Privacy Policy
Last updated: 13 August 2026
Gamertag brings your achievements from Steam, PlayStation, Xbox and RetroAchievements into a single profile. To do that it needs some of your data. This page explains what, why, who it is shared with, and how to erase all of it.
1. Who is responsible
The data controller is Manoel Neto, an individual. Contact for anything in this policy, including exercising your rights: contact@redstudios.com.br.
2. What is public
Your profile is public. Your handle, display name, photo, game list, unlocked achievements and leaderboard position can be seen by anyone, including people who are not signed in. There is no private-profile option. If that does not work for you, do not create an account.
3. Data we handle
3.1 Identity and sign-in
| Data | Source | Why |
|---|---|---|
| Name, email and photo from Google | You, when signing in with Google | To create and identify your account. Name and photo become your initial profile, and you can change or remove them in the app. |
| Google account identifier | Firebase Authentication | To recognise you on later sign-ins. |
| Public handle and display name | Generated on sign-up, editable by you | To identify your profile publicly. |
3.2 Platform accounts
When you connect a platform we store its identifier and your handle there: SteamID, PlayStation account ID and online ID, Xbox XUID and gamertag, RetroAchievements username.
The app never sees your platform passwords. Steam uses its own official sign-in; PlayStation uses a session you open yourself on Sony's site inside the app. From PlayStation we store a refresh token, kept encrypted in the database (AES-256-GCM), which is never sent back to the app or to any third party. Xbox and RetroAchievements are read using the server's own credentials, and for those you only type a public handle.
Xbox and RetroAchievements links are not verified. Typing a handle is enough, and handles are public information. That means someone could attach a handle that is not theirs to their own profile. If that happens to you, write to the address above. Steam, PlayStation and Google require real authentication and do not have this problem.
3.3 Game data
Your list of games, achievements and trophies, which ones you unlocked and when, playtime where the platform reports it, and your platinum count. All of it comes from the platforms themselves and always refers to your account.
3.4 Social use
Who you follow and who follows you.
3.5 Diagnostics and app usage
The app uses Firebase Crashlytics and Google Analytics for Firebase. They collect crash reports, device model, operating-system version, an installation identifier, the advertising identifier and usage events (which screens you open, which actions you take). This is used to find defects and understand what needs improving. These features are on by default.
3.6 Server logs
Our server records IP address, timestamp and the route accessed, for security and to rate-limit abuse.
4. Who the data is shared with
| Third party | What it receives | Why |
|---|---|---|
| Valve (Steam), Sony (PlayStation), Microsoft (Xbox), RetroAchievements | Your account identifier on that platform | To read your games and achievements. This is the request you trigger yourself by connecting the account. |
| IGDB (Twitch/Amazon) | The game's name | To find covers, synopses and other details. None of your data is sent. |
| Google (Firebase) | The authentication, crash and usage data described in 3.1 and 3.5 | Google sign-in, crash reporting and usage metrics. |
| Hostinger | Hosts the server where the data lives | Infrastructure. |
We do not sell your data and we do not use it for targeted advertising. Beyond the cases above, we would only share it under a legal order.
5. Legal bases (LGPD)
Gamertag is operated from Brazil and follows the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).
| Purpose | Legal basis |
|---|---|
| Creating your account and showing your games and achievements | Performance of a contract (art. 7, V) |
| Public profile, feed and leaderboard | Performance of a contract (art. 7, V) — it is what the product does |
| Crash reports and server security | Legitimate interest (art. 7, IX) |
| App usage metrics | Legitimate interest (art. 7, IX) |
6. How long we keep it
For as long as your account exists. When you delete it, we immediately erase your profile, platform links, credentials, games, achievements and the follow graph. Database backups are rotated and overwritten: deleted data may survive in them until the matching copy is discarded, within 30 days at most. Server logs are kept for up to 30 days.
7. Your rights
Under the LGPD you may, at any time:
- confirm that we process your data and access it;
- correct incomplete or outdated data — name, handle and photo you edit directly in the app;
- request anonymisation, blocking or deletion of unnecessary data;
- request portability of your data;
- withdraw consent and delete your account;
- know who we share your data with — see section 4.
To exercise any of these, write to contact@redstudios.com.br. We answer within 15 days.
8. How to delete your account
In the app: Profile tab → Delete account. Deletion is immediate and cannot be undone. Without the app installed, use the account deletion page.
9. Security
All traffic between the app and the server uses HTTPS. Platform credentials are encrypted at rest and never leave the server. Database access is restricted to the machine itself.
No system is immune to incidents. If a breach occurs with relevant risk to your rights, we will notify the affected data subjects and the Brazilian National Data Protection Authority.
10. Children
Gamertag is not directed at children under 13 and does not knowingly collect their data. If we identify such an account, it will be deleted. Guardians may request deletion through the contact above.
11. International transfers
Google (Firebase) and IGDB process data outside Brazil. By using the app, that data may be processed in other countries, under each provider's own safeguards.
12. Changes to this policy
If anything material changes, we update this page and the date at the top. Changes that widen data collection will be announced inside the app before taking effect.