Privacy Policy

1. Data controller

The data controller for the processing described here is Enzo DE LA PENA, publisher of Slyko operating as an individual. Contact: contact@slyko.app.

2. Data we collect

Depending on how you use the App, we collect:

• Account data: a technical identifier generated on install, your username and, if you add one, your profile picture;
• Sign-in data, only if you link your account: the email address and identifier associated with your Google or Apple account (we never receive your password);
• Service usage data: the games you add, their status (wanted/played), your ratings and reviews, your self-reported playtime, your experience (XP) and level, who you follow;
• Steam data, only if you choose to import your library: the list of games you own and their associated playtime, fetched from your public Steam profile at the time of import;
• Content you voluntarily share: if you share a TikTok or YouTube video to Slyko, that video's title or caption is sent to an AI service to identify the game it refers to;
• Anonymized technical and usage data: device type, app version, usage events (screens viewed, actions taken), technical error logs;
• Your device's advertising identifier, only if you consent via the App Tracking Transparency prompt on iOS.

3. Why we use it

• to provide the service: show your library and statistics, enable interactions with other users;
• to manage your Slyko Pro subscription if you subscribe;
• to keep the service secure: detect abuse, enforce the Terms of Use, handle reports;
• to improve the app: understand which features are used, diagnose technical errors;
• to measure the effectiveness of our acquisition efforts (install attribution), only with your consent where required.

4. Legal basis for processing

We process your data on the basis of performance of our contract with you (providing the service and the Slyko Pro subscription), our legitimate interest (security, abuse prevention, product improvement), and, where the law requires it, your consent — in particular for advertising tracking (App Tracking Transparency) on iOS, which you can decline or withdraw at any time from your device settings.

5. Who we share your data with

We never sell your data. It is shared with the following technical providers, strictly to the extent needed for the service they provide us:

• Supabase (database hosting, authentication, profile picture storage);
• RevenueCat (technical management of Slyko Pro subscriptions);
• Apple and Google (authentication via Sign in with Apple/Google, subscription payment processing via the App Store/Google Play);
• Anthropic, publisher of the Claude model (only the title or caption of content you choose to share to Slyko, to identify the game it refers to);
• IGDB (Twitch) and the Steam (Valve) Web API: public sources of video game data, never recipients of data about you beyond the technical request needed for the search or import you trigger;
• PostHog (audience measurement and product usage statistics);
• AppsFlyer (measuring the effectiveness of our acquisition efforts, only with your tracking consent);
• Sentry (technical error logging, to diagnose and fix bugs).

These providers only use your data to provide us their service, in line with their own privacy commitments.

6. Data transfers outside the European Union

Several of these providers (in particular Supabase, RevenueCat, Anthropic, PostHog, AppsFlyer, Sentry, Apple, and Google) are based, or process data, outside the European Union, in particular in the United States. These transfers rely on the mechanisms provided for under the GDPR (European Commission standard contractual clauses, or applicable adequacy decisions), which govern the level of protection of your data.

7. Retention period

Your data is kept for as long as your account exists. When you delete your account from the App settings, your profile, game library, reviews, and all data directly tied to it are removed from our database almost immediately and irreversibly.

Some technical data (error logs, aggregated and anonymized audience-measurement data) may be kept a little longer by our providers, for a period strictly limited to what is necessary for technical diagnostics or audience measurement, without allowing you to be re-identified.

8. Security

Access to your data is protected by database-level security rules (each user can only access their own data, and whatever other users have explicitly made visible), and traffic between the app and our servers is encrypted.

9. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. You can exercise most of these rights directly in the App (editing your profile, deleting your account). For any other request, contact us at contact@slyko.app — we will respond as soon as possible and no later than required by law.

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French supervisory authority, at cnil.fr.

10. Children

In line with our Terms of Use, the App is intended for people aged 15 or older, or used with the consent of a parent or legal guardian below that age. We do not knowingly collect data about children outside this framework.

11. The slyko.app website

The slyko.app website, on which this document appears, does not currently set any audience-measurement cookies or trackers. It only shows the pages needed for the App's share links to work, and these legal pages.

12. Changes to this policy

We may update this privacy policy, in particular to reflect changes to the App or to applicable regulations. The last-updated date appears at the top of this document.

13. Contact

For any question about this policy or your personal data, contact us at contact@slyko.app.