational records including the request time, requested route or search query, IP address, user-agent and response status. These records support security, troubleshooting and service operation. We do not use them to build advertising profiles. Recommendations do not make decisions that have legal or similarly significant effects on you.

If you use Report a bug or Send an idea, your message, the app version and build, iOS version and device model, any screenshot you choose to attach, and your Ludarium account ID (if you are signed in) are stored and emailed to the Ludarium team through an email delivery provider. We use them only to handle your request, and they are deleted when you delete your account.

Photos and 3D scans

Cover and profile photos, decor photos and 3D object captures are processed and stored on your device. They are not uploaded by Ludarium. Camera or photo access is used only for the feature you choose. You control system permissions. Device backups follow your Apple backup settings; some caches and temporary files are excluded.

If you choose Use Steam picture or Use Xbox picture in the profile photo editor, Ludarium stores the public image URL of that connected account’s picture and shows it as your profile picture to other Ludarium users who can see your profile. You can remove it at any time, and it is removed when you disconnect that account or delete your Ludarium account. PlayStation pictures are not used.

How and why we use data

We use account and Library data to provide the service you request (contract); optional sharing and provider access follow your choices and consent where required; proportionate security and operational logs protect and operate the service (legitimate interests). Community numbers use synced Library data only in anonymous, thresholded totals, based on our legitimate interest in showing players useful information about games; you can object at any time by turning them off. Reviews, shared lists and the leaderboard only show what you choose to post, publish or turn on. You can withdraw optional choices without changing the lawfulness of earlier processing. We do not use data for advertising, data brokerage or cross-app tracking.

Service providers and international processing

Infrastructure includes Supabase for authentication, Google Cloud for the API and scheduled jobs in Belgium, Neon for the managed PostgreSQL database in Frankfurt, RevenueCat for purchases, Stripe for web payments, and Vercel for these pages. Those providers may process data outside Norway and the EEA. Provider processing is governed by the applicable service and data-processing terms. International-transfer provisions in those terms include European Commission standard contractual clauses and, where applicable, recognised adequacy arrangements. An EU hosting region does not mean that every support or subprocessor operation stays in the EEA. Contact us for information about the safeguards relevant to your data and how to obtain a copy. Gaming platforms process their own account data under their policies.

Provider information: Supabase, Google Cloud, Neon, RevenueCat, Stripe and Vercel.

Retention and deletion

Account data is kept while needed to provide your account, or until you delete it. Disconnecting removes connection access but previously imported Library records may remain until removed. Operational logs, backups, purchase records and support correspondence can outlast active records for security, recovery or legal obligations. Retention is determined by the purpose of each record: providing an active account, resolving a support request or security incident, maintaining recovery copies until they rotate out, and meeting a specific legal or accounting obligation. Data is removed or anonymised when it is no longer needed for those purposes. Deleting active records does not instantly remove independent Apple or gaming-platform records or every backup copy.

Deleting a review or shared list also deletes the comments, likes, votes and reports attached to it. Deleting your account removes your reviews, comments (and replies to them), likes, votes, shared lists, playthroughs, journal sessions, challenges, badges and your leaderboard and community-number choices; community totals stop counting you within about 30 minutes.

Delete in Profile → Settings → Account → Delete account, or follow the account deletion instructions. The app requests deletion of private backend rows and Supabase authentication, clears account-related device caches and signs out. If Auth deletion is pending server configuration or a provider outage, the app reports that honestly; contact support to complete it. A one-way account digest is retained to block old sessions. Account deletion does not cancel an App Store subscription.

Security and your choices

We use access controls and encrypted connections for supported online features. No service or device can be guaranteed completely secure. Keep your device and gaming accounts secure. You can use device-only Library features without a Ludarium account; account sync and connected-platform features require the information necessary to provide them. Optional sharing can be turned off independently. Community numbers are on by default and can be turned off at any time.

Children

Ludarium is a general-audience game-organisation service. Where parental permission is required for an account or purchase, obtain it before using that feature. Contact us if you believe a child has provided personal data without the permission required by applicable law.

Your rights

Depending on applicable law, you may request access, correction, erasure, restriction, portability or object to processing. Contact sebastian@rework.no; we may need proportionate identity verification. You can complain to the Norwegian Data Protection Authority, Datatilsynet. You may withdraw consent for optional processing at any time. We normally respond to a rights request within one month; where the law permits an extension, we will explain it. We will update this notice when the service changes and give additional notice of material changes where required.