Privacy Policy
Last updated 26 October 2026
Translation of the French version, which prevails.
Who is responsible
The data controller is Amine Benaziza (Amios), publisher of Endscreen (see the legal notice). For any question about your data: hello@endscreen.fr.
This website
endscreen.fr sets no cookies, doesn’t measure traffic and loads nothing from third-party services (the fonts are served by the site itself). Our host, Vercel, technically sees your IP address to send you the pages and protect the site from attacks. That’s our legitimate interest in running a safe site.
If you email us, we use your email address to answer you, and only for that.
The “Notify me” list
If you leave your email address with “Notify me”, we keep that address, the language of the page and the date. It’s used for one thing: sending you an email the day the app comes out. The legal basis is your consent, which you give by sending the form. The address is stored by the app’s host (see below) and is never shared or used for anything else.
We keep it until launch, long enough to send that email, then the whole list is deleted. You can unsubscribe before that, no reason needed: write to hello@endscreen.fr from that address and we’ll delete it. The launch email will also have a link to do it.
In the app: what is public
Endscreen is made for sharing opinions. Anyone can see, even without an account: your username, display name, photo, bio and the other profile fields you fill in, your library (Want to play, Playing, Paused, Finished, Dropped), your reviews, and the players you follow or who follow you. Your email address is never shown.
In the app: the data used
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Username, display name, creation date, confirmation that you’re 16 or older and that you accepted the Terms | Create and run your account | Contract (the Terms) | As long as the account exists |
| Email address, if you link one | Sign you in, send your codes, keep you from losing your account | Contract | As long as the account exists |
| Optional profile: photo, bio, platforms, playing since, favourite genres and games, country | Show your profile | Contract | Until you remove them |
| Library, status history, reviews, Helpful votes, follows | The core of the app, and the verdicts | Contract | As long as the account exists |
| Notifications, settings, language, time zone, push token | Send you the right notifications at the right time, and now and then a message from the team to your account | Contract | Notifications: 90 days. The rest: as long as the account exists |
| Device key, session tokens, sign-in codes (all stored hashed, which can’t be turned back into the original) | Keep you signed in safely | Contract | Codes: 10 minutes. Linked sessions: 90 days after last use |
| Reports you sent or that concern you, moderation decisions | Moderate and handle reports | Legitimate interest and legal obligation (DSA) | 12 months after the report is closed |
| Technical data: hashed IP address for anti-abuse limits, log of recent actions, server logs (account id and masked IP, never your full email or your codes) | Security, fighting spam and fake accounts, answering requests from authorities | Legitimate interest and legal obligation (French LCEN, art. 6) | Limits: 1 hour to 2 days. Logs: 12 months |
| Hashed fingerprint of the email or Apple or Google id of a suspended account that deleted itself | Stop people getting around a suspension by recreating the account | Legitimate interest | 1 year |
An account that isn’t linked to an email, has no games and no reviews, and hasn’t been used for 6 months is deleted automatically.
None of this is used for advertising or profiling. The order of reviews (friends first, then similar taste) makes no decision about you beyond what shows first.
Who else handles it
Only technical providers, working on our behalf, who can’t use your data for themselves:
- the host of the servers and the database: named here before the app comes out;
- Resend, Inc. (USA): sends the emails with your codes;
- profile photo storage: named here before the app comes out;
- Expo (650 Industries, Inc.) (USA), then Apple or Google: deliver push notifications to your phone;
- Vercel Inc. (USA): hosts this website.
IGDB, which provides the game data, receives no data about you.
When data leaves the European Union, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.
Your rights
At any time you can:
- get your data: Settings, My data, Export my data (a JSON file with everything about you);
- correct it: Edit profile;
- erase everything: Settings, Delete my account (what goes and what stays);
- object to processing based on our legitimate interest, ask for it to be restricted, or leave instructions on what happens to your data after your death.
For anything the app doesn’t let you do yourself, write to hello@endscreen.fr. We answer within one month. If your account isn’t linked to an email, we can’t check it’s really you: use the app.
If you think your rights aren’t respected, you can complain to the French data protection authority, the CNIL (cnil.fr/fr/plaintes), or to the authority of the EU country where you live.
Minimum age
You must be 16 or older to create an account. We ask when you sign up.
Security
Connections are encrypted (HTTPS). Codes, keys and tokens are stored hashed, and so are IP addresses when they’re used for limits. Only the publisher has access to the data.
Changes
If this policy changes on something important, the app will tell you before it applies. The date at the top shows the last update.