What I collect, and what I don't.

What IndieDex is

IndieDex is a free search tool for finding indie and overlooked games. You can browse and search without an account. With a free account you can save games, keep lists and a backlog, leave quick thumbs up or down, write reviews, follow people, and share a public profile. Supporters unlock thank-you extras like taste profiles. Details live on the membership page.

The catalog (game names, prices, tags, similar-game shelves) is about games, not about you. Your personal account data lives separately from that catalog.

When you just visit

Even signed out, the site needs a few basics to work: pages you open, your language preference, and a rough idea of which Steam store region to show prices for. That region can come from a setting you pick, or from the country signal my host (Vercel) attaches to the request. I use it to show the right Steam store prices and membership checkout currency, not to build a dossier on you.

Anonymous search is rate-limited so one visitor cannot burn the paid search budget for everyone. That limit looks at request metadata (including IP) only long enough to enforce the cap.

When you make an account

You sign in with Google and/or Steam. From Google I get the basics that login needs (typically name, email, and avatar). From Steam I get your Steam identity and the public persona/avatar Steam shows. I keep an IndieDex user record for you; Steam and Google stay linked as connections, not as your whole identity.

I store what you do in the product: lists, backlog items, thumbs, reviews (if you write them), follows, profile settings (handle, display name choices, privacy toggles), membership status, and support messages you send me.

I do not ask for your phone number today. I do not store your full payment card number on IndieDex servers.

Stuff you put on the site

Public profiles, public lists, public reviews, and share links are meant to be seen by other people. Private lists and private reviews stay private to you (and to me when you ask for support help). Profile privacy settings control what strangers see.

Support tickets are messages to me. I read them to help you. Ticket text can include personal details you choose to type; please don't put passwords or payment card numbers in a ticket.

Supporter payments

Paid Supporter checkout runs through our payment processor (the merchant of record). They handle the card or wallet payment. IndieDex receives enough to know you paid, which plan you have, and how to let you manage or cancel: not your full card number.

Our payment processor's own privacy terms apply to the checkout itself. Cancel any time; your perks last until the period you already paid for ends.

Analytics and crash reports

I use PostHog to understand how the product is used: page views, and specific product events I chose (for example search, saves, membership views). Autocapture of every click is off. I redact bits of URLs that can carry personal text before those events leave the browser.

I use Sentry so I can see when the site crashes or errors. Logs are written to avoid names, emails, and other personal details. The goal is "what broke," not "who is this person."

These tools help keep IndieDex working and fair. They are not an ad network, and I do not sell the event stream to advertisers.

Cookies and similar storage

I use cookies and browser storage that fall into a few buckets:

Essential: sign-in/session cookies so you stay logged in; language preference; Steam store region preference; short-lived membership claim codes after checkout. Without these, login, locale, prices, and claiming a membership break.

Product analytics: PostHog may store an identifier in the browser so return visits can be counted as the same visitor. That is for product improvement, not ads. There is no separate "accept cookies" banner today; this page is the disclosure. If you block analytics cookies in your browser, the site should still work for browsing and search.

Who helps run IndieDex

IndieDex is hosted and powered by a small set of services: Vercel (website), Convex (account and social data), Neon/Postgres (game catalog), PostHog (product analytics), Sentry (errors), our payment processor (payments), and Google/Steam for sign-in. Each gets only what that job needs.

I do not sell your personal information to advertisers or data brokers. I do not rent email lists. In-platform activity can help rank and recommend games inside IndieDex for players. I do not sell your activity to studios or anyone else — see the next section.

Studios and your data

IndieDex is a product for players. I do not sell studio accounts, campaign-link dashboards, or any package of player activity to indie developers or publishers.

I will not sell your library, wishlist, backlog, taste profile, search history, or a dossier of what you play. Discovery tools for games stay free for players; paid Supporter is thank-you extras for players, not a B2B analytics product.

What I don't do

No ads on the site. No sponsored rankings. No selling "what you play" to advertisers. That choice is the whole point of the Supporter model.

I also do not put your email or name into another player's API response. Public pages show only what a public profile is designed to show.

Your choices and requests

In the product you can change profile visibility, list visibility, and (where it exists) review visibility. You can disconnect a login provider where the account settings allow it, and you can cancel Supporter through the billing portal our payment processor provides.

Want a copy of your data, or want the account gone? Both are self-serve now. Open your Account page: “Download my data” builds one JSON file of what I store about you, and “Delete my account” wipes it. Deleting is immediate and permanent, with no grace period and no undo. If your account holds more than one click can carry, the page tells you and I finish it by hand. For a correction, or anything those two buttons do not cover, sign in and open Support or email me at support@indiedex.com. If you are in the EU/EEA/UK, that covers the usual access, correction, deletion, and objection requests.

Nevada residents: IndieDex does not sell covered personal information as that term is used in Nevada law. If you still want to send an opt-out style request, use Support.

Kids

IndieDex is not aimed at children under 13 (or under 16 where that is the local rule). If you believe a child created an account, contact Support and I will remove it.

How long I keep things

Account data stays while your account exists. Support tickets stay long enough to help you and keep a short history of what I already covered. Analytics and error data follow each vendor's retention settings, kept only as long as they stay useful for running the product. Deleting your account is a real delete, not a hidden flag and not an anonymized copy: your profile, lists, backlog, thumbs, reviews, support messages, connected accounts and sign-in sessions all go at once, and the taste profile kept in the game catalog database goes in the same step, with a weekly Sunday sweep to catch anything that failed. Two things stay on purpose. Moderation and admin records keep the internal reference they already had, with no name, email, or writing of yours attached. PostHog analytics is deleted by hand when you ask, because no button in the product reaches it. Backups and security logs may lag a short while.

Changes to this page

If the product starts collecting something meaningfully new, I will update this page and bump the date at the top. Big changes get a clearer callout when I can.

How to reach me

Privacy questions and data requests: Support in the app (sign-in ties the request to your account), or email me at support@indiedex.com. I'm one person, so replies can take a bit. English and Portuguese are easiest for me; I'll still try with other languages.