The short version
- We store your games, playtime and progress so we can show them to you and to the friends you accept. Nobody else can see your shelf.
- We never see your Steam, PlayStation or Xbox password, and we don't keep the PlayStation token or Xbox key you paste in.
- Photos you scan are read once by AI to find game titles, then thrown away. We never store them.
- Your ship and dip votes are counted anonymously in the public rankings.
- No ads, no analytics, no tracking cookies, and we never sell or rent your data.
- You can download everything or delete your account at any time.
What we collect and why
Your platform accounts' display names and IDs (for example your SteamID) are stored so you can re-sync. Each import is a snapshot: we copy your library when you press import or re-sync, and we don't watch your accounts in between.
Connecting your game accounts
Each platform connects differently, and you choose which ones to use.
- Steam. You sign in on Steam's own website, and Steam tells us your SteamID. We never see your Steam password. We then read your owned games, playtime and achievements through Steam's official Web API. Steam only shares this if your profile's “Game details” privacy setting is Public. Only the person who signs in can import a Steam library.
- PlayStation. Sony has no public sign-in for apps, so you paste an “NPSSO” token from playstation.com. That token works like a temporary key to your PlayStation account. We use it once to read your games and trophies, then throw it away. It is never saved or logged. To cancel it afterwards, sign out of playstation.com. This connection uses an unofficial method that Sony doesn't support, and it may stop working.
- Xbox. You paste a personal key from OpenXBL (xbl.io), a separate company that reads Xbox Live data for apps. We use the key once and don't save it. OpenXBL's own privacy policy applies to the account you make with them.
- Nintendo. Nintendo offers no way for apps to read your library, so nothing is connected. You type your games in, or scan a photo.
- Story check-ins. For games with no progress data, you can describe where you are (“just beat the boss in the castle”). That text, with the game's title, platform and your hours, goes to Anthropic's Claude AI, which estimates how far through the main story you are. You can adjust the estimate before saving. Your words stay private to you, because they can contain spoilers.
- Scan a photo. If you'd rather not connect an account, you can photograph your shelf of game boxes or screenshot your console's library. The photos are shrunk on your device, then sent to Anthropic's Claude AI, which lists the game titles it can see. We don't save the photos, and under Anthropic's commercial terms they aren't used to train its AI models. You check and edit the list before anything is added, and scanned games stay private to you and your friends like any game you add by hand. Avoid photographing anything else personal, such as faces, addresses or documents.
Disconnecting a platform from Connect removes its games from your library. Games you reviewed stay, so your writing isn't lost.
Who can see what
- Anyone signed in can look up your username and send you a friend request. That's all they see.
- Accepted friends see your library, playtime, progress, what you're playing, reviews, wishlist, and the likes and comments on your games. Removing a friend stops this straight away.
- Everyone sees the rankings, which show only totals per game, never who voted.
- Your email address is never shown to anyone.
Game titles imported from real platform libraries are added to a shared list of games used by Ship or Dip voting and the rankings. That list holds only titles and cover art, with nothing linking them to you. Games you type in by hand are not added.
Services we use
We only share what each service needs to do its job:
Fonts are served from our own site, and there are no advertising, analytics or social media trackers.
How long we keep it
- Your account data, for as long as you have an account.
- Sign-in sessions expire after 30 days. Password reset links expire after 1 hour and email confirmation links after 24 hours.
- IP addresses used for rate limiting, for about an hour at most.
- When you delete your account, everything is removed from the live database immediately. That includes your comments on friends' games and your votes. Copies in encrypted backups are overwritten within 30 days.
Your choices and rights
From your account page you can download all your data as a file, or delete your account. From Connect you can disconnect any platform, and from your account you can turn email and push notifications on or off.
Depending on where you live (for example under the UK or EU GDPR, or California's CCPA), you also have the right to access, correct, delete or move your data, to object to how we use it, and to complain to your data protection authority. We use your data because you asked for the service (to run your account), and for our legitimate interest in keeping the site secure. To make a request, use the contact address that will be listed here once our domain is live. Until then, you can download or delete your data yourself from your account page.
Security
- Passwords are stored as scrypt hashes, and sign-in, reset and confirmation tokens are stored only as hashes.
- The site runs over HTTPS only, and the sign-in cookie can't be read by scripts on the page or sent by other websites.
- Repeated wrong passwords are blocked, and changing your password signs out your other devices.
- Deleting your account requires your password.
No system is perfectly secure. If we ever learn of a breach that affects you, we'll tell you by email.
Children
You must be at least 13 to use Ship or Dip, or older if your country requires it (for example 16 in some EU countries). If you think a child under that age has made an account, use the contact address that will be listed here once our domain is live. Until then, you can download or delete your data yourself from your account page and we'll delete it.
Changes and contact
If we change this policy in a way that matters, we'll tell you on the site or by email before it takes effect. For any privacy question, use the contact address that will be listed here once our domain is live. Until then, you can download or delete your data yourself from your account page. See also our Terms.