Blastlog

Privacy policy

Last updated: November 8, 2026

Blastlog is a personal game-backlog app run by Charlie for a small circle of friends. Anyone can ask to join; Charlie decides who gets in. This page explains what it keeps about you and what it does with it; the terms of service are the rules for using it. Questions or requests: charizarlslie@gmail.com.

What Blastlog gets from Google or Apple

When you sign in with Google, Blastlog receives your Google account ID, email address, name and a link to your profile picture. It uses them only to sign you in, to let Charlie decide whether to let you in, and to show your name and picture to your friends on Blastlog (you can ask for your picture to be hidden). Blastlog asks for nothing else: no access to Gmail, Drive, Calendar, contacts or any other Google data.

When you sign in with Apple, Blastlog receives your Apple account ID, an email address (Apple's private relay address if you chose to hide yours) and, the first time only, your first name. No picture. It uses them the same way. Blastlog also keeps an encrypted Apple sign-in token, used only to tell Apple to cut Blastlog off if you delete your account. Blastlog asks Apple for nothing else.

Your own picture

You can upload a picture of your own instead. You frame it on your device, and only the framed square (a small image, not the original photo) reaches Blastlog, which keeps it and shows it to your friends in place of your Google picture (or in place of no picture, if you signed in with Apple). Removing it deletes it at once. If Charlie takes a picture down, it is kept for 30 days so he can put it back, then deleted.

Asking to join

If you sign in before Charlie has set you up, Blastlog keeps the name, email address and picture Google or Apple gave it so he can decide (at times Blastlog lets new people in straight away). If you're let in, they become your account. If he says no, they are deleted 30 days later.

When you're let in, Blastlog sends you one email saying so, from its own address ([email protected]) through Resend, an email delivery service. Resend gets only your email address, the name Blastlog knows you by and the message itself. Blastlog sends no other email.

How you found Blastlog: on the website (not in the iOS app), your browser remembers the name of the site whose link brought you here (such as reddit.com, never the full address), the page you first landed on, any campaign tags in that link and when you first visited. It stays in your browser and is sent once, when you first sign in, so it's kept with your request to join. If Blastlog let you in straight away, the website also asks you once how you heard about it; answering is optional. Only Charlie sees either.

What you put in

Your library (games, platforms, status, dates), ratings, reviews, notes, settings (such as which game length you go by), and any traits you suggest for a game or flag as not belonging. Your friends on Blastlog can see them, and you see theirs; that is the point of the app (comparing tastes, recommendations). Other players can't. Charlie, who runs Blastlog, can see everyone's, friend or not, but only looks at a stranger's to fix problems or work on the site. You become friends when Charlie lets you in and picks friends for you, when one of you opens the other's friend link, or when Charlie adds you, and either of you can end it.

Quick start (rating well-known games you've played) adds each game you rate to your library like any other entry. It also remembers which games it has shown you, so it doesn't show them again; that list is only yours and isn't used for anything else.

Guided start (if you choose it) keeps what you play on, which kinds of games sound fun to you, and how each step went, so it can pick games for you. It is only yours: friends don't see it. Stopping it keeps your progress in case you come back; deleting your account deletes it.

Friend groups you make (to compare one group of friends at a time) are only yours: nobody else sees them, the friends in them aren't told, and deleting a group deletes it.

Importing your games

If you import your library, you copy your game list from a store page or a file yourself and paste it into Blastlog. Blastlog never signs in to your store accounts and never asks for their passwords. Your browser reads the list, and only the game titles and the store's own game IDs reach Blastlog, plus your own ratings and reviews from the file if you choose to bring them. Hours played are left out. Blastlog keeps the list you imported (the titles and how you sorted them) so you can undo the import; undoing removes the games it added that you haven't changed since. Screenshots you choose (of your Xbox app library) are read on your own device; the pictures never reach Blastlog, only the game names read off them. To find each game, the titles are looked up on IGDB. It also keeps which store you own each game on (from your imports, or ticked by you) to show you where to find it when you want to play; only you see that, not your friends.

For Steam you can instead press Connect Steam. You sign in on Steam's own page (Blastlog never sees your Steam password), Steam tells Blastlog your Steam ID, and Blastlog asks Steam's Web API once for the games on that account (their names and Steam's game IDs, plus how long you've played each and when you last did, which the import uses to suggest a pile: never played, played lately, played about as long as the game takes). That only works if your Steam profile's game details are public. From then on it's an import like any other, keeping only the games you chose and which ones came from Steam; the playtime stays with that import and never goes on your library. Blastlog never keeps a Steam login. If you tick Keep my Steam library in sync, Blastlog also keeps your Steam ID (nothing else) so it can ask Steam's Web API once a day for your games and your wishlist; anything new waits for you to sort, and nothing joins your library or wishlist until you do. Stop and forget my Steam ID on the import page deletes it at once. Blastlog isn't affiliated with Valve or Steam.

Your taste over time

About once a week Blastlog saves a copy of your taste profile (the traits it thinks you like or avoid, and how many games you've rated and finished), so it can later show how your taste changed and look back on your year. Only you see it (and Charlie, who runs Blastlog, only to fix problems or work on the site), and it goes with your account.

Tips

Everything in Blastlog is free. If you choose to leave a tip, you do it on Charlie's tip page (such as Ko-fi), which is run by someone else: it gets your payment details and whatever else it asks for, under its own privacy policy. Blastlog never sees your card and doesn't learn whether you tipped. If you dismiss the occasional "did Blastlog help?" tip question, Blastlog remembers when, so it doesn't ask again too soon. Blastlog once had a paid supporter checkout (run by Paddle) that was only ever tested; if any payment record from it is about you, it holds only the amount, date, status and Paddle's IDs, and stays without your name if you delete your account.

Playnite sync

If you connect the Blastlog plugin for Playnite, you make a token for it in Your account. Blastlog keeps only a scrambled copy of the token, when it was last used, and which of your Playnite games are which Blastlog entries. The plugin sends your Playnite games' names, store IDs and playtime; playtime is kept as a note on the game, and nothing in your library changes unless you allowed the token to change it. For security, Blastlog notes when a token is made, revoked, used, refused or slowed down, with the internet address it came from, and deletes those notes after 90 days.

How it's used

To show your library and stats, compare tastes with your friends, and recommend games from your backlog and from your friends' favourites (Discover quotes a line from a friend's review of the game it suggests; your answers there, such as "Not for me", are kept so a game doesn't come back, and only you see them; after a few low ratings in a row it may suggest one of your own favourites to play again, which you can switch off in Account settings). To understand what you liked or disliked, the text of your reviews is sent to OpenAI's API, which returns a summary that Blastlog stores. A trait you suggest for a game, or flag as not belonging (and your note on it), goes to Charlie to decide; only if he has switched on the AI check for those is it sent the same way to check whether it fits. Blastlog keeps a record of how your suggestions were decided, which can raise or lower how many you can send and whether they take effect on their own, and it sets aside ones that look like spam for Charlie to look at. If you report a friend's review, Charlie sees the review and your report. Feedback you send from the menu (an idea or a bug, with the address of the page you were on) is kept for Charlie, and a copy with your Blastlog name is posted to his private Discord channel so he sees it quickly. Deleting your account deletes the kept feedback; ask Charlie and he deletes the Discord copy too. This is handled under OpenAI's API terms. Details about games (not about you) come from IGDB and Wikipedia (older records also from Steam and RAWG), and for a game none of them knows the length of, a web search through OpenAI; those services only ever see game titles and IDs.

Where it's kept

On a private server Charlie runs in the United States. Nightly backups are kept on the same machine, with a copy in Charlie's private Google Drive in case that machine fails. Traffic to the site passes through Cloudflare. On the website (not in the iOS app), Cloudflare Web Analytics counts page visits so Charlie can see how much Blastlog is used: it sets no cookies, doesn't follow you to other sites or try to identify you, and Charlie sees only totals (such as visits per page, browser and country). Blastlog has no ads, no tracking, and never sells or shares your data. It sets one cookie, which keeps you signed in. While you wait to be let in, a second one lets the sign-in page check whether you're in yet; it holds only a code for your request, nothing about you. Connect Steam sets one for the few minutes you spend on Steam's sign-in page, holding only a code for that attempt.

Getting a copy, and deleting your data

Your taste → Your account has Download my data (everything Blastlog keeps about you, as a file, plus your library as a spreadsheet) and Delete my account. Deleting removes your account, library, ratings, reviews, taste profile and its saved copies, friends, picture, Steam link, imports and sign-ins straight away, and tells Apple to end Blastlog's access if you signed in with Apple. What stays, with no name on it: trait suggestions and flags you sent (the terms let Blastlog keep improving the shared game list with them), payment records, and a note that an account was deleted. You can also email charizarlslie@gmail.com and it's done for you within 30 days. Copies inside older backups, including the Google Drive copy, expire on their own as the backups are rotated out (within about 13 months).

Changes

If this policy changes, this page is updated and the date above changes.