Legal

Privacy Policy

Last updated 27 July 2026

Draft — not yet reviewed by a lawyer. Buddy Recall has not launched. This document describes the intended handling of data by the app currently in development, and is published so it can be reviewed and referenced during build. It must be checked by a qualified lawyer before the app accepts a single real user.

Buddy Recall is an application for finding people you played games with. This policy explains what it collects, why, how long it keeps it, and how you get rid of it. The short version: it is built to hold as little about you as possible, because data it does not have is data that cannot leak.

Who is responsible

Buddy Recall is operated by [OPERATOR LEGAL NAME], an independent developer. For any question about this policy or about your data, contact privacy@buddyrecall.app.

What is collected

Account information

An email address, used to sign you in and to contact you about the service. If you sign in through a third party such as Apple, Google or Discord, that provider confirms your identity to us; we take the email address and nothing else.

Profile

A username of your choosing, and an avatar picked from a fixed set of icons and colours supplied with the app. There are no image uploads.

Game memories

The identities you register (a handle, a game, details such as server or faction, and rough years) and the searches you file for other people. This is the substance of the service and is pseudonymous game history rather than personal identification.

Messages

The content of messages you send to people you have connected with, retained so the conversation exists.

Shareable handles

Optionally, handles on other platforms — Discord, Battle.net, PlayStation Network, Xbox — if you choose to add them. These are visible only to people you and they have mutually accepted.

Age confirmation

Buddy Recall is for adults. You are asked to confirm your date of birth at signup, it is checked on your device, and only the fact that you confirmed, plus the date you did so, is recorded. Your date of birth is never transmitted or stored.

What is deliberately not collected

Your real name
Your phone number
Photographs of any kind
Your date of birth
Your location
Contacts, address book, or social graph from any other service

Where a third-party sign-in provider volunteers extra details such as a full name or profile picture, those are not copied into the application.

How your information is used

To operate your account and sign you in
To compare your registered memories against other people's and propose matches
To deliver messages between people who have accepted each other
To notify you when something relevant happens, such as a new possible match
To investigate reports of abuse and enforce the Terms

Your information is not sold. It is not shared with advertisers, and there is no advertising in the application.

What other people can see

This is the part worth reading carefully, because the answer is unusual.

There is no public profile and no directory. Nobody can browse users.
You become visible to another person only through a match, and a match happens only because you registered an identity specific enough to be found.
Before you accept a match, the other person sees your username and the corroborating details that matched — not your registered handle.
Your handle is disclosed to the other person when you accept.
Your shareable platform handles appear only after you have both accepted, and are hidden again if the connection is removed.
Whether you read a message is never shown to the other person.
Declining a match is silent. The other person is not told.

Service providers

Buddy Recall runs on infrastructure operated by third parties, who process data on its behalf and under contract:

Supabase — database, authentication and realtime messaging.
Sign-in providers — Apple, Google, Discord and similar, only if you choose to use them, and only to confirm your identity.

This website itself is served as static files by GitHub Pages. It sets no cookies, runs no analytics, and loads no third-party scripts or fonts.

How long things are kept

Account data, identities, searches and messages are kept until you delete them or delete your account. Whether messages should be automatically removed after a period is still being decided; if that is introduced, it will be stated here and in the app before it takes effect.

Your rights

You can, at any time: edit or delete an identity, delete a search, disconnect from a person, or delete your account entirely. Deleting your account removes your profile, identities, searches, matches and messages.

Because a conversation belongs to two people, deleting content that has conversations attached ends them for the other person as well. The app warns you before that happens.

Depending on where you live you may also have rights to access, correct, export or restrict the processing of your information. Write to privacy@buddyrecall.app and it will be handled.

Children

Buddy Recall is not for anyone under 18. Accounts are not knowingly created for minors, and any account found to belong to one is deleted.

Security

Access to data is restricted at the database level so that you can reach your own records and the specific records a mutual match entitles you to, and nothing else. No system is perfectly secure, but the amount held about you is kept small on purpose so that the consequences of a failure stay small.

Changes

If this policy changes materially, the date at the top changes and you will be told in the application before the change applies to you.