Privacy Policy

Grasped ApS is the controller of personal data processed through Grasped for the purposes described in this Privacy Policy, except where we clearly state otherwise.

If you have questions about this policy or want to exercise your privacy rights, you can contact us at grasped.app@gmail.com.

Depending on how you use Grasped, we may collect the following categories of personal data:

• account details such as email address, username, display name, password hash, and login events;
• profile information, settings, and privacy preferences;
• game library, tracked games, gameplay-related activity, ratings, notes, and list data;
• social data such as comments, reactions, follows, friendships, and related activity signals;
• linked platform data imported from services such as Steam, including identifiers and library data;
• support and feedback communications you send to us; and
• technical and usage data such as device data, browser data, IP address, logs, and security events.

We collect data directly from you when you create an account, use the service, submit content, adjust settings, contact support, or connect third-party accounts.

We also collect data automatically through normal operation of the service, including technical logs, session-level information, and security-related diagnostics. Where you choose to connect third-party platforms, we may receive data from those services according to the permissions and flows they provide.

We process personal data to:

• create and manage accounts;
• operate the core tracking, social, and recommendation features of Grasped;
• import or sync linked platform data where you request it;
• personalize feeds, recommendations, and other Magic features;
• keep the service secure, reliable, and protected against misuse;
• answer support requests, troubleshoot issues, and improve the product; and
• comply with legal obligations and enforce our terms.

Where the General Data Protection Regulation applies, we rely on one or more lawful bases depending on the processing involved.

• Contract: when processing is necessary to provide the service you requested.
• Legitimate interests: for service security, fraud prevention, service improvement, and product analytics.
• Consent: where consent is legally required, such as for certain optional technologies or communications.
• Legal obligation: where we must keep or disclose information to comply with law.

We do not sell your personal data. We may share personal data with service providers and processors that help us operate Grasped, such as infrastructure, hosting, authentication, email, analytics, customer support, or monitoring providers.

We may also disclose information where necessary to comply with law, protect the rights and safety of users or third parties, investigate abuse, or in connection with a merger, acquisition, financing, or asset transfer.

If you use social features, some information you choose to share may be visible to other users according to the feature design and your privacy settings.

Grasped may use service providers located outside your country, including outside the European Economic Area. Where required, we will use appropriate safeguards for international transfers, such as standard contractual clauses or other lawful transfer mechanisms.

We keep personal data only as long as necessary for the purposes described in this policy, including to provide the service, maintain security records, resolve disputes, and comply with legal obligations. Retention periods may vary depending on the type of data and the reason it was collected.

Subject to applicable law, you may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also withdraw consent where consent is the basis for processing.

You may request account deletion or make another privacy request by contacting grasped.app@gmail.com. We may ask you to verify your identity before acting on certain requests.

If you believe our processing of your personal data violates applicable law, you may lodge a complaint with your local supervisory authority. If you are in Denmark, this may include Datatilsynet.

Grasped is not intended for children below the age at which they may lawfully consent to data processing under applicable law. If you believe a child has provided personal data unlawfully, please contact us so we can investigate.

We use reasonable technical and organizational measures to protect personal data. No security measure is perfect, and we cannot guarantee absolute security.

We may use cookies or similar technologies for site functionality, authentication, security, and service improvement. If we later use non-essential technologies that require consent, we will request that consent where required by law.

We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. When we do, we will publish the updated version with a revised effective date and may provide additional notice where appropriate.

For privacy questions, requests, or complaints, contact grasped.app@gmail.com. For general support, you can also write to grasped.app@gmail.com.