Privacy Policy

Last updated: October 10, 2026

Boxart ("Boxart," "we," "us") is an app for logging video games. Boxart is operated by David Elijah Piersaul-Hall. This policy explains what information Boxart collects, why, who can see it, and how you can control or delete it.

The short version

We collect only what Boxart needs to work: your account, your profile, and what you log and post.
Your library, ratings, hours, tags and private Save Points are visible only to you.
Your username, bio, photo, reviews and public Save Points are visible to other Boxart users.
We don't sell your information, show ads, or track you across other apps or websites.
You can delete your account, and everything in it, from Settings at any time.

What we collect

Information you give us

Account: your email address and password. Passwords are handled by our sign-in provider, Supabase, and stored only in a scrambled form that can't be read back, including by us.
Profile: your username, an optional bio, an optional profile photo, and up to four favorite games.
Your library: games you mark as Want to play, Playing or Played, star ratings, hours played, start and finish dates, and personal tags.
Reviews you write, including whether they contain spoilers.
Lists you make, with their titles, descriptions and games. Each list is Public or Private.
Save Points: short updates about a game you're playing. Each can include a note, your progress, hours played that session, a mood, one screenshot, a spoiler flag, and whether it's Public or Private. Save Points are grouped into runs (playthroughs).
Reports: if you report something, we store which item you reported, the reason you picked, the time, and a copy of the reported text.
Blocks: the list of people you've blocked.
Support emails: if you email us, we receive your email address and whatever you include.

Information created automatically

Sign-in information: Supabase keeps a record of sign-ins (such as the time, and the IP address and device type of the request) to keep accounts secure.
On your phone: Boxart saves your sign-in session and your Light/Dark setting on your device so you stay signed in. This stays on your phone.

What we don't collect

No location, contacts, microphone or camera access. Boxart only sees photos you choose to upload.
Photos are shrunk and re-saved on your phone before upload, which removes hidden details like where a photo was taken.
No advertising IDs, analytics or crash-reporting tools are in Boxart today. If we add them, we'll update this policy first.

Why we use it

To run Boxart: sign you in, show your profile, library, lists and Save Points, and show your public posts to other users.
To send account emails, such as sign-up and password-reset codes. We don't send marketing emails.
To keep Boxart safe: handle reports, enforce blocks, and remove content or accounts that break our Terms of Use.
To answer you when you contact support.

Boxart checks reviews, notes, list names, bios and usernames for offensive language before saving them. That check happens on your phone; nothing is sent anywhere for it.

Who can see what

Only signed-in Boxart users can see other people's content in the app.

Information	Who can see it
Username, bio, profile photo	Other Boxart users. Profile photos are stored at a public web address, so anyone with that exact address could open the photo.
Reviews	Other Boxart users
Public Save Points (including the note, progress, mood, hours and screenshot)	Other Boxart users. Screenshots are shown through short-lived private links.
Private Save Points	Only you
Public lists	Other Boxart users (when lists are shown to others)
Private lists, your library, ratings, hours, tags, favorite games, runs	Only you
Your email address	Only you and us. Never shown to other users.
People you've blocked	Only you. Blocked people aren't told.
Reports you file	Only Boxart's moderators. The person you report isn't told who reported them.

If you block someone, or someone blocks you, neither of you can see the other's reviews, Save Points or lists.

Reports and moderation

When something is reported, our moderators receive an email with the reason, the usernames of the person who reported and the person reported, the game, and a copy of the reported text. Moderators can remove reviews, Save Points (with their screenshots) and lists, clear a profile's bio and photo, and suspend accounts that break our rules.

Companies that help run Boxart

We use a few service providers. They process information only to provide their service to us.

Supabase hosts Boxart's database, sign-in and file storage (profile photos and screenshots), on servers in the United States (Virginia).
Resend sends Boxart's emails (sign-up codes, password-reset codes, and report notices to moderators). It receives the recipient's email address and the email's contents.
IGDB (operated by Twitch, part of Amazon) provides game names, cover art and other game details. Boxart's servers send IGDB only the game names you search for, never anything about you.
Netlify hosts this website. Like most websites, it may log visitors' IP addresses and browser details.
Cloudflare runs our domain and forwards email sent to our boxart.club addresses.

We don't sell or rent your personal information, and we don't share it for advertising.

How long we keep it

We keep your information while you have an account. You can edit or delete your reviews, lists, tags, Save Points and profile at any time.

Deleting your account (Profile → Settings → Delete account) permanently deletes your profile, library, ratings, reviews, lists, tags, Save Points, runs, screenshots, profile photo, the reports you filed, reports about you, and your blocks. It can't be undone.

A few things may remain for a short time or outside Boxart's database: copies of report emails already sent to moderators, records our providers keep for a limited time (such as email delivery logs), and information we must keep to comply with the law.

Your choices and rights

See and change your information in the app at any time.
Make any Save Point or list Private, or delete it.
Block anyone, and unblock them in Settings.
Delete your account from Settings, or ask us to delete it by emailing support@boxart.club from your account's email address.
Ask us for a copy of your information, or ask a question about it, at support@boxart.club.

Depending on where you live, you may have additional rights, such as the right to access, correct, delete or move your information, or to object to how it's used. Email us and we'll respond within the time the law requires.

Security

Boxart uses encrypted connections, database rules that let each person change only their own information, and private storage for screenshots. No system is perfectly secure, so please use a password you don't use anywhere else.

Children

You must be at least 13 to use Boxart. We don't knowingly collect information from children under 13. If you believe a child under 13 has an account, email support@boxart.club and we'll delete it.

Users outside the United States

Boxart is run from the United States, and your information is stored there. By using Boxart, you understand your information will be processed in the United States.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the app before it takes effect.

Contact

Questions about privacy? Email support@boxart.club.