Privacy
Last updated 23 October 2026
The short version
memcard keeps what you need to use it: your email, your profile, and what you log. Most of what you log is public, because sharing it is the point. There are no ads, no trackers and no analytics, and we don't sell or share your data with anyone to market to you.
You can download everything we have about you, or delete your account and all of it, from Settings at any time.
What we keep
- Your account: email address, display name, handle, password (stored only as a one-way hash), bio and picture.
- What you log and write: saves, ratings, reviews, play sessions and notes, statuses, shelves, comments, likes, follows, discussions, daily-game results, reports you send and players you block.
- Accounts you connect: your Steam ID and games with hours played, or your Riot ID and League matches. If you add your own Steam Web API key, it is stored encrypted.
- To keep you signed in and safe: a session cookie, and for each session the IP address and browser it came from. Short-lived counters limit how often an account or address can do some things, such as sign-in attempts and password checks.
- Emails we send you: whether you turned the weekly email on, and when we last sent it.
What other people see
Your profile, saves, ratings, reviews, shelves, comments, discussions, follows and badges are public, including to people who aren't signed in and to search engines. Your email, password, sessions, notifications, blocks, reports and connected-account keys are never shown to anyone.
Why we use it
- To run memcard for you (the contract you agree to by signing up): your diary, profile, feed, imports and notifications.
- To keep the site safe (our legitimate interest): stopping spam and abuse, handling reports, and keeping accounts secure.
- The weekly email only because you turned it on (your consent); you can turn it off from any email or from Settings.
We don't use your data for advertising, and we don't make automated decisions about you.
Who helps us run it
These companies process data for us, only to provide their service:
- Vercel: hosts the site.
- Neon: hosts the database, including uploaded pictures.
- Brevo (or Resend): sends account emails and the weekly email.
- Google and Discord: only if you choose to sign in with them; they tell us your name, email and picture.
- Steam (Valve) and Riot Games: only if you connect an account; we ask them for your games and matches.
Some of them are in the United States; they transfer data under the EU's standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
Until you delete it or your account. Deleting your account removes your profile and everything you logged or wrote, including pictures, at once. Sessions end after a week without use, password-reset links after an hour and verification links after a day. Our host keeps request logs, which include IP addresses, for a short time to keep the site running.
Your rights
You can see, correct, download and delete your data yourself: edit your profile in Settings, download everything as a file under Your account and data, or delete the account there. You can also ask us to restrict or stop using your data, or ask anything about it, at the contact address below. If you think we've got it wrong, you can complain to your country's data protection authority.
Age
memcard is for people aged 16 and over.
Contact
We're setting up a contact address. Until then, use the Report links, and delete or download your data from Settings.