Privacy Policy
comcom is an app for scheduling game sessions with friends, on Android, iOS, Windows and the web (app.comcom.party). This policy explains what we collect, why, who handles it for us, how long we keep it and what you can do about it. comcom has no ads, no analytics and no tracking cookies, and we do not sell your data.
Who we are
comcom is run by two private individuals in Poland, not a company (“we”, “us”). We are the controllers of your personal data. Contact: support@comcom.party.
What we collect
Your account. Email address and password (stored hashed), or the account ID from the service you sign in with (Steam, Xbox, Google or Apple); your username and its change history; optionally a bio and a profile picture.
Gaming accounts you link.
- Steam: your Steam ID, Steam name and avatar, your game library and playtime (to suggest games and show what you have played together), and your Steam friend list. The friend list is only read to find which of your Steam friends are on comcom; the matches are deleted after a day. Whether your Steam friends can find you this way is off unless you turn it on.
- Xbox: your Xbox user ID, gamertag and gamerpic.
- PlayStation Network ID and Nintendo Switch friend code, if you type them in.
What you do in comcom. Friends and friend requests, friend groups (with their name and picture), friend invite links, sessions you create or are invited to (game, time, player limit, optional Discord link), your answers and reschedule proposals.
Guests. If you answer an invite link without an account, we store the name you type and your answer. You can delete both at any time with “Remove me” on the invite page.
Safety. Players you block, and reports you send or that are sent about you (reason, details, who reported whom or which session).
Notifications. On phones, a push token for your device, so we can tell you about invites and changes. Session reminders are scheduled on your device.
Technical data. Our hosting providers log requests (IP address, time, requested address, browser or app version) to run the service and stop abuse. We count some actions per account (for example Steam lookups and uploads) to enforce limits.
On your device. The app stores your sign-in session and your settings (for example light or dark mode) on your device. The web app uses your browser’s local storage for this, not cookies.
Who can see it
Your profile is private by default. Other signed-in players can see your username and profile picture. Your friends see your full profile; you choose what everyone else may see in Settings. People in a session see who else is invited and their answers. Public sessions are visible to every signed-in player. A guest on an invite link sees the session, the host and who is coming.
Why we use it (legal basis)
- To provide comcom (accounts, friends, sessions, invites, linked game accounts): performance of our contract with you.
- Safety and abuse prevention (blocks, reports, rate limits, the name and bio filter, logs): our legitimate interest in a safe, working service.
- Push notifications and Steam friend matching: your consent, which you can withdraw in the app or your device settings at any time.
Who processes it for us
| Provider | What for |
|---|---|
| Supabase, Inc. | Database, sign-in, file storage and server functions. Your data is stored in London, United Kingdom. |
| Cloudflare, Inc. | Hosts this website and the web app; handles your requests and IP address on its global network. |
| Google LLC | Push notifications on Android (Firebase Cloud Messaging); QR code scanning on phones (ML Kit, which runs on the device and may send Google diagnostics); Sign in with Google; in the web app, fallback fonts for emoji and some scripts are loaded from fonts.gstatic.com. |
| Apple Inc. | Push notifications on iOS and Sign in with Apple. |
| Valve Corporation | Steam sign-in and the Steam Web API (profile, library, friend list). |
| Microsoft Corporation | Xbox sign-in and profile. |
Some of these providers are in the United States. Where data leaves the UK or the EEA, they protect it with the European Commission’s and the UK’s standard contractual clauses or an adequacy decision.
How long we keep it
- Your account and everything tied to it: until you delete your account.
- Steam friend matches: one day. Rate-limit counters: deleted when they expire.
- Guest names and answers: until the guest removes them or the host deletes the session.
- Reports: kept after you delete your account, without your name as the reporter, so we can act on them.
- Request logs at our hosting providers: a few days.
Deleting your account
In the app, go to Profile › Settings › Delete account. This deletes your account immediately, with your profile, profile and group pictures, friendships, groups, the sessions you host (with their invites and links) and your device tokens. Answers you gave in other people’s sessions are removed with your account. If you cannot sign in, email support@comcom.party from the address on your account (or tell us your username) and we will delete it for you.
Your rights
You can ask us for a copy of your data (also in a machine-readable format), to correct it, to delete it, to restrict or object to how we use it, and you can withdraw consent at any time. Email support@comcom.party; we answer within one month. You can also complain to your data protection authority (in Poland, the President of the Personal Data Protection Office, UODO; elsewhere, the authority where you live or work).
Age
comcom is for people aged 16 and over. If you believe someone younger has an account, tell us and we will delete it.
Changes
If we change this policy, we update the date above. For important changes we tell you in the app before they apply.