Legal

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Daydremr (“we”, “us”) collects, uses, and shares information when you use Shelf, the gaming library app, and the website at shelfgames.app (together, the “Services”).

It is written to meet Apple’s App Store requirement that every app publish a public privacy policy describing what is collected, how it is used, who it is shared with, how long it is kept, and how you can access or delete it. Use of Shelf is also subject to our Terms of Use.

1. 1. Who we are
2. 2. Information we collect
3. 3. How we use information
4. 4. How we share information
5. 5. Your public profile
6. 6. App Store and Play purchases
7. 7. Retention
8. 8. Your choices and rights
9. 9. Children
10. 10. Security and transfers
11. 11. Changes
12. 12. Contact

1. Who we are

Shelf is operated by Daydremr. Questions, complaints, and privacy requests should go to support@daydremr.com.

We do not sell personal information, we do not show ads, and we do not use advertising networks or follow you across other companies’ apps and websites. The app uses one product-analytics service and one push-notification service, both described below. It has no crash-reporting SDK and it does not record your screen.

2. Information we collect

We collect what we need to run an account, keep a library, connect optional platform accounts, recognise a paid plan, send notifications you have allowed, and understand how the app is used. We do not collect precise location, contacts, health data, or browsing history outside the Services.

Account

When you create an account we collect:

• Email address
• Display name
• A password, if you sign up with email and a password. We store only a hash of it
• A profile photo and a short bio, if you add them
• Sign-in identifiers from Apple or Google, if you use Sign in with Apple or Google
• One-time codes we email to verify your address or reset your password

If you use Sign in with Apple and hide your email, Apple gives us a private relay address instead of your real one. We never receive your Apple or Google password.

Your display name, photo, and bio appear on your public profile.

Library and activity

To provide the product we store:

• Games you save, the shelves you put them on, and custom shelves you create
• Ratings, favourites, play status, completion dates, and similar library actions
• Playtime and achievement progress imported from a connected platform
• The link or text you send when you share something to Shelf from another app, kept as a note on the game you saved
• What you do in the discovery feed: which games you were shown, skipped, opened, dismissed, shelved, or watched a trailer for, and for how long. We use this only to choose what your own feed shows next
• Preferences such as onboarding state and filters
• Your device’s time zone and when you last used the app, so that notifications are timed sensibly

Connected platforms

Connecting Steam, PlayStation Network, Xbox, Epic Games, or GOG is optional, and so is importing a list from Backloggd. You choose to link an account, and you can disconnect it. For each one we keep the identifier that names the account (Steam ID, PSN Online ID, Xbox gamertag, Epic account ID, GOG username, or Backloggd username) and what that platform returns for it:

• Profile details: the name and avatar you use there, and figures such as level, trophy totals, or gamerscore. Where you have made them public on that platform, this can include a real name, a bio, or a location
• The games in the library, with playtime and when each was last played
• Achievements and trophies, and when they were unlocked
• For Steam, your badges and the items in your public inventory
• For Backloggd, the games on your lists and the status you gave each one

Steam, PlayStation, Xbox, GOG, and Backloggd are read from the public profile you name. We do not ask for those platforms’ passwords. Steam sign-in, when used, goes through Steam’s own OpenID flow, or you can type a Steam ID instead. PlayStation and Xbox imports use our service credentials against public profile APIs, not a login as you. If a profile is set to private, the import fails until you change that platform’s privacy settings — which is why the app walks through those steps before linking.

Epic Games has no public library, so it works differently. You sign in on Epic’s own login page, which gives you a one-time authorisation code, and you paste that code into Shelf. We exchange it for access tokens, keep them on our servers, and use them to read that Epic account’s display name, games, playtime, and achievements. We never see your Epic password.

While a platform stays connected we refresh it automatically, about once a day, as well as when you ask.

Game catalogue facts (titles, covers, trailers, genres) come from IGDB and related store metadata, not from your account.

Purchases

Payments for Shelf Pro are processed by Apple or Google, not by us. We do not receive your full payment card number. We receive an entitlement record — whether a subscription or lifetime purchase is active, which product it is, and which store sold it — through RevenueCat, which reads the store receipt so the app can unlock Pro. RevenueCat knows you by your Shelf account ID. See RevenueCat’s privacy policy.

Analytics

The app uses PostHog to show us how Shelf is used, so we can find what is confusing or broken. It records:

• Which screens you open, with the ID of the game or profile on screen and the text of a search you run
• Taps on the app’s buttons, by the wording on the button
• When the app is installed, updated, opened, and put in the background
• The steps of signing in, including the method you chose and any error message we showed
• When a Shelf Pro offer is shown, and whether a purchase was started, completed, or cancelled
• Device details: model, operating system, app version, language, time zone, and screen size
• An approximate location, such as country and city, worked out from your IP address

These events are tied to a random identifier for the install until you sign in, and to your Shelf account ID after that. They do not include your email address or your password. See PostHog’s privacy policy.

Push notifications

Notifications are delivered through OneSignal, whose SDK is part of the app. It receives your Shelf account ID, a push token for the device if you allow notifications, and device details: model, operating system, app version, language, country, time zone, and how often and for how long the app is opened. It does not receive your location; that part of the SDK is switched off.

What a notification says is chosen from your library — for example a wishlisted game coming out, a game you are close to finishing, or new unlocks — and we send reminders if you have not opened the app for a while. We keep a log of which notifications we sent you and when, so that you are not told the same thing twice.

Technical data

Our servers necessarily see the IP address, device type, and app or browser version of a request, the way any website does. We use this to operate the API, debug failures, and keep the service secure. We do not use it to advertise, and we do not build an advertising profile from it.

Game artwork, trailers, and site icons are loaded by your device directly from the companies that host them — IGDB, the game stores, and Google, including the YouTube player used for some trailers — and those companies see your IP address when they are loaded.

The website at shelfgames.app sets no cookies and runs no analytics. Cloudflare, which hosts it, processes the IP address of each request in order to deliver the page.

Communications

If you email support, we keep the message and the address it came from so we can reply. Auth emails contain only a one-time code.

3. How we use information

We use personal data to:

• Create and maintain your account, and keep you signed in
• Store and display your library, shelves, and ratings
• Import connected libraries, and keep them up to date while they stay connected
• Show your public profile to the people you give its link to
• Choose the games your feed and recommendations show you
• Recognise a Shelf Pro purchase and restore it on a new device
• Send sign-in and account emails
• Send push notifications, if you allow them
• Respond to support requests
• Protect the Services against abuse, and comply with law
• Understand how the app is used and improve it, not to target advertising

Where European data-protection law applies, we process this information to perform our contract with you (providing the account, the library, and its profile), with your consent (optional platform links, a profile photo and bio, and push notifications), and as needed for legitimate interests such as security, keeping the catalogue working, and measuring how the app is used — interests you can object to as described below.

4. How we share information

We do not sell personal information. We share it only with the processors needed to run Shelf, and only as far as each one needs:

• Apple and Google — sign-in and in-app purchases, under their own terms and privacy policies
• RevenueCat — your Shelf account ID and subscription status, so Pro can be unlocked and restored
• PostHog — the analytics events described above
• OneSignal — your Shelf account ID, device details, and the notifications we send you
• Steam, Sony, Microsoft, GOG, and Backloggd — only the public identifiers you give us, so we can fetch the public data you asked to import
• Epic Games — the authorisation you gave us, sent back to Epic each time we read your library
• IGDB / Twitch — catalogue lookups. These do not receive your account
• Amazon Web Services — hosts the API and the database
• Resend — sends the one-time codes, so it receives your email address
• Cloudflare — hosts the website

We do not post to any platform account you connect.

We may also disclose information if required by law, to protect the Services or someone’s safety, or as part of a merger or sale of the operator, in which case this policy would continue to apply or you would be told otherwise.

5. Your public profile

Every Shelf account has a profile page. Anyone who has its link can open it, without signing in. It shows:

• Your display name, photo, bio, and the date you joined
• The games on your shelves, including custom shelves
• Totals for your library, such as how many games you have completed, your average rating, and the genres you save most
• Your total playtime, and how much you played day by day
• Recently played games, and when games moved between shelves
• Achievements, trophies, and Steam badges you have earned
• For each connected platform, the name and avatar you use there and your totals on it — for example your Steam name, PSN Online ID, Xbox gamertag, Epic display name, or GOG username

It does not show your email address, how you sign in, or anything about your purchases.

The link contains a random account identifier. We do not list profiles anywhere and there is no way to search for one, so a profile reaches other people when you share its link. There is currently no setting that switches the profile off. If you want something left out of it, remove it from your account — for example by disconnecting a platform or clearing your bio — or email support@daydremr.com.

6. App Store and Play purchases

When you buy or subscribe through the App Store or Google Play, Apple or Google is the merchant of record. They collect payment details under Apple’s Privacy Policy or Google’s Privacy Policy. We receive enough to know that you paid and which product you paid for, not your card.

Apple’s description of how the App Store uses purchase and device data is here: App Store & Privacy.

7. Retention

Account and library data stay until you delete the account. Support email is kept long enough to finish the conversation and for ordinary record-keeping.

Disconnecting a platform removes the games, playtime, and achievements it brought in from your account, and takes that platform off your public profile. Games you had filed on a shelf yourself stay where you put them.

Deleting the account removes the library, shelves, ratings, feed history, notification log, platform connections, and entitlements we store, and the public profile stops working. A tombstone is kept — the account’s ID, name, photo, and email address, marked as deleted — so the same email can sign up again and so we can refuse to recreate a deleted row by accident. Purchase history remains with Apple or Google; deleting Shelf does not cancel a store subscription.

Two things are not erased automatically by a disconnect or a deletion: the copy of a platform profile we fetched, together with the stored authorisation for Epic Games, and the records held for us by PostHog, OneSignal, and RevenueCat. Email support@daydremr.com and we will delete them.

Server logs that include IP addresses are kept only as long as needed to operate and secure the API.

8. Your choices and rights

You can, from the app or by emailing us:

• Access and update your name, photo, bio, and email
• Export your library as a file from Profile
• Disconnect Steam, PSN, Xbox, Epic Games, GOG, or Backloggd
• Delete your account from Profile; see Retention for what that removes
• Ask us to correct or delete personal data, or send you a copy of it
• Ask us to delete the analytics and notification records tied to your account

Depending on where you live (including the UK, EEA, and a number of US states), you may also have the right to object to or restrict certain processing, to withdraw consent, and to complain to a data-protection authority. Email support@daydremr.com and we will handle the request. We may need to confirm it is you.

To stop a subscription, cancel it in your Apple ID or Google Play account. That is the store’s billing, not something we can reverse from the app. Restoring purchases in Shelf re-reads the store; it does not create a new charge.

Push notifications are sent only if you allow them when the app asks, and can be turned off at any time in the device settings.

9. Children

Shelf is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.

10. Security and transfers

We use HTTPS, keep your sign-in session in storage that is private to the app on your device, store passwords and one-time codes only as hashes, and limit who can reach the production database. No method of transmission or storage is perfectly secure.

The Services, and the providers named in How we share information, may store and process information in a country other than yours, including the United States. If you use Shelf from the UK or EEA, your information may be transferred to and processed in those countries. We do that only to provide the Services you asked for.

11. Changes

If we change this policy in a material way, we will update the date at the top of this page and, where required, notify you in the app or by email. Continued use after a change means you accept the updated policy.

12. Contact

Daydremr
Attn: Deepak Sangle
Email: support@daydremr.com
Web: https://daydremr.com

For the contract that governs use of the app, including the licence on Apple-branded devices, see the Terms of Use.