Legal · Privacy
Last updated ·
Privacy policy. How we handle your data.
Your data belongs to you. This policy explains what we collect, why we collect it, who we share it with, and how we protect it.
- GDPR aware
- No data selling
- Human reviewed
Contents13 sections
01 Information We Collect
Who we are
Gaming Reset ("we", "us", the operator of gamingreset.com, the Gaming Reset mobile app, and the Gaming Reset desktop app for Windows) provides this platform and is the controller responsible for your personal data. This policy applies to all three: our website, our mobile app, and our desktop app. You can reach the operator at privacy@gamingreset.com. If you are in the EU, UK, or another region with data protection law, this policy and the rights below apply to you.
1.1 Information You Provide
Before your account is set up we ask you to confirm that you are 18 or older, and we keep when you confirmed it. When you create an account we collect your email address. If you sign up or sign in with Google instead of a password, Google shares your email address, name and profile picture with us; we never see your Google password. During onboarding we collect more detail that you choose to share, including your name, daily gaming hours, the platforms you play on, your life situation, and what you would like to do with your time instead of gaming. We use this only to build your personalised daily plan.
As you use the dashboard we collect the photo proof you upload for completed tasks, the custom mission text you write, and any suggestions or feedback you send. On our mobile app, adding photo proof uses your device's camera or photo library, which the app accesses only at the moment you choose to attach a photo. We store a smaller copy of each photo, with its location and the other details your camera saved inside it removed.
If you use our contact form, we collect your name, email address, the topic you choose and your message, so we can reply to you.
If you add your city in the places section of your dashboard or of our mobile app, we store that city and its country so we can show you places worth visiting near it. This is optional, and you can change or remove it there at any time. We never ask for your exact address, and we never use your device's GPS or location services. If you create a longer-term project, we store its milestones, work notes, time entries, and completion confirmations. You can archive projects.
1.2 Information Collected Automatically
We collect your device timezone so your daily missions appear on the correct calendar day. When you add your city, the form also starts on the country your timezone belongs to, which you can change. Our hosting and security providers process basic technical data such as your IP address, browser type, and the pages you open, in order to deliver the site and protect it from abuse.
To keep the service stable, our diagnostics provider records technical error and crash reports when something goes wrong. These can include your IP address, your device or browser type, the app version, and the technical details of the error. On our mobile app we also process the basic device information needed to run the app and to schedule the daily reminder notifications you choose to turn on, which are generated locally on your device. For traffic measurement we use Vercel Web Analytics, a privacy-friendly, cookieless tool that counts aggregate page views and visits. It sets no cookies, does not identify you, does not track you across other websites, and is never used for advertising.
While you set up your account, we note how far you have got: which onboarding screen, routine step and setup step you reached, and when. We use it only to see where people get stuck, so we can improve those steps or contact you to help. It is kept with your account in our own database, is never shared with analytics or advertising companies, sets no cookies, and stops once you reach your dashboard.
Our mobile app uses PostHog, hosted in the EU, to understand how the app is used. It records a small set of in-app actions, such as completing a mission or turning reminders on, together with your account identifier, basic device details (device model, operating system and app version) and your IP address. It never records your name, your email, or anything you type, and it is never used for advertising.
1.3 The Desktop App for Windows
If you explicitly choose a one-hour auto-close, its game-session identifier, deadline and warning state stay in the running desktop app's memory. They are not uploaded or restored after restarting the app. This feature uses the existing game detection; it does not read additional files, screen content or keystrokes. Normal playtime and interrupt-outcome reporting still applies.
Our desktop app, which your account requires, runs on your Windows PC and starts with Windows, so it can step in at the moment you open a game rather than waiting for you to open something. Because it runs on your machine instead of in a browser, it is worth being exact about what it looks at, what never leaves your computer, and what is actually sent to us.
- What it reads on your PC
- The names of the programs currently running, so it can tell when a game launcher or a game starts and stops, and the entries game launchers create in the Windows registry, so it knows which launchers are installed and can name the game you opened. It reads names only. It does not read your files, your screen, your keystrokes, your browsing, your microphone, or anything inside any other program.
- What stays on your computer
- Your full history of which game each play session was is written to a file in the app’s own folder and is never sent to us: the play sessions we receive carry no game names. Your app settings and any voluntary block you have running are stored locally, which is why a block survives a restart. Your daily target comes from your account. Your sign-in token is stored encrypted using Windows’ own encryption, tied to your Windows account. Removing the app and its data folder removes all of it.
- What is sent to us
- Your total measured gaming time for each of the last 30 days, as a date and a number of minutes, and whether the app was running on your PC on each of those days, so your dashboard can show your week (marking any day it was not running as not tracked) and our team can see how your gaming time is changing when we support you. For your weekly accountability allowance, each play session of the last 14 days is also sent as a start time, an end time and the minutes actually played, with a random identifier so a resend is not counted twice; and when you confirm the fee for quitting the app from its tray, the time of that exit. No game names are included in these. When the app steps in, it also sends a record of that moment: the name of the launcher or game you opened, and whether you chose an alternative or chose to play. We keep those game names so that we can use them to make the alternatives the app suggests better suited to you. It loads your missions, streak, and daily target from your account, which is the same data the website and the mobile app load. Nothing else about your PC is transmitted.
- Diagnostics
- If the desktop app hits an error, our diagnostics provider records the technical details of it, the app version, and your account identifier, so we can find and fix it. File paths have your Windows user folder stripped out before they are sent, and we have switched off the memory snapshots and local variable capture that this kind of tool can otherwise collect.
The desktop app also acts on your PC, but only in the ways you ask it to: it can close a game or launcher for you when you choose to do something else instead, and it can hold your game launchers shut for the length of a voluntary block you started. None of that is data collection. A block is decided and stored entirely on your own machine, so switching one on tells us nothing about you. All of it is described in full in our Terms of Service.
1.4 Payment Information
Paddle securely collects and stores your card details. We never receive your full card number or security code. We store Paddle customer, transaction, subscription and price identifiers, your card status, the terms and hourly rate you chose and accepted, when you accepted them, and your agreed allowance and timezone. If you choose or change your hourly rate, we keep the rate, the day it starts, when you chose it and the words you confirmed. If our team offers you a new daily target, we keep the target, the day it would start, when we offered it and your answer, with the words you confirmed if you accepted it. Each finished week is recorded as a statement: the play, overtime and hourly rate for each day, the number of confirmed tray exits, and the amount. These records let us charge you correctly, show you every week, and answer a question about a charge.
02 How We Use Your Information
Mission Suggestions
Relevant onboarding answers are sent to Anthropic to check their relevance and suggest a starting rank and weekly routine. You review, edit and approve the suggested missions. These requests may be repeated when you revise your answers or request a new draft.
Daily Mission Delivery
Each day repeats the weekly missions you approved, at the times you chose, and you can change them when each week is up. No AI is used to plan your days after the first draft.
Desktop App Alternatives
When a game starts, the desktop app offers things to do instead. Our AI provider writes them from your onboarding answers, your daily target and the games you open most, and they are refreshed about once a month. We keep the name of each game the app steps in on so that we can make these alternatives better suited to you.
Photo Task Check-in
Photos you upload as proof for a task are checked by our AI provider against the task they are for, so the task can count toward your rating in the app. Any photo it cannot confirm is checked by a person on our team. It is one feature of the product, alongside the automated plan, missions, and tracking.
Progress Tracking
We store your rating history, task records, streak counts, and gaming hours so you can see your progress over time and so we can work out your rank.
Account and Service Management
Your email, access status, card records and weekly statements let us manage your account, record your consent, charge you correctly, and send important service messages.
Platform Improvement
Aggregated and anonymised patterns help us learn which missions work, what completion looks like, and how to make the system better.
Our legal bases
Where data protection law such as the GDPR applies, we rely on the following legal bases: your explicit consent for your onboarding answers and any sensitive information; the performance of our contract with you to run your account and agreed services; and our legitimate interest in keeping the platform secure and improving the service. Where we rely on consent, you can withdraw it at any time.
04 Our Service Providers
These are the third party companies (sub-processors) that help us run Gaming Reset. We share only the data each one needs for its specific role.
Supabase
Our database, account authentication, and file storage. It holds your profile, your progress, and the photo proof you upload. Data is hosted on managed cloud infrastructure.
Anthropic
Our AI provider, based in the United States. It checks relevant onboarding answers, suggests your starting rank and routine, writes desktop alternatives, drafts project plans when requested, and checks photo proof. Inputs depend on the feature, as described in section 10. Background requests may include account-linked or submission identifiers to match results. We do not deliberately include email or payment fields in these requests; information you type or include in a photo may still contain personal details. Anthropic does not train its models on API inputs by default.
Paddle
Our card payment provider and Merchant of Record. Paddle stores your card and handles weekly charges and earlier card purchases under its own security and privacy terms. We store payment identifiers and consent records, never your full card number or security code.
Vercel
Hosts and delivers the website, and provides Vercel Web Analytics. It processes basic request data such as your IP address and browser type to serve pages and keep the platform online. Web Analytics is a privacy-friendly, cookieless measurement of aggregate page views and visits: it sets no cookies, does not identify you, and is never used to track you across other websites or for advertising.
Upstash
Provides rate limiting that protects the platform from abuse. It may briefly process your IP address or account identifier for that purpose.
Sentry
Our error and crash monitoring provider for the website, the mobile app, and the desktop app. When something breaks, Sentry records the technical details of the error, which can include your IP address, device or browser type, and the app version, so we can find and fix it. It is used for diagnostics only, never for advertising or analytics.
Resend
Delivers account, welcome, billing, card-change and deletion emails, and reminders when your desktop app has not checked in. It receives your recipient address and email content, which may include your name, statement dates, payment amounts and status, and the date your desktop app last checked in. Card numbers and security codes are not included.
PostHog
Measures how the mobile app is used, from a small set of in-app actions linked to your account identifier, as described in section 1.2. Hosted in the EU. It is never used for advertising.
Third-party content
If you use Currently Watching, we store the series you save, with its title and poster, and the episodes you mark watched to show your next episode on the website and in desktop alternatives. This is self-reported: we do not monitor streaming apps or automatically mark a suggestion watched. You can remove a series from your active list, forget its saved history, or delete your account to remove this progress.
Series and episode metadata and images are provided by TVmaze under CC BY-SA 4.0. We select and rename fields and shorten descriptions for display; adapted TVmaze metadata retains that licence. Movie recommendations use our own written descriptions and movie posters supplied through OMDb, with original illustrated covers as a fallback. Only public film titles and release years are sent to OMDb, never your identity or watch history. When you search for a series, our server sends the words you type to TVmaze. We request search results and public episode details without sending your identity or watch history to TVmaze. The desktop app downloads episode images in its main process and keeps a small temporary in-memory image cache.
The dashboard includes optional "instead of gaming" sections that suggest things to watch and read. Series and episode details come from TVmaze; book details and covers come from Google Books. We do not send these services your name, email, or account details.
If you add your city, the "worth seeing near you" section finds places in it using OpenStreetMap and Wikidata. We send them only your city and country, never your name, email, or account details, and the results are shared by everyone in the same city. Place photos load from Wikimedia Commons.
When your browser or our app loads an image from one of these services, your device connects to that provider directly. This means your IP address and basic technical data, such as your device or browser type, are visible to them, in the same way they would be if you opened their own website. That data is handled under each provider's own privacy policy. These sections are optional, and you can simply choose not to use them.
Our sign-up and sign-in pages load the "Sign in with Google" button from Google, so Google receives your IP address and basic browser details when you open those pages, under Google's own privacy policy.
06 International Data Transfers
Gaming Reset serves members around the world, and the providers listed above operate from different countries, including the United States. This means your personal information may be transferred to, stored in, or processed in countries outside the one where you live, including countries whose data protection laws differ from your own.
Where we transfer personal data out of the EU, the UK, or another region with transfer rules, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or an equivalent mechanism offered by the provider, to keep your data protected to the same standard.
07 Data Security
We take security seriously because what you share with us is personal.
Row Level Security
Every table in our database enforces Row Level Security. Your records are reachable only by you and our admin team. Other members cannot read your data even with a valid account.
Encrypted in Transit
All traffic between your browser and our servers uses HTTPS. Data sent to our storage and processing providers is encrypted while in transit.
Server Side Secrets
API keys, service credentials, and admin passwords are never exposed to the browser. Every sensitive action runs through server side routes only.
Authenticated Access
Your account is protected by a managed authentication system with secure session handling. We support password reset and ask you to use a strong password.
If a data breach ever affects your personal information, we will notify the people affected and, where required, the relevant authority within seventy two hours, and explain what happened and what we are doing about it.
08 Data Retention
The periods below describe normal retention. Account deletion removes data from our active app records, subject to the limited delivery, legal and payment-related exceptions described here. A privacy erasure request is assessed separately from payment collection; an unpaid balance is not a reason to keep all of your personal data indefinitely.
- Account data
- Duration of account
- Erased as soon as you delete your account. Deletion cannot be undone.
- Task and rating history
- Duration of account
- Deleted permanently when your account is removed.
- Photo submissions
- 7 days after upload
- The photo file is deleted 7 days after upload once it has been checked. The record of the check (the task, the result, and a fingerprint of the photo that stops it being submitted again) is kept until your account is removed.
- Onboarding answers
- Duration of account
- Deleted when your account is removed.
- Your city
- Until you remove it
- If you add your city for places near you: the city and its country. Removed when you remove it in the places section, replaced when you change it, and deleted when your account is removed.
- Contact form messages
- 12 months
- Deleted automatically 12 months after you send them, or sooner if you delete your account.
- Feedback messages
- Duration of account
- What you send with the Feedback button on the website or the form in our mobile app, and the topic you chose. Deleted when your account is removed.
- Sign-up progress
- Duration of account
- The furthest setup step you reached and when, recorded until you first reach your dashboard. Deleted when your account is removed.
- Access codes
- Duration of account
- If you unlocked the app with an access code we gave you, for example to review it for an app store: a fingerprint of the code (never the code itself), when you used it, and when we switched it off, if we did. Deleted when your account is removed.
- Daily gaming totals from the desktop app
- Duration of account
- One total per day, per PC, for the chart on your dashboard and for our team’s view of your recent weeks. Deleted when your account is removed.
- Daily target offers
- Duration of account
- Each new daily target our team offers you, the day it would start and your answer, with the words you confirmed if you accepted it. Deleted when your account is removed.
- Desktop app connection
- Duration of account
- When the desktop app last signed in or checked in with your account, so the website can confirm it is set up before you save a card, and remind you, then pause missions, when it has not checked in for 48 hours or 7 days. Deleted when your account is removed.
- Play sessions and tray exits
- Duration of account
- The start, end and minutes played of each session, and the time of each exit you confirmed, which your weekly allowance is measured from. Deleted when your account is removed.
- Desktop app interrupts
- 60 days
- Each time the app stepped in: when, the name of the game or launcher you opened, and what you chose. Used to improve the alternatives the app suggests. Records older than 60 days are removed by scheduled daily cleanup in batches, or sooner when your account is removed. Playtime and billing records have separate retention periods.
- Weekly statements
- Duration of account
- Each finished week, day by day, and its amount, so you can always see what you were charged and why.
- Billing email delivery
- 30 days
- The recipient address and message content are kept temporarily to deliver payment, card-change, account-deletion and desktop check-in notices reliably, including after account deletion. A scheduled cleanup removes that content after 30 days. Minimal event and delivery identifiers remain to prevent duplicate notices. Paddle retains its own financial records under its policies.
- Desktop app data on your PC
- Until you remove it
- Your full history of which game each session was, your settings, and your encrypted sign-in token never reach our servers, so deleting them means uninstalling the app and clearing its data folder.
You can use the self-service Delete account page after your payment agreements are cancelled and outstanding charges are resolved in Billing. This protects against deleting the link to an unresolved payment. You can also request erasure or restriction by emailing privacy@gamingreset.com or using our contact form, even if a balance remains or you cannot sign in. We assess these requests individually, verify identity where necessary and respond within the applicable legal deadline, normally one month. If a lawful extension is necessary, we explain it within that period.
We remove data that is no longer needed and may retain only the information necessary for a legal obligation, an unresolved payment or a legal claim, where a lawful basis permits it. We explain any information retained and the reason, and restrict its use to that purpose. Erasure does not itself cancel a valid debt. Paddle keeps its own transaction records under its policies. Data in provider backups may remain until those backups expire and is not used to restore an erased profile for ordinary service. You can withdraw consent without closing your account, as section 01 explains.
09 Your Rights and Choices
Depending on where you live, you have the following rights over your personal information.
- Access
- Ask for a copy of all the personal information we hold about you.
- Correction
- Ask us to fix anything inaccurate in your profile.
- Deletion
- Use self-service account deletion after billing is resolved, or request erasure separately at any time, including while a balance is outstanding. Limited lawful retention may apply; see Data Retention.
- Portability
- Ask for an export of your data in a readable format.
- Withdraw consent
- Withdraw your consent to how we use your onboarding answers at any time, by email, without closing your account.
- Opt out
- Unsubscribe from any marketing or optional messages at any time.
- Restriction
- Ask us to limit how we process your information.
- Complain
- Lodge a complaint with your local data protection authority if you believe we have mishandled your data.
To use any of these rights, email us at privacy@gamingreset.com. We will reply within thirty days.
10 How We Generate Your Plan
Gaming Reset uses Anthropic in several parts of the service: checking onboarding answers and suggesting your initial rank and routine, checking photo proof, generating and refreshing desktop alternatives, and drafting project plans when you ask. These are ongoing feature uses, not a promise of a fixed number of AI calls. Your approved routine repeats each day; it is not regenerated automatically by AI every morning.
What the AI receives
During onboarding, your answers about your gaming habits, life situation, and goals are sent to our AI provider. Your first name is included so the plan feels personal. We do not deliberately include email or payment fields in these prompts. Anything you type may contain personal information, so do not include passwords, card details or unnecessary sensitive information. Anthropic does not use API inputs to train its models by default.
When you upload photo proof for a task, the photo and the text of that task are sent to our AI provider in scheduled batches so it can check that the photo matches the task. A submission identifier matches the result to your task, and the image may itself contain personal information. Any photo the AI cannot confirm is checked by a person on our team instead.
To suggest your first weekly missions, our AI provider receives relevant onboarding answers, including revised answers when a draft is requested again. A separate onboarding check can send your proposed replacement activity to assess whether it is relevant. When you ask for help planning a long-term project, it receives your project description and relevant onboarding answers. Both are suggestions for you to review. Account identifiers, payment fields and your work-journal history are not included in these requests. Anything you choose to type into a project description is part of that input.
To write the alternatives the desktop app offers when a game starts, our AI provider receives your life situation, daily gaming hours, daily target, your answer about what you would rather do with the time, and the names of up to three games you opened most often in the last 30 days. Alternatives are generated initially and refreshed, normally about monthly or when relevant inputs change. Background batch requests also use an account-linked identifier to match results. Your name and full process list are not included in these prompts.
Work notes and milestone confirmations are stored to track your chosen project. AI does not infer a completion percentage from your work notes: progress changes when you explicitly confirm or reopen an agreed milestone. Archived projects and journal entries remain stored until your account is removed.
Model limitations
Generated content, including your starting rank, your suggested missions, and the desktop app's alternatives, is built from patterns, not from knowledge of you as a person. It may not always be perfectly accurate or suited to your exact situation.
11 Children's Privacy
Gaming Reset is only for adults. You must be 18 or older to create an account or use the platform, and it is not intended for anyone under 18. We ask you to confirm that you are 18 or older before your account is set up. We do not knowingly collect personal information from anyone under 18.
If we learn that someone under 18 has created an account, we close it and delete its data. If you believe that has happened, please contact privacy@gamingreset.com.
12 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. For important changes that affect how we handle your data, we will email you at least fourteen days before they take effect.
If you keep using Gaming Reset after a policy update, that counts as accepting the revised policy. If you disagree with a change, you can delete your account before it takes effect.
13 Contact Us
If you have questions about this Privacy Policy or how we handle your data, please reach out.