Privacy Policy
The short version: Playmoir is local-first. Your journal lives on your own PC by default and we can't see it. If you sign in with Steam, we store your Steam ID and game list. If you subscribe, we store your journal in the cloud so it syncs and backs up, encrypted in transit and used for nothing except showing it back to you. We don't run ads, we don't sell data, and we don't use third-party product analytics in the app. You can export everything and delete everything, any time, from inside the app.
1. Who we are
Playmoir is an independent app operated by its developer ("we", "us"). Contact for anything in this policy: hello@playmoir.com.
2. Data that stays on your device
By default, Playmoir works without an account, and the following never leaves your PC:
- Your game library scan: Playmoir reads your local Steam installation's manifest files to discover installed games. This happens entirely on your machine.
- Journal entries, notes, milestones, and intentions you write.
- Screenshots Playmoir captures automatically when you close a game.
- Voice memos, which are transcribed on your device using a local speech-to-text model. Audio is never uploaded for transcription.
- Play session timestamps detected from running games.
- A local log: a small text file noting which games Playmoir saw start and stop, when it offered to log a session, and any errors syncing or updating. It holds game names and times, never your journal text. It stays on your PC unless you choose to send it with feedback (section 7), and you can open it from Settings → About → Local log.
3. Data we receive if you sign in with Steam
Signing in is optional. It uses Steam's own sign-in page (OpenID), so we never see your Steam username or password. When you sign in we receive and store the following Steam Data on our servers, located in the United States:
- Your numeric Steam ID, display name, and avatar.
- Your list of owned Steam games and playtime, fetched from the Steam Web API, so your full library can appear in the app.
Steam Data is retrieved only at your request: signing in initiates it, and while you remain signed in, your owned-games list refreshes when you use the app. Signing out stops all retrieval. A session token is stored on your device (encrypted at rest with Windows DPAPI) and expires after 30 days. Playmoir is not affiliated with or endorsed by Valve; Steam is a trademark of Valve Corporation.
4. Data we store if you subscribe (cloud backup & sync)
The paid subscription adds cloud backup, cross-device sync, and AI features. If you subscribe, the personal data you choose to keep in Playmoir is stored on our servers so it can sync and survive your PC: journal entries, session summaries, screenshots, voice memos, AI-generated recaps, and manually-added games (including their cover images).
This data is transmitted over encrypted connections (HTTPS/TLS), is accessible only to your signed-in account, and is used solely to provide the product, never for advertising, profiling, or sale.
5. AI features
AI features require you to be 18 or older (a condition of Google's Gemini API terms, which govern the AI processing).
- With a subscription: the text of a journal entry (and related game context) is sent to Google's Gemini API via our server to generate summaries and "story so far" recaps. Our server uses Google's paid API tier, under which Google does not use your prompts or the responses to train or improve its models.
- Retention by Google: Google temporarily logs API prompts and responses (55 days by default) solely for abuse monitoring, then deletes them. So "sent to Google" means processed and briefly logged, not kept, and not trained on (paid tier).
- If you use your own Gemini API key instead: requests go directly from your device to Google. Your key is stored on your device encrypted with Windows DPAPI and is never sent to us. Important: on Google's free API tier, Google may use submitted content to improve its products, including human review (this does not apply to users in the EEA, UK, or Switzerland). If that matters to you, use a paid-tier key, or the subscription path.
- EEA / UK / Switzerland: AI features are provided to users in these regions via Google's paid API services only.
- Screenshots and audio are never sent to AI providers. Only text.
6. Payments
Subscriptions are processed by Polar as merchant of record. Your card number and billing details go to Polar, not to us; we receive only the subscription status needed to unlock paid features. Polar's own privacy policy applies to the payment itself.
7. Diagnostics: error reports, crash reports, and usage
Error and crash reports. To keep the app working, Playmoir sends technical error and crash reports to Sentry (Functional Software, Inc.), an error-monitoring service: what failed, an error message and stack trace, the app version, and basic system information (OS version). Reports are anonymous: they carry no account identity and never include your journal content, screenshots, or audio. Sentry retains reports for at most 90 days. Our server also reports its own internal errors to Sentry; those server reports likewise contain no journal content or account identity.
Usage ping. Playmoir also sends a small ping when the app is opened, so we can tell how many people use it and which versions are still in the wild. The ping contains exactly two things: a random identifier generated on your device and the app version. That identifier is random, is not derived from your Steam account, your hardware, or anything else about you, and cannot be linked back to a person. It is recorded at most once per calendar day, so opening the app ten times in a day is recorded the same as opening it once, and it cannot be used to reconstruct when or how often you play. No IP address is stored. This ping goes to our own server. It is not sent to any analytics company, and we do not use third-party product analytics in the app.
Both are on by default, both are disclosed the first time you open Playmoir, and you can turn either off at any time in Settings → About → Diagnostics. Crash reporting changes apply the next time the app starts; the usage ping stops immediately. We keep usage-ping records for 12 months, then delete them.
Feedback you send. When you use Settings → About → Send feedback, we receive your message plus the app version, your OS version, and, if you are signed in, your Steam name and Steam ID. If you tick Include my Playmoir log, the last lines of your local log go with it; the form shows exactly those lines before you send. Nothing is sent until you press Send. Feedback arrives as an email in our inbox, sent through Resend and kept in Google Workspace, and may be reviewed with the help of AI tools to sort reports and fix bugs. We keep feedback only as long as it is useful for that, and you can ask us to delete it at hello@playmoir.com.
Website analytics. Our website (playmoir.com) uses Cloudflare Web Analytics to count page visits. It sets no cookies, does not fingerprint your browser, and does not track you across other sites. It records the page visited, the referring site, and the country, never an identity. This applies to the website only, not to the app.
Download counts. When you click a Download button on our website, we add 1 to a daily tally before sending you to the installer file. The tally records only the date, which button was used, and a number. It contains no identifier of any kind: no account, no device, no IP address, nothing that could distinguish your download from anyone else's. We keep it so we can tell how many people take the app, which is not something we can otherwise know.
8. Who we share data with (subprocessors)
We use a small set of infrastructure providers to run the cloud service. They process data on our behalf and are not permitted to use it for their own purposes:
| Provider | Purpose |
|---|---|
| Supabase (Postgres) | Cloud database for synced journal data and game lists |
| Cloudflare R2 | Storage for synced screenshots, voice memos, and cover images |
| Fly.io | Hosts our application server |
| PowerSync | Sync engine between your devices and the cloud database |
| Google (Gemini API) | AI text generation for summaries and recaps |
| Polar | Payment processing (merchant of record) |
| Valve (Steam Web API) | Sign-in and owned-games lookup |
| Sentry (Functional Software, Inc.) | Error and crash report processing (optional; see section 7) |
| Resend | Delivers feedback you choose to send from the app to our inbox (see section 7) |
| Google (Workspace) | Our email inbox, where feedback and support mail is kept |
| Cloudflare (Web Analytics) | Cookieless page-visit counting on playmoir.com only, not in the app (see section 7) |
We have data processing agreements in place with each provider. We never sell your data. We never share it with advertisers. There are no ads in Playmoir.
International data transfers (EEA / UK users)
Our servers and providers store and process data in the United States. Where data of EEA or UK users is transferred to the US, we rely on our providers' data processing agreements incorporating the European Commission's Standard Contractual Clauses (and the UK equivalent) as the transfer safeguard. You can contact us for more information about these safeguards.
9. Your controls: export and delete
- Export everything: Settings → Your Data exports your complete journal (entries, screenshots, audio, recaps) as a .zip you own. Free, always.
- Delete cloud data: Settings → Danger Zone permanently erases your journal entries, screenshots, audio, recaps, and manually-added games from our servers. (Your Steam games list is a mirror of your Steam ownership and re-syncs while you stay signed in.)
- Clear this device: wipes the local copy on that PC.
- Full account removal: email us and we'll delete your account record entirely, including your Steam ID mapping.
Deleted synced items are kept in a 30-day recoverable state ("Recently deleted") before permanent removal, unless you delete them forever explicitly.
10. Data retention
Cloud data is kept for as long as your account exists (or until you delete it with the controls above). If your subscription ends, already-synced data remains stored and exportable, but stops syncing. Local data on your PC is yours and persists until you remove it.
11. Age requirements
Playmoir is not directed at children. You must be at least 13 (or the minimum age in your country) to use Playmoir, and at least 18 to use the AI features (a requirement of our AI provider's terms). We do not knowingly collect personal data from children under 13; if we learn that we have, we will delete it.
12. Changes to this policy
If this policy changes materially, we'll update the effective date above and note the change in the app's release notes. Continued use after a change means you accept the updated policy.
13. Contact
Questions, export requests, deletion requests: hello@playmoir.com.