Skip to content
Think Ribbon™
Sign in

Privacy Policy

Last updated: July 26, 2026

This policy covers the Think Ribbon website and mobile app, which we call "the Service" below. It explains what we collect, what we do with it, and who else sees it. Using the Service means you accept what's described here.

Questions go to privacy@thinkribbon.com.

1. Who we are

Think Ribbon is a social site for video game fans. You can write posts, articles, and reviews, track games in a Quest Log, build collections, follow other gamers, and link your game store accounts.

2. What we collect

What you give us

  • Account details. Your email address and username. If you sign up with a password, we store it hashed, never as plain text. If you sign in with Google or Apple instead, we get the basic profile information they share with us.
  • Profile details. Your display name, bio, avatar, banner, PC specs, and appearance settings such as your theme and profile layout.
  • What you create. Posts, articles, reviews, comments, ratings, collections, Quest Log entries, wishlists, lists, and the @mentions you write.
  • Your play history. Every time you change a game's status in your Quest Log, such as starting it, dropping it, or finishing it, we save that change and the date. That's what your Quest Log timeline is built from, and anyone who visits your Quest Log can see it. You can edit the date on an entry or delete the entry, and taking a game out of your Quest Log takes its history with it.
  • Images you upload. These are hosted by UploadThing.

What we get from game accounts you link

When you connect a game store or gaming community account (Steam, GOG, Epic Games, Discord, PlayStation, or Twitch), we receive and store some of the following, depending on the platform.

  • Your username, persona, or display name on that platform, and its account ID. These show a badge on your profile and keep the link working. For Discord that means your Discord username, which other people can use to find you, plus your avatar. Discord is a badge only. We don't import games, and we don't read your messages, servers, or contacts.
  • Your PSN online ID. You type it in yourself. We check it against PlayStation Network's public profile data to confirm the account exists, then store the online ID, avatar, and account ID that comes back. We never ask for or store your PlayStation password.
  • Your Twitch channel name, account ID, and avatar. These power a profile badge that links to your channel. While your Twitch connection is set to public, we also check your channel's public live status every few minutes so the badge can show when you're streaming. Twitch is a badge only. We don't read your subscriptions, chat, or viewing activity, and we don't keep Twitch access tokens.
  • The games you own or have played, for the stores that support importing (Steam, GOG, and PlayStation), along with playtime and the date you acquired, added, or first played each game where the store provides it. We use this to match games to our catalog and to add the ones you pick to your collection. Steam doesn't expose a purchase date, so there we estimate it from your earliest achievement activity in that game.
  • Your public trophy list on PlayStation, when you ask for a PlayStation import, plus playtime and first-played dates where your privacy settings allow it. This only works if your PSN settings make trophies visible to everyone. We read nothing your settings keep private.
  • The achievements and trophies you've earned, when you sync achievements for a game or in bulk, which also happens automatically right after a library import. We store the unlock dates the platform gives us. This comes from Steam (which needs your Steam "Game details" privacy setting to be Public), from PlayStation Network (subject to your PSN privacy settings), or from GOG (whatever GOG Galaxy recorded for your account). Like the rest of your collection, it shows publicly on your profile, including to people comparing their progress against yours. Achievements you mark by hand are stored the same way. All of it is deleted with your account.
  • Access and refresh tokens, for the stores that use OAuth and need ongoing access, such as GOG. Tokens stay on our server, are never shown in the app or shared with other users, and are deleted when you disconnect the account. Discord is the exception: we use its sign-in token once to read your username while you're connecting, and keep nothing afterwards.

You can disconnect any linked account from your settings whenever you want, and you decide whether each one shows publicly.

What we collect automatically

  • Usage and device data, such as which pages get visited, rough visitor counts, and your browser or device type. We use it for analytics and for working out what's broken. Our visitor counting is built in-house and anonymized, and there are no third-party advertising or tracking services on Think Ribbon.
  • Cookies and local storage, used to keep you signed in and to remember settings such as your theme.
  • A device push token, if you turn on push notifications. That's an ID your phone's operating system hands out so notifications can reach the device. Section 4 covers who helps deliver them.

Game catalog data

Game titles, cover art, release dates, genres, and similar details come from IGDB. That isn't your personal information.

3. What we do with it

We use what we collect to:

  • Run the Service, including your profile, feed, collections, and Quest Log.
  • Sign you in and keep your account secure.
  • Import and sync your linked game libraries when you ask us to.
  • Send the notifications you turned on, such as @mentions or wishlist release reminders, in the app and as push notifications if you enabled those.
  • Understand how the Service gets used so we can improve it.
  • Find and deal with fraud, abuse, and security problems.
  • Meet our legal obligations.

4. Who else sees it

We do not sell your personal information. This is everyone else who sees any of it.

  • The public, by design. Your profile and everything you publish is visible to other users and to anyone on the internet. That covers posts, articles, reviews, comments, collections, and any connected-account badge you've set to public. You control the visibility of each connected account.
  • Companies that run parts of the Service for us:
    • Convex, our database and backend, which also handles sign-in.
    • UploadThing, which hosts the images you upload.
    • Resend, which sends account emails and therefore receives your email address. That covers password reset codes and email change verification codes.
    • Firebase Cloud Messaging (Google), which delivers push notifications. It receives your device push token and the contents of the notification, which can include a username and a short piece of the content behind it. On iPhones and iPads, Google hands the notification to Apple's push service to reach your device.
    • Sentry, which monitors errors and performance. It receives technical data such as your browser type, the pages you were on, and load times when something breaks or runs slowly.
    • Microlink, which builds the preview card when you paste a link into a post. Your browser sends it the URL you pasted, so Microlink also sees your IP address.
    • Our hosting and content delivery providers.
    • IGDB and Twitch, for game catalog data.
  • The accounts you link, meaning Steam, GOG, Epic Games, Discord, PlayStation, and Twitch. We read only what Section 2 describes, and only after you authorize it. For PlayStation, that authorization is you entering your PSN online ID.
  • Anyone the law requires. We hand over information when the law requires it, when we need to enforce our terms, or to protect the rights, safety, and security of Think Ribbon, our users, or the public.
  • A buyer, if Think Ribbon is ever merged with, acquired by, or sold to someone else. We'll give you notice where that's required.

5. Other platforms

Linking a Steam, GOG, Epic Games, Discord, PlayStation, or Twitch account also puts you under that platform's own privacy policy and terms, on top of this one. We access only what's described above, and only after you give permission.

6. How long we keep it

We keep your information for as long as your account is active. Delete a piece of content or disconnect a linked account and we remove the data behind it promptly, stored tokens included. Delete your account and we delete or anonymize your personal information, apart from what we have to keep to follow the law, settle a dispute, or prevent abuse, and copies sitting in routine backups. Uploaded files that nothing points at are cleaned up automatically.

If we remove an account for breaking our community guidelines, the account and its content stop being visible right away, and the data behind it is kept for up to 30 days so a mistake can be undone. After that it's permanently deleted. We keep a record of moderation actions as an audit trail.

7. Your rights and choices

Depending on where you live, such as the EEA, the UK, or California, you may have the right to see, correct, delete, or export your personal data, to object to or limit certain processing, and to take back consent. You can also:

  • Disconnect any linked game store account in your settings.
  • Change your notification settings, including turning push notifications off.
  • Delete your account in your settings.

Use the controls in the app or email privacy@thinkribbon.com and we'll sort it out. We'll honor the rights you have where you live.

8. Children

The Service isn't meant for children under 13, or under whatever higher minimum age applies in your country, and we don't knowingly collect their personal information. If you think a child has given us personal information, contact us and we'll delete it.

9. Security

We protect your information with standard safeguards: encryption in transit, access controls, and keeping credentials and tokens on the server only. No system is perfectly secure, but we keep working at it.

10. Where your information is stored

We and the companies that work for us may store and process your information in countries other than the one you live in. Where those transfers need legal safeguards, we use them.

11. Changes to this policy

We'll update this policy from time to time. When we do, the new version goes up here and the "Last updated" date at the top changes. If a change is significant, we may also tell you inside the Service.

12. Contact us

Questions or requests about this policy or your information go to privacy@thinkribbon.com.