Your data, your game.
Tier is built for players who want to track their backlog, write reviews, and talk to friends. To keep the core app free, we now show a limited number of ads (banners and medium rectangles) through a consent-first advertising setup. This page explains exactly what we collect, why, who we share it with, and the control you have over it. Plain language, no dark patterns.
01 Identity of the data controller
Tier is a mobile application for video game tracking and social journaling. The data controller within the meaning of article 4(7) GDPR is a private limited company (SRL) established in Belgium:
- Publisher: Toutdoo SRL
- Postal address: Chaussée de Mons 356, 1070 Brussels, Belgium
- Company number (CBE / VAT): BE1041833745
- Contact: contact@yourtier.com
- Mobile app: distributed on the Apple App Store and Google Play under the bundle identifier
com.yourtier.tier - Official website:
yourtier.com
Because the processing is not carried out on a large scale and does not involve large-scale, regular and systematic monitoring within the meaning of article 37 GDPR, the designation of a Data Protection Officer (DPO) is not mandatory. The single point of contact for any privacy-related request is contact@yourtier.com. We respond within one month (art. 12.3 GDPR), extendable by two further months for complex requests.
02 Data we collect
Only what is necessary to operate the app, grouped by purpose:
Account and identity (Odoo res.users / res.partner)
Profile (all fields optional, on res.partner)
- Display name, bio, pronouns, "gamer since" year
- Date of birth (optional) — your exact age is computed from it: the app's profile form refuses an age under 13, and an age under 18 makes the app request only non-personalised ads (see section 05a). Other players never see the date; your age and whether you are under 18 are included in the profile data our server sends to players allowed to see your profile, but no screen of the app or the website displays them.
- Favourite genres and platforms
- Avatar and profile banner
- Social handles you type in: Twitter/X, Discord, Twitch, YouTube, Steam, Xbox Live, PSN, Nintendo. They are free text shown on your profile; we do not check them with those platforms. They are separate from the Steam and Xbox connections described below.
- Profile visibility:
public,following(people you follow) orprivate(see section 08).
Activity and content
- Journal entries (
tier.journal.entry) with one of six statuses: to play, playing, played, abandoned, replaying, 100% completed. - Reviews (
tier.review) — text and a 1-10 rating. Reviews you publish are public by design. - Custom lists (8 types: favourites, wishlist, backlog, etc.).
- Social graph: follows (
tier.user.follow) and blocks (tier.user.block). - Notification history (
tier.notification) and gamification stats (XP, level, streaks). - Feedback and support requests you choose to send us (rating prompts, short polls, comments, bug reports, support tickets), with the app version and language.
Connected game libraries (Steam, Xbox)
You can connect a Steam or Xbox account to the Tier account you are signed in to, in the app or on the website, to import your games. It is optional, and it is not a way to sign in to Tier.
- Steam. You sign in on Steam's own page (Steam OpenID): Steam only tells us your SteamID, never your Steam password. Our server then uses our own Steam Web API key to read your public Steam profile (we keep your display name and profile link), the games you own with their playtime and last-played date, your Steam wishlist and, for some games, your achievements (only to spot the games you have fully completed). Your Steam profile and game details must be public on Steam for the import to work.
- Xbox. You sign in on Microsoft's own page and allow Tier to access your Xbox Live data (permissions
XboxLive.signinandXboxLive.offline_access; no email address is requested). Our server receives a Microsoft token and uses it with the Xbox Live services to read your gamertag, your Xbox user id (XUID), the games of your title history with their last-played date, achievement progress and devices, and your minutes played. Your Xbox privacy settings must allow your game history to be seen. - What we store. One linked-account record per platform (
tier.external.account): your SteamID or XUID, your Steam display name or gamertag, your Steam profile link, the link date, the date and counters of the last import, and up to 50 titles we could not match with our catalogue. For Xbox only, the Microsoft refresh token, encrypted, so that you can import again without signing in again; the short-lived access tokens are never stored. The sign-in step uses a temporary ticket valid 30 minutes and deleted within two days. - What the import creates. Journal entries for the games that are not in your journal yet, with the playtime and a status: to play if you never played it, 100% completed if you unlocked every achievement, playing if you last played it in the past 30 days, played otherwise (Xbox only lists games you played, so they are never to play); and, for Steam, the games of your Steam wishlist added to your Tier wishlist. Entries you already have are never changed. Imported entries are journal entries like any other: they follow your profile visibility, you can edit or delete them, and they feed your recommendations (weighted by playtime).
- Unlinking. In the app: Settings → Connected accounts → "Import your Steam library" → Unlink. On the website: Settings → "Your games elsewhere" → "Import your Steam library" → Unlink. Unlinking deletes the linked-account record and, for Xbox, the stored token; the games already imported stay in your journal. For Xbox, you can also remove Tier's access from your Microsoft account at account.live.com/consent/Manage.
Wiki assistant
On a game page (app and website), signed-in players can ask questions about the game. The assistant searches the game's community wiki and an AI model writes the answer from the pages found, with links to its sources. Answers are generated automatically and can be wrong.
- What is sent. Your question (up to 500 characters), the last messages of the same conversation (up to 6), the name of the game and the language of the answer go to the AI providers listed in section 05, together with extracts of the wiki pages. Search terms written from your question (or, failing that, the beginning of the question) are sent from our server to the game's wiki. Your name, gamer tag, email address and account id are not sent to the AI providers or to the wiki.
- Pictures. The wiki pictures shown with an answer are loaded by your device directly from the wiki's servers, which therefore see your IP address, as for any web page.
- What we store (
tier.wiki.conversation,tier.wiki.message): your conversations per game (questions, answers, wiki sources, language) and the "helpful / not helpful" rating, reason and note you choose to give. When you reach the daily question limit, you can answer a short optional survey (whether you want more questions, how many, what you liked, what you learned), stored with your account and the game. A daily question counter per account is kept in our rate-limit table for about 24 hours.
Automatic translation of comments and reviews
Comments and published written reviews are translated automatically into the languages of the site,
so that every reader can read them in their own language. The text (up to 5,000 characters) is sent
to Mistral AI (France) without your name or account, and the translations are stored
with the comment or review (tier.comment.translation); they are replaced when you edit
the text.
Votes without an account (website)
On the website, a visitor without an account can try the S-to-F rating on some pages. The vote is
linked to a random identifier kept in a first-party cookie (tier_vid, 365 days); no IP
address or user agent is stored with it. These votes never count in public scores,
rankings or statistics, and are deleted 7 days after they are cast. If you create an
account or sign in within that time, they move to your account and then count like your other
ratings. Your IP address is only used for a short-lived, hashed anti-abuse counter (see "Rate-limit
counters" below).
Device and technical
- Expo push tokens (
tier.push_device) — only if you allow notifications. - Notification and email preferences (toggles in Settings, see section 13).
- App preferences (theme, haptics).
- Sign-in protection counters (
tier.auth.attempt) — brute-force protection. Each counter holds an IP address, an email address, a login, a login | IP pair or an account id, with the number of attempts over 15 minutes to 1 hour, for sign-in (failures), sign-up, password-reset requests and codes, and password changes. They are deleted about 24 hours after their window started. After a successful password sign-in, the pair login | IP address is also kept for 30 days, so that failures from elsewhere never lock you out of the device or network you usually sign in from. - IP addresses kept as proof — the IP address of the request when you accept the Terms at sign-up and in each record of your Terms or newsletter consent (kept as proof; the IP address is erased when you delete your account), and the IP address of a password-reset request (deleted after 7 days).
- Rate-limit counters — per user / per IP, over short windows; the IP address is stored only as a keyed hash.
- Crash and performance telemetry (Sentry) — technical diagnostics of errors and performance of the mobile app: stack trace, device model, OS and app version, and a trail of the API paths called (without query strings) and of the buttons tapped. Stripped of content — no IP address, no cookies, no request bodies; only a stable account id is attached. Stored in Sentry's EU (Germany) data region. On by default; you can switch it off in the app under Settings → Privacy → "Usage statistics".
- Product analytics in the app (PostHog, EU region) — pseudonymous events about how the app is used (for example app opened, screens viewed (identifiers removed from their path), game logged, review written, whether you accepted notifications, ad delivery counts), linked to your account id once you are signed in. Session recording is off. Sent to the PostHog Cloud EU region (
eu.i.posthog.com). On by default; you can switch it off in the app under Settings → Privacy → "Usage statistics". - Usage events (
tier.usage.event) — pseudonymous records of which API endpoint was called, the HTTP method and status, the response time, the platform and app version, tied either to your account id or to a one-way SHA-256 hash of an anonymous identifier for signed-out visitors (thetier_anon_idcookie, see section 12). No IP address and no request content are stored. Enabled by default to monitor service health and security (legitimate interest), retained 90 days. - Product events (
tier.product.event) — server-side records of key actions (for example game page viewed, journal status set, review published, like, follow, notification opened, vote), linked to your account id; for signed-out website visitors, a SHA-256 hash of an anonymous cookie identifier is recorded only if you accepted statistics cookies, otherwise no identifier at all. No IP address. Retained 90 days.
Country for shop listings
To list the shops that sell in your country under Where to play on a game page (website and app),
we determine your country only, never a city or a precise location. The app sends your
device's region setting (a language and region preference, not a location). When no region is sent, as on
the website, our server looks up the country of your IP address in a copy of the DB-IP country database
hosted on our own server, so your address is not sent to DB-IP
(IP Geolocation by DB-IP, licensed under
CC BY 4.0).
If that gives no answer, the region of your browser or device language is used, then a default country.
The IP address and the country are only used while the request is processed: they are not stored for this
purpose (apart from the short-lived per-IP rate-limit counters listed above) and are not used for profiling
or advertising. Legal basis: our legitimate interest in showing you the shops that are relevant where you
are (art. 6.1.f GDPR). Prices are shown in the currency of that country unless you pick another one; the
currency you pick is saved on your device (on the website, in a first-party cookie
tier_price_currency, 365 days) and, when you are signed in, on your account.
Advertising data
When ads are enabled and — where required — after you have given consent, our advertising partners (see section 05) may process:
- A device advertising identifier — Apple's IDFA (iOS, only if you allow tracking via the App Tracking Transparency prompt) or Google's Advertising ID (Android), or a resettable equivalent.
- Ad-interaction and delivery data — which ads were requested, shown, viewed or clicked; frequency-capping signals; coarse, non-precise location inferred from IP; and general device / technical attributes (device model, OS version, language, network type) used to select and measure ads.
- On iOS, Apple's privacy-preserving SKAdNetwork postbacks are used to measure ad installs without identifying you individually.
We do NOT collect: your precise GPS location, your contacts, your calendar, your SMS or call logs, your microphone or camera feeds (the camera is only opened when you tap "take a new profile picture"), no health or biometric data, and no financial data.
03 Legal bases (GDPR art. 6)
| Purpose | Legal basis |
|---|---|
| Account creation and management | Performance of a contract — art. 6.1.b |
| Connecting Steam or Xbox and importing your games, at your request | Performance of a contract — art. 6.1.b |
| Wiki assistant: answering the questions you ask | Performance of a contract — art. 6.1.b |
| Wiki assistant ratings and survey, feedback and support requests you send us | Legitimate interest (improving the service and answering you) — art. 6.1.f; sending them is optional |
| Automatic translation of comments and reviews | Legitimate interest (letting every player read the community in their language) — art. 6.1.f |
| Votes without an account (website) | Legitimate interest (letting visitors try the rating before signing up) — art. 6.1.f |
| Authentication, anti-fraud, rate-limiting | Legitimate interest — art. 6.1.f |
| Push notifications (friends, social, releases) | Consent — art. 6.1.a · per-channel toggle |
| Activity emails (on by default) | Legitimate interest — art. 6.1.f; turn them off at any time in Settings or with the unsubscribe link |
| Newsletter | Consent — art. 6.1.a, confirmed by email (double opt-in); withdraw at any time |
| Public profile, reviews, lists | Contract + your visibility choice |
| Moderation, judicial requests | Legal obligation — art. 6.1.c |
| Aggregated, anonymous product statistics | Legitimate interest — art. 6.1.f |
| Crash diagnostics and usage / product analytics in the app (Sentry, PostHog — data-minimised) | Legitimate interest — art. 6.1.f · you can object at any time with Settings → Privacy → "Usage statistics" |
| Personalised (interest-based) advertising | Consent — art. 6.1.a, collected via the in-app consent prompt; withdrawable at any time |
| Non-personalised ads, ad measurement and frequency capping | Consent and/or legitimate interest — art. 6.1.a / 6.1.f, depending on your choices and jurisdiction |
| Web audience measurement & advertising (yourtier.com — GA4, PostHog, Meta Pixel / CAPI, AdSense) | Consent — art. 6.1.a, granted only when you accept optional cookies (for Meta, where Google's consent form applies, also personalised advertising); withdrawable via the "Privacy and cookie settings" link (Google's consent form) or the cookie banner / Cookie Policy toggle |
You can withdraw consent at any time without affecting the lawfulness of prior processing.
04 Purposes of processing
- Provide the core service — display your profile, journal, reviews and lists, and let you follow other players.
- Authenticate you — via email/password, Sign in with Apple, Sign in with Google or Sign in with Discord. OAuth audience verification (Apple, Google) and the Discord authorization-code exchange are performed server-side.
- Personalise content — recommend games based on your favourites, history and trending scores.
- Send only the notifications you accepted — never others.
- Moderate the community — handle blocks, reports and violations.
- Protect the service — throttle abuse, detect credential stuffing.
- Comply with the law — respond to legal requests, keep evidence of deletions.
- Display and measure advertising — with your consent, show a limited number of banner / MREC ads and measure their delivery so the core app stays free (see section 05a).
- Import your game library — when you connect Steam or Xbox (see section 02).
- Answer your questions about a game — the wiki assistant (see section 02).
- Translate comments and reviews into the reader's language (see section 02).
Tier itself does not train AI models on your data. The texts we send to AI providers (your wiki questions, the comments and reviews to translate, see section 05) are sent only to get the answer or the translation, without your name or account. Requests sent through OpenRouter are limited to providers that neither store nor train on them; the translations are processed by Mistral AI under its own terms.
We do not sell your personal data for money in the ordinary sense. However, showing personalised ads involves sharing a device advertising identifier and ad-interaction data with our advertising partners, and some laws — notably California's CCPA/CPRA — define such cross-context behavioural advertising as a "sale" or "share". You can opt out at any time by refusing or withdrawing consent for personalised ads (see section 05a); you will still see non-personalised ads.
06 International transfers (GDPR chapter V)
The primary database is located in the European Union (host: Contabo GmbH, Munich, Germany). Where third parties process your data outside the EU, the transfers rely on one of the following safeguards from articles 44 to 49 GDPR:
| Recipient | Country | Safeguard |
|---|---|---|
| Apple Inc. (Sign in with Apple) | United States | EU-US Data Privacy Framework adequacy decision |
| Google LLC (Sign in with Google) | United States | EU-US Data Privacy Framework adequacy decision |
| Discord Inc. (Sign in with Discord) | United States | EU-US Data Privacy Framework adequacy decision |
| Expo Inc. (push, EAS) | United States | EU-US DPF when certified, otherwise Standard Contractual Clauses (decision 2021/914) |
| Sentry / Functional Software, Inc. | European Union (Sentry's EU data region, Germany) — provider established in the United States | EU-US DPF when certified, otherwise SCCs — data-minimised diagnostics only (no IP / cookies / bodies) |
| PostHog, Inc. (product analytics — app) | European Union (PostHog Cloud EU region, eu.i.posthog.com) — provider established in the United States | Data is sent to and stored in the EU region. For the provider's own arrangements, see PostHog's privacy policy |
| OpenRouter, Inc. (tier_ai — wiki assistant, editorial content) | United States | EU-US DPF when certified, otherwise SCCs — wiki questions and recent conversation without name, gamer tag, email or account id |
| Anthropic, PBC, Google LLC and Amazon Web Services (models of the wiki assistant, through OpenRouter, including Amazon Bedrock and Google Vertex AI, or, for Anthropic, directly) | United States | EU-US DPF when certified, otherwise SCCs — same data, no identity |
| Mistral AI (tier_ai — translation of comments, reviews and game descriptions) | France (EU) | Intra-EU processing, no transfer to a third country |
| Valve Corporation (Steam — only if you connect it) | United States | Transfer needed to provide the import you request (art. 49.1.b GDPR); Valve is an independent controller of your Steam account |
| Microsoft Corporation (Xbox — only if you connect it) | United States | EU-US Data Privacy Framework when certified, otherwise the transfer needed to provide the import you request (art. 49.1.b GDPR); Microsoft is an independent controller of your Microsoft account |
| Game wikis (Fandom, wiki.gg, independent wikis — wiki assistant) | Various countries | Search terms only, sent from our server without identity; pictures loaded by your device |
| Catalog APIs (third party game databases) | United States | Read-only from our backend with our own keys — no personal user data transmitted |
| Unity Technologies (LevelPlay / ironSource / Unity Ads) | United States & others | Standard Contractual Clauses; advertising data processed only per your consent choices |
| Google LLC (AdMob & ad technology providers) | United States | EU-US Data Privacy Framework when applicable, otherwise SCCs; advertising data per your consent choices |
| Google LLC (Google Analytics 4 & AdSense — web) | United States | EU-US Data Privacy Framework adequacy decision; only after cookie consent |
| PostHog, Inc. (product analytics — web) | European Union (PostHog Cloud EU region, eu.i.posthog.com) — provider established in the United States | Data is sent to and stored in the EU region; the library is only loaded, and any data only sent, after cookie consent. For the provider's own arrangements, see PostHog's privacy policy |
| Meta Platforms Ireland Ltd (Pixel & Conversions API — web) | Ireland (EU), onward to Meta Platforms, Inc. (US) | Intra-EU controller; onward US transfer under the EU-US Data Privacy Framework — only after cookie consent and, where Google's consent form applies, consent to personalised advertising (email & user id SHA-256 hashed) |
A copy of the Standard Contractual Clauses signed with each US-based sub-processor can be obtained on request at contact@yourtier.com.
07 Retention periods
| Data | Retention |
|---|---|
| Account profile | Until account deletion, when its identifying fields are wiped (section 14). |
| Reviews, comments, lists, journal (including imported games), follows, likes, votes, blocks, notifications, badges | Until you delete the item; at account deletion they stay, attached to the anonymised account (section 14). |
| Sign-in protection counters | Deleted about 24 hours after the start of their window; successful login | IP pairs: 30 days. |
| Rate-limit counters (including the wiki assistant's daily question counter) | Sliding window — minutes to hours; deleted about 24 hours after the start of their window. |
| Password-reset requests (with their IP address) | 7 days. |
| Terms acceptance and consent records | Kept as proof; their IP address is erased when you delete your account. |
| Account-deletion audit log | Kept indefinitely as evidence that the deletion took place: a short SHA-256 prefix of the former login (the login itself is not kept), the date, and the IP address and user agent of the deletion request. |
| Connected Steam / Xbox account (identifiers, display name or gamertag, import counters) and the encrypted Xbox token | Until you unlink the platform or delete your account. |
| Steam / Xbox sign-in tickets | Valid 30 minutes, deleted within two days. |
| Imported journal entries and wishlist items | Like your other entries: until you delete them or your account (they stay when you unlink the platform). |
| Wiki assistant conversations, ratings and survey answers | Until you delete your account. |
| Translations of comments and reviews | Kept with the comment or review; replaced when its text is edited. |
Website votes without an account and their tier_vid cookie | Votes deleted 7 days after they are cast (unless moved to an account you create or sign in to); cookie 365 days. |
Product events (tier.product.event) | 90 days, then deletion (deleted at once with your account). |
| Recommendation events | 100 days, then deletion. |
| Internal activity statistics (per-member activity and notification delivery) | 90 days, then deletion. |
| Feedback, survey answers (including the one offered when you delete your account) and support requests | As long as needed to handle them and improve the service, also after account deletion. |
| Moderation records | Duration of the applicable statute of limitations for the offence concerned. |
| Crash & performance telemetry (Sentry) | Sentry's default retention (typically 90 days). |
Usage events (tier.usage.event) | 90 days, then deletion. |
| Advertising identifiers & ad-interaction logs | Retained by the advertising partners under their own policies (see section 05). The ad delivery events we receive (in Sentry and PostHog, see section 05a) contain no advertising identifier. |
Your web consent choice (website_cookies_bar, tw_ads_personalization) | 390 days when recorded from Google's consent form; up to 999 days when made in the site's own cookie banner. |
| Web analytics & advertising cookies (GA4, PostHog, Meta Pixel, AdSense) | Per the Cookie Policy and each provider's own policy; set only after consent. After you withdraw consent they are no longer used and expire on their own — you can also delete them at any time in your browser. |
08 Visibility of your content
You choose who can see your profile (bio, banner, badges, journal, followers and following) with the profile visibility setting:
- Public (default) — anyone, including signed-out visitors.
- Following — only the signed-in players you follow.
- Private — only you.
Anyone else who tries to open your profile gets a "User not found or private" screen in the app. On the website, a private profile is not found, and a profile limited to the people you follow shows only a "Private profile" page (lock avatar and Follow button, with your gamer tag in its address). Reviews and comments you publish stay visible on game pages, and public lists stay public. When your profile is private, your reviews and comments are shown there as from a "Private user" in the app and a "Private profile" on the website, without your gamer tag or avatar; on the website, this also applies when your profile is limited to the people you follow and the reader is not one of them.
Warning: anything you post in Public mode may be cached, screenshotted or quoted by other users. We cannot retroactively erase content that has been copied off-platform.
09 Your rights
Under the GDPR (and equivalent texts — UK GDPR, LGPD, CCPA / CPRA…), you can:
Access (art. 15)
Obtain a copy of the personal data we hold about you.
Rectification (art. 16)
Correct any inaccurate data — most fields are editable in Profile & Settings.
Erasure (art. 17)
Delete your account from the app (Settings → Account → Delete account).
Portability (art. 20)
You can request a full export of your personal data (profile, journal, reviews, lists, comments, follows) in a structured, commonly used and machine-readable format — JSON or CSV at your choice. Just email contact@yourtier.com from the address tied to your account. Reply within one month (art. 12.3 GDPR).
Restriction (art. 18)
Request the suspension of processing while a dispute is pending.
Objection (art. 21)
Object to processing based on legitimate interest. In the app, Settings → Privacy → "Usage statistics" switches off crash telemetry (Sentry), product analytics (PostHog) and the tracking used for recommendations; the choice is saved on the device and applies immediately.
Withdraw consent
Turn off notifications, activity emails, the newsletter and any optional feature at any time.
Unlink Steam or Xbox
Unlink a connected platform at any time: Settings → Connected accounts in the app, Settings → "Your games elsewhere" on the website. The games already imported stay in your journal until you delete them.
Opt out of personalised ads
Refuse or withdraw consent for personalised advertising at any time via Settings → Privacy → "Ad choices", without losing access to the app — you will still see non-personalised ads.
To exercise these rights, write to contact@yourtier.com from the address tied to your account. We may ask you to prove your identity before acting. Reply within one month (art. 12.3 GDPR).
Record of processing activities (art. 30 GDPR). In accordance with article 30 GDPR, we maintain a record of processing activities, available on request at contact@yourtier.com.
Right to lodge a complaint with the APD/GBA. If you believe that the processing of your personal data infringes the GDPR, you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA — Autorité de Protection des Données / Gegevensbeschermingsautoriteit) — https://www.autoriteprotectiondonnees.be — or with the supervisory authority in your country of residence (art. 77 GDPR).
10 Minors
The minimum age to create a Tier account is 13 years old. We do not knowingly process personal data about children under 13 (or the higher equivalent local age of digital consent where applicable).
Belgium and the EU — digital age of consent (GDPR art. 8). In Belgium, the Act of 30 July 2018 (art. 7) sets the digital age of consent at 13. No additional parental authorisation is required for users aged 13 or above. In other EU Member States, the local threshold can be higher (up to 16 years); we apply the local threshold where applicable. Parents may at any time write to contact@yourtier.com to exercise the rights of access, rectification or erasure on behalf of their child.
The optional date of birth is used as described in section 02: the app's profile form refuses an age under 13, and no content is filtered by age.
In line with article 28 of the EU Digital Services Act (DSA), the app requests only non-personalised ads for accounts whose date of birth shows they are under 18 (section 05a).
If you believe a child signed up without appropriate consent, write to contact@yourtier.com and we will delete the account.
11 Security
- Passwords — slow, salted KDF hashing. Never stored or transmitted in clear text.
- HTTPS / TLS — enforced everywhere. End-to-end in-transit encryption.
- Encryption at rest — at the file-system / disk level on the hosting infrastructure.
- Multi-tier API access — public / user (portal) / internal / admin, with per-endpoint allow-lists.
- Anti brute-force —
tier.auth.attemptsign-in counters and rate-limit counters. - Row-level security via Odoo
ir.ruleconstraints — portal users can only read the allowed fields on other users. - OAuth audience verification server-side — client identifiers are public by design, the security boundary is audience verification.
- Account deletion requires you to confirm with your password (or, for an account without a password, by typing
DELETE), at most once every 5 minutes. - Encrypted Xbox token — the stored Microsoft refresh token is encrypted.
In the event of a personal data breach affecting you, we will notify both you and the APD/GBA within 72 hours, as required by article 33 GDPR.
12 Cookies and local storage
The mobile app keeps only two HTTP cookies, both from our own server: session_id (your
session) and tier_csrf (protection against forged requests). Otherwise it uses technical
storage on your device and — only in line with your consent choices — advertising SDK storage to
deliver, cap and measure ads:
- Secure storage (Keychain on iOS / Keystore on Android via
expo-secure-store) for your session and other credentials. - AsyncStorage for the rest: your user id and login, the app's data cache (kept 24 hours; some private account data is left out of it), your last 5 searches (cleared when you sign out), your theme, price currency and usage statistics choice, the screen to return to after signing in, and small display flags (dismissed cards, tips seen, notification prompt state).
- Anonymous identifier for the For You feed. When the For You feed is used without an account, our server sets a random identifier,
tier_anon_id(cookie, 30 days, set without asking because the feed and its abuse limits need it); a SHA-256 hash of it is stored in usage events. The mobile app does not keep it; a browser does. - Advertising SDK storage and identifiers. The advertising SDK and its partners may store and access identifiers and similar technologies on your device to deliver, cap and measure ads — only in line with your consent choices (see section 05a).
- On
yourtier.com(web companion / legal pages), essential first-party cookies are always set for the session. Analytics cookies (Google Analytics 4, PostHog) and advertising cookies (Meta Pixel, Google AdSense) are set only after you accept optional cookies in the consent banner (Google's consent form in the European Economic Area, the United Kingdom and Switzerland; the site's own cookie banner elsewhere); you can withdraw consent at any time via the "Privacy and cookie settings" link in the site footer or the Cookie Policy toggle. Functional first-party cookies are only set when you use the matching feature:tier_vid(votes without an account, 365 days),tier_price_currency(the price currency you picked, 365 days) and short-lived sign-in and sign-up cookies (10 minutes). See the Cookie Policy for the full cookie list (see also section 05b).
13 Push notifications and email
Push notifications are sent only when you have enabled the corresponding toggle (for example friends' activity, social, releases, streak reminders). You can revoke notification permission at the OS level at any time (iOS Settings → Notifications → Tier; Android App info → Notifications).
Activity emails (for example the emails of the first days after you sign up, and a feedback survey if you stop using Tier) are on by default. Turn them off in Settings (labelled "Weekly digest" in the app and "Activity e-mails" on the website) or with the unsubscribe link at the bottom of these emails, where present. No weekly digest email is sent at the moment. The newsletter is only sent if you subscribe and confirm by email; you can unsubscribe at any time.
14 Account deletion — what happens
- Your
res.usersrecord is archived; identifying fields onres.partner(email, gamer tag, bio, avatars, banner, social handles, date of birth, pronouns) are wiped or replaced with placeholder values. - A short SHA-256 prefix of your former login, with the date and the IP address and user agent of the request, is written to the deletion audit log as evidence that the request was honoured. The original email is not retained.
- All your active sessions are revoked.
- Deleted: your wishlist, push devices, connected Steam / Xbox accounts (with the encrypted Xbox token), sign-in identities (Apple, Google, Discord), API keys, wiki assistant conversations and survey answers, XP history, product events and calendar feeds; the IP address of your Terms and consent records is erased, and the newsletter is unsubscribed.
- Kept, attached to the anonymised account (so as not to orphan other users' interactions): your reviews, comments, lists, journal entries (including imported ones), follows, likes, votes, blocks, notifications and badges.
- Kept until their own retention period ends (section 07): feedback and survey answers, including the one offered when you delete your account, support requests, usage and recommendation events, and internal activity statistics.
Account deletion is irreversible. We will not be able to recover your data afterwards.
15 Automated decision-making (GDPR art. 22)
Tier does not make decisions producing legal effects, or significantly affecting you, based solely on automated processing within the meaning of article 22 GDPR.
Content moderation combines an automatic filter with a human review queue. The filter checks the text you publish against a multilingual list of terms in ten categories (such as hate speech, threats, self-harm, doxxing, sexual content, profanity and spam). In the app, any match, even mild profanity, stops the text from being sent; on our server, severe matches are refused and milder ones are accepted and sent to a moderator. Sanctions (content removal, suspension, ban) are decided by a human moderator. You can appeal any decision by writing to contact@yourtier.com — reply within one month.
Recommendations (suggested games, users to follow) are based on your declared favourites and in-app activity, including the games you import. Wiki assistant answers and translations of comments and reviews are generated automatically. They are purely indicative and have no legal effect.
16 Changes to this policy
Material changes are announced in-app and by email at least 30 days before they take effect. The "Effective" date at the top of this page always reflects the current version. Continued use of the service after that date constitutes acceptance of the updated policy.
17 Contact
Publisher (data controller): Toutdoo SRL
Postal address: Chaussée de Mons 356, 1070 Brussels, Belgium
Company number (CBE / VAT): BE1041833745
Single point of contact: contact@yourtier.com
Official website: yourtier.com
If you believe your rights have not been respected, you can lodge a complaint with your supervisory authority. Belgian and EU residents can contact the APD/GBA — https://www.autoriteprotectiondonnees.be.
Got an unanswered question?
We read every email. Drop us a line — reply within one month, usually much sooner.