Privacy

Last updated 10 November 2026

Lootlog is made by Kjetil Dyrland in Norway. This page says what Lootlog stores, why, and what leaves it.

What Lootlog stores

• Your account: the identifier Sign in with Apple or Sign in with Google gives Lootlog, your name if you share it, and your email address if Apple or Google shares it (from Apple often a private relay address). If you link both, Lootlog keeps both identifiers so either one opens the same account.
• Your library: the games you add, their status, your ratings and reviews, the hours and play sessions you log, where you own them, sale alert choices, and your settings such as platforms, country for prices and check-in time. It is stored so every device you sign in on shows the same library.
• Friends: your friend code, your hero's look and name, the people you are friends with, requests, blocks, waves, games sent to you, your Hall of Fame and any report you make or that is made about you. Reports are read by the person who runs Lootlog; nothing happens automatically.
• Notifications: your device's push token (in a browser: the push subscription your browser creates), time zone, language and app version, so Lootlog can send sale alerts, the evening check-in and the weekly digest. Sale alerts are kept for 90 days.
• Questions you ask the concierge, with their answers, for 30 days.
• A count of how often you use AI features each day and what they cost, so the service stays within its limits. It is kept under a one-way hash of your Apple or Google identifier, not your name.

Everything is stored with Cloudflare, which runs Lootlog's servers. Lootlog has no ads, no analytics trackers and sells nothing to anyone.

Recommendations and AI

Recommendations are worked out on Lootlog's server from your library, using models that run on Cloudflare. When it is switched on, the concierge and the "why you'd like it" lines also send a short text summary of your taste (games you rated or played, hours, genres, platforms) and your question to Anthropic's Claude. Your name, email address and account identifiers are never included.

Other services

• Game details and prices come from Steam, SteamSpy, CheapShark and IGDB. They are looked up by game; nothing about you is sent.
• If you import your Steam library, the Steam ID or profile name you enter is sent to Steam to read the games you own and your playtime. Lootlog remembers the Steam ID so you can import again.
• Push notifications are delivered by Apple, and in a browser by that browser's push service (Google, Mozilla, Microsoft or Apple). They are encrypted so the push service cannot read them.

What friends see

Nobody can find you unless you hand out your friend code. There is no search by name, email or contacts. Friends see your hero and a display name, never your Apple name or email address. What else they see is your choice in Settings:

• Everything (the default): your level, this week's XP on the friends' ladder, your camp, the games in your library with your ratings and hours, what you are playing and what you finish.
• Camp only: your level, this week's XP and your camp, with no game names apart from your Hall of Fame. To draw your camp, your friend's app receives how many games you have, your hours per game, the days you played, and whether each game is finished or rated, without game names.
• Nobody: your hero and display name, and nothing else.

Your wishlist is only shared if you turn that on. Your Hall of Fame shows to friends unless you turn that off or choose Nobody. A game you hide from friends leaves all of this. Your reviews and session notes are never shown to anyone.

Numbers from everyone

Game pages show averages across all Lootlog players, such as how many have a game, average hours and how many finished it. They are never shown per person.

Deleting your data

Delete your account in the app: Stats › Settings › Delete account. Your account, library, sessions, devices, notifications, friends and questions are deleted at once, and Lootlog's link to your Apple ID is revoked. Only the hashed usage counts stay, so deleting an account can't be used to get round the daily limits.

Contact

Questions about your data: kjetil.dyrland+backlit@gmail.com.