Accretion — Privacy Policy

Last updated: September 2026

Accretion is a mobile app for planning gaming sessions in private groups. This policy explains what data the app processes, why, and what your rights are. Short version: we only process what the app needs to work, we do not run ads, we do not sell data, and we use no advertising or tracking SDKs.

1. Controller

Balthasar Höfinger
Himmelpfortgasse 13/6
1010, Wien, Austria
Contact: support@accretion.at
Full details: Impressum

2. Data we process

• Account: email address and a password (stored only as a cryptographic hash by our backend provider).
• Profile: username, optional profile picture, avatar color, optional weekly availability, your game library with optional rank text and self-rated skill.
• Group content: groups you create or join, events and team slots, ready status, time polls and votes, match results and MVP votes, and chat messages you send. This content is visible to the members of the respective group.
• Attendance counters: aggregated counts of attended/missed sessions, shown as a "show rate" to your friends and group members.
• Push tokens: a device token used to deliver notifications you opted into at the operating-system level.
• Steam link (optional): if you connect Steam, we store your SteamID and periodically fetch your public Steam presence (display name, online state, current game) so your friends in the app can see it.
• Discord link (optional): if you connect Discord, we store your Discord ID and username. On Discord servers that have invited our bot, the bot records your presence (online state, current game, and the name of the voice channel and server you are in) so your friends in the app can see it.
• Windows Companion (optional): if you install the Accretion Companion on your PC and sign in with your account, it registers that PC with your account: the computer name, a random installation id, the list of games you set up for launching (game name and launch type — file paths, Steam app ids and process names stay on the PC), your wake-up and auto-launch settings, the Companion version, a heartbeat timestamp that shows whether the PC is online, and the id of its sign-in session so you can sign that PC out from your phone. While it runs, the Companion checks the names of running programs on your PC locally against your own game list and publishes only the name of a matching game as your PC presence, visible to your friends and group members in the same way as Steam presence, plus an "online on PC" state visible to your friends — both only while your subscription is active. When you launch a game from your phone, a launch request (which PC, which entry of your list) and its result ("launched" or an error text) are stored. You can remove a PC from your account in the app at any time.
• Presence alerts (optional): which friends you want to be notified about when they come online or start a game.
• Moderation data: users you block, and reports you submit (including a snapshot of the reported message).
• Purchases (optional): if you buy a subscription, the payment itself is handled entirely by the Apple App Store or Google Play — we never see your payment details. We process your subscription status (product, active-until date) linked to your account id so the app can unlock the features you paid for.
• Crash reports: in release builds, crashes are reported to Sentry (stack trace, device model, OS version). No advertising identifiers are collected.

3. Purposes and legal bases (GDPR)

• Providing the app's features — Art. 6(1)(b) GDPR (performance of contract).
• Optional integrations you actively connect (Steam, Discord, presence alerts, the Windows Companion) — Art. 6(1)(a)/(b) GDPR; you can disconnect them at any time in the app.
• Processing subscription status for purchases you make — Art. 6(1)(b) GDPR (performance of contract).
• Moderation, abuse prevention and crash reporting — Art. 6(1)(f) GDPR (legitimate interest in a safe, working service).

4. Service providers

• Supabase — database, authentication and file storage. Our project is hosted in the European Union.
• Expo / Google Firebase Cloud Messaging / Apple Push Notification service — delivery of push notifications.
• RevenueCat — subscription management: processes your store purchase receipts and subscription status under a pseudonymous app user id (your account id). Payment data stays with Apple/Google.
• Sentry — crash reporting in release builds.
• Valve (Steam Web API) and Discord — only if you connect the respective account.
• IGDB (Twitch) — game search: your search text is forwarded to look up game names and cover images; it is not stored with your identity.
• Microsoft Store — distribution and updates of the Windows Companion. The Companion itself talks only to our Supabase backend; it contains no crash reporting, analytics or telemetry. Launching a game hands over to the Steam or Riot client installed on your PC, whose own privacy policies apply.

Some providers process data in the United States; transfers rely on the EU standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

5. Retention and deletion

• Your data is kept while your account exists. You can delete your account directly in the app (Profile → Delete account); this permanently removes your profile, linked accounts, presence data and push tokens.
• Group content (events, chat, results) belongs to the group and can be deleted by its members with the respective permissions.
• Aggregated attendance counters contain no event details and are removed with the account.
• Windows Companion data: a registered PC is removed when you remove it in the app or sign out of the Companion, and automatically after 90 days without contact. The name of the running game is deleted when the game stops and at the latest 10 minutes after the Companion's last update. Launch requests are deleted 24 hours after completion. All of it is removed with the account.

6. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us at the address above. You also have the right to lodge a complaint with a supervisory authority — in Austria the Datenschutzbehörde (dsb.gv.at).

7. Children

Accretion is not directed at children. You must be at least 14 years old to use the app.

8. Changes

We may update this policy as the app evolves. Material changes will be announced in the app. The current version is always available at this address.