BG Shelf Privacy Policy

Last updated: 7 November 2026

This policy explains what data the BG Shelf app and the website bgshelf.odud.games process, why, where it is stored and how to delete it.

In short: you can browse the catalog without an account. An account is needed to keep your shelves, ratings and plays and see them on several phones. The app is free and has no ads. To understand which features are used and to fix crashes, we collect Google analytics and crash reports. In the EU, EEA, United Kingdom and Switzerland we ask for your consent to analytics first. We do not sell your data. You can delete your account in the app — immediately and permanently.

1. Who is responsible for your data

App owner and data controller — the developer odud games (a private individual; developer details are on the app's Google Play page). Privacy contact: privacy@odud.games.

2. What data we process

Without an account

You browse the catalog, search for games and scan boxes. We do not receive any personal data. The app downloads the catalog and covers from our server (section 4), which sees your IP address as with any request on the internet.

With an account

• Sign-in data: email address; a password (stored by Google Firebase only in a form from which it cannot be recovered) or Google sign-in — in that case also your name and the address of your Google profile photo.
• Your records: shelves and the games on them, "Want" marks, ratings, logged plays (game, date, count), notes on games, collections, marathon, profile settings and avatar (a reduced 256-pixel photo, if you added one).

This data is stored on your phone and synced to the cloud so that it is available on all your phones.

Anonymous statistics

To show overall game statistics (for example, how many times a game has been played), the app sends counters not linked to any person: game, day, count and country (from the mobile network or phone settings, not from geolocation). These records contain no email, no account identifier and no other way to link them to you. They remain after the account is deleted.

Analytics and crash reports

There are no ads in the app. If ads ever appear, we will update this policy beforehand.

• Analytics (Google Analytics for Firebase): which screens and features are used (for example, "play logged", "collection opened"), device type, app version, approximate country. No email, shelf names, notes or other content. In the countries listed above — with consent.
• Crash reports (Firebase Crashlytics): when the app crashes, Google receives a technical report — where in the code the error happened, phone model, Android and app version, an installation identifier. No email and no content of your records. Needed to fix bugs.
• To change your consent decision: Profile → "Privacy settings".

What we do not collect

Precise location, contacts, the content of your records for advertising. Camera images taken while scanning a box never leave the phone — recognition happens on the device.

3. Phone permissions

• Camera — to scan a box or a QR code and to take an avatar photo. Images are processed on the phone.
• Photos / gallery — to pick an avatar or save an image with a game's QR code. Only when you do it yourself.
• Internet — for the catalog, covers and sync.

4. Services that receive data

• Google Firebase (Google LLC) — sign-in (Authentication) and storage of your records and anonymous statistics (Cloud Firestore).
• Sign in with Google — if you choose it, Google gives us your name, email and profile photo.
• Google Analytics for Firebase and Firebase Crashlytics (Google LLC / Google Ireland Ltd.) — analytics and crash reports (section 2).
• Cloudflare (Cloudflare, Inc.) — serves the game catalog, covers and recognition data (cdn.bgshelf.odud.games) and hosts the website; it sees the IP address and technical request data.

These companies process data as our processors, or under their own terms where it is their own service (Sign in with Google). We do not sell or share your data with anyone else.

5. Why and on what legal basis

• Account, sync, your records — to provide the service you chose (performance of a contract; Art. 6(1)(b) GDPR).
• Analytics in the EU / EEA / UK / Switzerland — your consent (Art. 6(1)(a) GDPR), which you can withdraw; in other countries — legitimate interest in improving the service.
• Anonymous statistics — legitimate interest in showing useful overall game statistics (Art. 6(1)(f) GDPR); it contains no personal data.
• Server technical logs and crash reports — security, stability and operation of the service (legitimate interest).
• Emails you send us — to reply.

6. How long we keep data

• Account data — as long as the account exists. When the account is deleted, its data in the cloud and on the phone is deleted immediately. Providers' service logs and backups may be kept for a limited time under their own rules.
• Anonymous statistics — with no time limit (it is not personal).
• Emails — as long as needed to resolve your request.

7. Deleting your account

In the app: Profile → ⋮ → "Delete account". Without the app — email privacy@odud.games from your account's email address; we delete within 30 days. Details — bgshelf.odud.games/en/delete-account.

8. Transfers outside your country

Google and Cloudflare may process data in the USA and other countries. Both companies participate in the EU–US Data Privacy Framework, recognised by the European Commission as providing adequate protection (Art. 45 GDPR).

9. Your rights

You can get a copy of your data, correct it, delete it, restrict or object to its processing, and receive it in a machine-readable format — by writing to privacy@odud.games. Most actions are also available in the app itself (editing and deleting records, deleting the account).

Complaints — to the Ukrainian Parliament Commissioner for Human Rights (Ukraine) or to the data protection authority in your country.

10. Children

BG Shelf content is suitable for all ages, but the app is not directed at children under 13. A child under 13 may create an account only with parental permission. We do not knowingly collect data from children under 13; if we learn of such an account without parental permission, we will delete it.

11. Website

The website bgshelf.odud.games uses no cookies or trackers (analytics is only in the app). The host (Cloudflare) keeps technical request logs for operation and security.

12. Security

Data is transmitted only over encrypted connections; only the account owner can access their records in the cloud (Firebase rules). Protecting the phone itself (screen lock, updates) is up to you.

13. Changes

We will announce significant changes in the app or in the update notes. The revision date is at the top of this page.