1. Who We Are

SLATED is operated by Marshall Patterson, an individual developer based in the United Kingdom.

2. About This Policy

This Privacy Policy explains what personal data SLATED collects from you, why we collect it, how we use it, and what rights you have in relation to it.

SLATED is subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Marshall Patterson is the data controller responsible for your personal data.

3. Age Requirement

SLATED is intended for users aged 16 and over. By creating an account, you confirm that you are at least 16 years old. SLATED surfaces video game content from third-party databases which may include titles rated for mature audiences. We do not knowingly collect personal data from anyone under the age of 16. If you believe a person under 16 has created an account, please contact us at slatedapp@gmail.com and we will delete the account and associated data promptly.

4. What Data We Collect

Account data: Your display name, email address, and encrypted password, provided when you create an account.

Preference data: Your selected gaming platforms and notification preferences, provided during onboarding and editable in your profile.

Usage data: Games you have saved to your tracker, including the game title, cover image URL, and release date.

Technical data: Your device type, operating system, and app version may be collected automatically for the purpose of diagnosing errors and improving the app. We do not collect your precise location.

Communications data: If you contact us directly by email, we will retain that correspondence.

5. How We Collect Your Data

• Directly from you when you create an account, set your preferences, or save games to your tracker
• Automatically when you use the app, through our authentication and database provider
• From third-party services as described in Section 7

6. Why We Collect Your Data and Our Legal Basis

Contract performance (Article 6(1)(b)): We process your account data, preference data, and tracker data because it is necessary to provide the SLATED service you have signed up for.

Legitimate interests (Article 6(1)(f)): We process limited technical data to maintain the security, stability, and performance of the app.

Consent (Article 6(1)(a)): Where we send you notifications about tracked game releases, we do so only where you have opted in. You can withdraw this consent at any time in your profile settings.

7. Third Parties We Share Data With

Supabase Inc. We use Supabase to store your account data, preferences, and tracked games. Supabase stores data on servers located in the European Union. Supabase is GDPR compliant and acts as a data processor on our behalf. See supabase.com/privacy.

IGDB (Twitch Interactive, Inc.): We use the IGDB API to retrieve game data. We do not share your personal data with IGDB. Requests to IGDB are made server-side and do not contain any personally identifiable information.

Google AdMob: SLATED displays advertisements served by Google AdMob. AdMob may collect and use data including your device's advertising identifier to serve relevant ads. On iOS, you will be asked for permission to track your advertising identifier in accordance with Apple's App Tracking Transparency framework. On Android, you can opt out of personalised ads through your device settings. See policies.google.com/privacy.

We do not sell your personal data to any third party.

8. How Long We Keep Your Data

We retain your personal data for as long as your account is active. If you delete your account, we will permanently delete all personal data associated with it within 30 days, except where we are required to retain certain records by law.

9. Your Rights Under UK GDPR

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete data through your profile settings or by contacting us.
• Right to erasure: Request deletion of your personal data via the Delete Account option in the app, or by contacting us.
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent for notifications at any time in your profile settings.

To exercise any of these rights, contact us at slatedapp@gmail.com. We will respond within 30 days at no charge.

10. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK's data protection authority:

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

11. Data Security

We take reasonable technical and organisational measures to protect your personal data. Your password is encrypted and never stored in plain text. All data in transit is encrypted using TLS. Access to the database is restricted and protected by row-level security policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this document. If the changes are significant, we will notify you through the app.

13. Contact