Privacy Policy

BerryMill LLC, a limited liability company registered in the State of Wyoming, United States, operates GamesBerry and is the controller of the personal data described here, within the meaning of the EU General Data Protection Regulation (GDPR) and the UK GDPR. “GamesBerry”, “we” and “us” in this policy mean BerryMill LLC.

For any privacy question, request or complaint, write to support@gamesberry.app. We answer privacy requests within 30 days, and tell you before that if a request is complex enough to need longer.

The categories are deliberately short:

• Account data. Your email address and a cryptographic hash of your password. We never store the password itself and cannot recover it.
• Product data you create. Your watchlist, saved searches, alert preferences and notifications, plus your API key if you generate one.
• Subscription data. If you subscribe to Pro, a Stripe customer identifier and your plan status. Card details never reach our servers — they are entered on Stripe's infrastructure.
• Technical data. Server logs containing IP address, request time, page or endpoint requested, user agent and referrer. These exist to run and secure the service and to enforce API rate limits.
• Account activity. While you are signed in we record which pages you open and what you search for, linked to your account. It is how we tell whether the product is useful and to whom, it is visible only to us, it is never sold or shared, and it is deleted on the same 90-day schedule as the server logs above. Signed out, nothing is recorded against you.
• Analytics data — only with your consent. If you accept the cookie banner, Google Analytics 4 records pages viewed, approximate location derived from a truncated IP address, and device and browser type. If you decline or ignore the banner, the Google Analytics script is never loaded and no analytics cookie is set.

We do not collect special category data — health, biometrics, political or religious views, sexual orientation — and we ask you not to send it to us.

Under the GDPR every use of personal data needs a legal basis. Ours are:

• To provide the service you asked for — creating and authenticating your account, keeping your watchlist and alerts, delivering API responses. Basis: performance of a contract, Art. 6(1)(b).
• To take payment for a Pro subscription and keep billing records. Basis: contract, plus legal obligation for tax and accounting records, Art. 6(1)(b) and (c).
• To keep the service running and secure — logging, abuse and fraud prevention, rate limiting, debugging. Basis: legitimate interests, Art. 6(1)(f), in operating a reliable service; we balance this against your rights by keeping logs short-lived and access restricted.
• To send service email you have configured, such as watchlist alerts. Basis: contract. Every alert can be switched off in your account.
• To understand which pages are useful via analytics. Basis: your consent, Art. 6(1)(a), which you may withdraw at any time.

We do not use your personal data to train machine-learning models, and we do not take decisions about you by automated means that produce legal or similarly significant effects.

Strictly necessary only, by default. Without consent we set just two things: a session cookie while you are signed in, and a small local-storage entry remembering your theme and your cookie choice. These cannot be switched off without breaking sign-in, and under the ePrivacy Directive they do not require consent.

Analytics cookies are optional and blocked until you press Accept. You can change your mind at any time through Cookie settings in the site footer; declining stops the script loading from your next page view onward.

We do not sell personal data and do not share it for cross-context behavioural advertising. We use a small number of processors, each contractually bound to act only on our instructions:

• Hetzner Online GmbH (Germany) — hosting and databases.
• Stripe, Inc. — payment processing. Stripe acts as an independent controller for its own fraud-prevention purposes.
• Resend — transactional email delivery, such as alerts and account mail.
• Google Ireland Ltd / Google LLC — analytics, only where you consented.

We may also disclose data where the law requires it — a valid court order or lawful request from a public authority — or to establish or defend legal claims. If a request appears overbroad or invalid, we push back on it.

Our servers are in Germany. Some processors, notably Stripe and Google, may process data in the United States. Where personal data leaves the EEA or the UK, the transfer relies on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the provider's certification under the EU–US Data Privacy Framework, together with supplementary technical measures such as encryption in transit.

• Account and product data — while your account exists, then deleted within 30 days of deletion, except where a longer period is legally required.
• Billing records — up to 10 years, because tax law in most jurisdictions requires it.
• Server logs — up to 90 days, then deleted or aggregated beyond identification.
• Analytics data — retained by Google for 14 months from your last visit.
• Encrypted backups — up to 6 months on a rolling schedule (daily, weekly and monthly copies). Deleting your account removes your data from the live service on the timeline above; the backup copies are not individually edited, and are overwritten as they rotate out.

If the GDPR or UK GDPR applies to you, you have the right to:

• Access a copy of your personal data (Art. 15).
• Rectify data that is wrong or incomplete (Art. 16).
• Erase your data — the right to be forgotten (Art. 17).
• Restrict or object to processing based on legitimate interests (Arts. 18 and 21).
• Port your data to another service in a machine-readable format (Art. 20).
• Withdraw consent at any time, without affecting processing already carried out (Art. 7(3)).

Exercise any of these by emailing support@gamesberry.app. We do not charge for this and will not treat you differently for asking. You may also complain to your local supervisory authority — in the EU, the data protection authority where you live; in the UK, the Information Commissioner's Office.

If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon or another state with a comprehensive privacy law, you may request to know what personal information we hold, to have it deleted or corrected, and to receive a portable copy. You may appoint an authorised agent to act for you.

We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA as amended by the CPRA. We therefore do not offer a "Do Not Sell or Share My Personal Information" link — there is nothing to opt out of. We do not use or disclose sensitive personal information beyond the purposes permitted by law.

We will not discriminate against you for exercising these rights. Send requests to support@gamesberry.app; we may need to verify your identity by confirming control of the account email.

GamesBerry is a professional analytics tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, write to support@gamesberry.app and we will delete it.

Traffic is encrypted with TLS, passwords are stored only as salted hashes, database access is restricted to the application and to named administrators, and backups are encrypted. No system is perfectly secure; if a breach affects your personal data and poses a risk to your rights, we will notify you and the competent supervisory authority as the law requires.

GamesBerry collects publicly available information from storefronts — Steam, the Epic Games Store, GOG, the Apple App Store, Google Play, the PlayStation Store and the Microsoft Store — including titles, prices, review counts and scores, follower counts, player counts and chart positions.

Where we display review text, it is public content published by its author on the storefront. If you wrote a review and want it removed from GamesBerry, email support@gamesberry.app and we will remove it.

Revenue and sales figures on this site are modeled estimates, not reported results — see the methodology.

We update this policy when the service changes. The date at the top always reflects the current version. If a change materially affects your rights, we will tell registered users by email before it takes effect.