Endroll Privacy Policy

Endroll ("the app") is made by 2April ("we", "us"). It is a diary for the video games you play: you rate them, write reviews, set a status, and collect them into lists. This policy explains what the app processes, why, and the choices you have.

Two things are worth knowing up front, because they shape everything below. First, Endroll is social: what you rate and write is visible to other users. Second, the app is free and supported by banner ads served by Google AdMob, which involves your device's advertising identifier. We do not sell your data.

Your account

Creating an account requires an email address, a password, and a username; a display name is optional. Accounts and sign-in are handled by Supabase Auth on our behalf. Your password is stored only in hashed form by Supabase — we never see it, and it is never shown to us or to anyone else.

Your email address is used to identify your account, to let you sign in, and to contact you about the account if we need to. It is never shown to other users and we do not use it for marketing.

What you record in the app

When you log a game, we store what you entered: the rating (in half-star steps), your written review, the status you chose (finished, playing, in your list, dropped), the platform you played on, whether you liked it, and when you last changed it. We also store the lists you create, the games and notes in them, and the people you follow.

This is kept on our servers so that your library follows you to any device you sign in on, and so that the community average and reviews can be shown on a game's page.

What is public, and what is not

Endroll works like a public diary. These are visible to anyone using the app:

• your username, display name, and profile;
• your ratings and written reviews, including which game and platform and the date — they appear on that game's page and in your profile;
• the lists you mark as public, and who you follow.

These are not public: your email address, your password, and any list you keep private — private lists are visible only to you.

Please write reviews with this in mind. A review is not a private note; treat it as something you are publishing.

Advertising

Endroll is free and shows banner ads through Google AdMob on the Discover and Search screens. Unlike a rewarded ad, these appear as part of the screen rather than because you asked for one.

To serve an ad, Google may process your device's advertising identifier, coarse information about your device (such as model, operating system version, and language), your approximate region derived from your IP address, and whether an ad was shown or tapped. We receive only aggregate counts — never information about you as an individual, and we hold no advertising data of our own.

Your choice about personalised ads

On iOS the app shows Apple's App Tracking Transparency prompt before any ad is requested, asking whether we may use your device's advertising identifier to personalise ads. Your answer decides what happens next:

• If you decline (or dismiss the prompt), ads are not personalised. They are not selected from a profile about you, and no tracking takes place.
• If you allow it, Google may use the advertising identifier to select more relevant ads, which can involve linking your activity with data from other apps and websites — this is what Apple calls tracking.

Every feature of the app works identically either way; declining costs you nothing. You can change your answer at any time in Settings → Privacy & Security → Tracking, and you can limit ad personalisation more broadly under Settings → Privacy & Security → Apple Advertising.

Google's handling of this data is described in its privacy notice.

What stays only on your device

Some things never leave your phone: the list of games you recently viewed, your theme choice (light, dark, or system), and your language choice. They are stored in the app's local storage and are not uploaded to us. Deleting the app removes them.

The game catalogue

Game titles, cover art, release years, genres, platforms, playtime estimates, and trailers come from IGDB (a Twitch service). The app never contacts IGDB directly: requests pass through our own server, which adds no information about you. IGDB does not learn who is looking at a game. Trailers are played from YouTube; watching one loads content from Google under Google's own terms.

Service providers

We share only what each provider needs:

• Supabase — hosts the database and handles accounts and sign-in. It holds your email, your entries, and your lists on our behalf.
• Google AdMob — serves banner ads, as described above.
• IGDB / Twitch — supplies the game catalogue. No personal data is sent.
• Apple — delivers the app and handles App Store reviews under Apple's own policies.

There are no other third parties. The app contains no analytics, attribution, crash-reporting, or social-network SDKs.

What we do not collect

We do not collect your name (beyond a display name you choose yourself), phone number, precise location, contacts, photos, calendar, health data, payment details, or browsing history. The app has no in-app purchases and no subscriptions, so no payment flow exists.

Retention and deleting your data

Your account and entries are kept for as long as your account exists. To delete your account and everything in it, email [email protected] from the address on the account; we will delete it within 30 days of the request. Individual entries and lists can be changed at any time from inside the app.

Deleting the app alone does not delete your account, because your entries live on our servers so that they survive a new phone.

Your rights

• EU / UK (GDPR): we process your account and entries to provide the service you asked for (performance of a contract). Personalised advertising is processed on the basis of your consent, given through the tracking prompt and withdrawable at any time in your device settings; non-personalised ads rest on our legitimate interest in funding a free app. You may request access to, correction of, or erasure of your data, and a copy of it, using the contact address below.
• California (CCPA/CPRA): we do not sell your personal information. Where you allow tracking, the advertising identifier may be "shared" for cross-context behavioural advertising as that term is defined in the CPRA; declining the tracking prompt opts you out.
• Türkiye (KVKK): the data controller ("veri sorumlusu") is 2April. Your account and entries are processed to deliver the service; advertising data is processed on the basis of your explicit consent. You may exercise your rights under Article 11 by writing to the address below.

Children

Endroll is rated 13+ and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, write to us and we will remove it.

International users

The app is available worldwide. Your data may be processed by our providers on servers outside your country, including in the United States and the European Union.

Changes

We may update this policy; material changes will be reflected by the "last updated" date on this page.

Contact

Questions about privacy, or a request to delete your account? Email [email protected].