Privacy policy

Plydex is operated by Plydex. The operator is responsible for deciding how your personal information is used. Contact theplydex@gmail.com about this policy or your information.

You can browse games without an account. When you create an account, we store your name, email address and, if you choose a password, a salted password hash. We do not store your password in readable form.

If you choose a profile photo, we store a small square copy; it appears on your profile. You can replace or remove it in Settings. We also save your avatar colour and notification choices.

We store the information you save: games, wishlists, ratings, reviews, play sessions and notes, lists, device and genre preferences, and price-watch settings. If you import a library, we process the file or public Steam library you choose to provide.

Our hosting and network providers process connection information such as IP addresses, browser details and requests to operate and protect the site. Plydex also stores approximate browser and device labels (derived at sign-in, without storing the full browser header or IP address in the session record), session records and hashed identifiers used to limit repeated sign-in and email attempts.

Google sign-in is optional. If you use it, Google provides a stable account identifier, your name, email address and email-verification status. The basic profile permission can also include a profile picture; Plydex does not save or use that picture. We use this information to create or connect your Plydex account and authenticate you.

We do not request access to your Gmail messages, contacts, Google Drive or calendar. Google access and refresh tokens are not retained. Your Google information is not sold or used for advertising.

You can remove Plydex’s Google connection in your Google Account settings. This stops future Google sign-in access but does not automatically delete your Plydex account; delete it from Profile → Settings → Account & security, or contact us to request deletion.

If you choose PlayStation import, we send your PSN online ID to PlayStation to retrieve visible PS4 and PS5 game activity. We save the PSN account identifier, online ID, game titles, reported playtime and last-played dates to show your hours and match games to your library. We do not ask for or save your PlayStation password.

This unofficial public-profile lookup does not verify that you own the PSN account. Import previews expire after 10 minutes and are cleared on subsequent import activity. You can remove the saved PlayStation profile and hours in Profile → Settings → Connected platforms; games already added to your library remain until you remove them. Deleting your Plydex account removes the imported PlayStation data too.

We use account and library information to provide the features you request, including saving your games, showing your lists, account recovery and personalised game recommendations. Where data-protection law requires a lawful basis, this processing is necessary to provide our service under our agreement with you.

We use limited security and operational information for our legitimate interests in preventing abuse, investigating faults and keeping accounts safe. We use correspondence to answer your requests, and retain information where required to meet legal obligations.

Recommendations use your selected preferences and game activity. They do not make decisions with legal or similarly significant effects. Account emails concern verification and password recovery; price-watch notifications appear inside Plydex. We do not currently send marketing emails or use advertising or analytics trackers.

Community reviews can show your display name, rating and review. Public or shared lists can be seen by other people, including anyone you give a share link to. Keep personal or sensitive information out of content you choose to share. Your email address is not shown on public reviews or lists.

Your account credentials, private lists and play-session notes are not made public by Plydex. Check a list’s sharing settings before sharing its link.

Vercel hosts the website and processes requests and operational logs. Turso stores account details and the games and preferences you save. Cloudflare provides domain and DNS services. Google provides optional sign-in and handles support emails sent to our Gmail address. Resend delivers verification and password-reset emails when enabled, receiving the recipient address, message and delivery information.

Some providers operate internationally, so processing may take place outside your country. Where required, international transfers rely on applicable adequacy decisions or contractual safeguards. Contact us for details about the providers and safeguards used for your information.

Game artwork and screenshots can load from the relevant store or media provider, which receives ordinary connection information. Playing a trailer connects to its video provider, including YouTube where shown. Following a retailer link, including Amazon, takes you to a separate website governed by that provider’s privacy policy.

We do not sell your personal information. We may disclose information when legally required or where necessary to protect the service and its users.

New sign-ins use a browser-session cookie unless you choose to stay signed in for 30 days. A Google sign-in security cookie lasts up to 10 minutes. Our privacy panel lets you accept, reject or customise optional preferences and YouTube playback. An essential consent cookie remembers either choice for six months. Selected regions use a session cookie unless you allow them to be remembered between visits; stored themes also require that permission.

Our cookie details and controls explain each item and let you clear saved browser preferences. Sign out to revoke the current account session, or use Account & security to end other sessions or sign out everywhere. YouTube players wait for your choice before loading. External stores, Google and video providers have their own cookie policies.

Account details and saved content stay until you remove the content or delete your account; we do not currently delete accounts solely for inactivity. Account deletion removes the account, saved games, reviews, lists, imported platform data and sessions from the active database. Copies other people made of shared content are outside our control.

Server-side sign-in sessions expire after 30 days; sign-out removes the current session immediately and a password reset revokes all sessions. Expired session rows are removed when a new session is created. Reset links expire after 30 minutes and verification links after 24 hours; using a link deletes tokens for that purpose, and expired token rows are cleared when new tokens are issued.

Google sign-in challenges and PlayStation import previews expire after 10 minutes and are cleaned up during subsequent relevant activity. Hashed rate-limit records normally expire after 15 minutes, or one hour for signup limits, and are removed during later authentication attempts. Expiry stops these records from authorising access even before cleanup runs.

Support correspondence is kept while resolving the request and any related complaint or security investigation, then reviewed for removal when no longer needed. Where a legal obligation requires longer retention, we keep only the relevant records for that obligation. Hosting and email providers also retain operational records under their service settings; Resend’s standard email retention is 30 days.

Recovery backups may contain earlier account data. Deletion requests include a review of copies held by the operator and removal when no longer needed for recovery or a legal obligation. If a backup is restored, account deletions must be reapplied before returning it to service. Scheduled price snapshots contain public prices, not account information.

You can change your preferences and saved content in Plydex, download account data or a games CSV from Profile → Settings → Privacy & data, or delete your account from Account & security, or contact theplydex@gmail.com to request access, correction, account deletion or a copy of your personal information. We may ask for enough information to verify that the account is yours.

Depending on the law that applies to you, you may also have rights to restrict processing, object to processing based on legitimate interests, and receive portable data. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.

You can complain to your local data-protection authority. In the UK, this is the Information Commissioner’s Office.

Plydex is not directed at children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and remove it where appropriate.

We will update the date on this page when the policy changes and provide an appropriate notice for material changes. See our terms of use for the rules for using Plydex.