Privacy policy
Last updated: October 28, 2026
This policy explains what data the Patch Watcher app collects, what it is used for and how you can ask for its deletion. The data controller, under Brazil's General Data Protection Law (LGPD), is Claudinei de Lima, an individual who publishes the app as XB Technologies, contact: xbtechnologies.app@gmail.com.
Data we collect
- Account identifier: a code generated by Firebase Authentication. If you continue without an account, it's just this anonymous code.
- Google account (if you sign in or link with Google): name, email and profile photo, provided by Google.
- Notification token of each device (Firebase Cloud Messaging), to send the update notifications.
- Followed games: the game's Steam id, name, icon, the date you added it and the size threshold chosen for notifications.
- Preferences: the account's notification size threshold and the app language (Portuguese or English), to send notifications in your language.
- Pro purchase (only if you buy it): the date the account became Pro, the Google Play order number and a code derived from the purchase, which prevents using the same purchase on another account. Payment is handled by Google Play: we don't receive or store card or payment data.
- SteamID (only if you link your Steam account): the public number of your Steam profile and the link date. Your Steam password never goes through the app — sign-in happens on the official Steam page.
- Steam library (only if linked): the list of games on the profile, fetched from Steam when you open "Add Games" and kept for up to 10 minutes to avoid repeated requests.
- Error reports (Firebase Crashlytics): when the app crashes or hits an error, it sends where in the code it happened, the app version, the device model, the Android version and a random installation identifier. The report doesn't include your account, your games or your email.
The app has no ads, doesn't sell data and doesn't collect location, contacts, photos or other device data beyond the error reports above. The device only keeps a note that you've already seen the app introduction.
How we use it
- Keep your game list and preferences across devices and sessions.
- Activate Pro on your account after confirming the purchase with Google Play.
- Periodically check whether the followed games got an update and send the notification to your devices.
- Show your Steam library to make choosing games easier.
- Find and fix app crashes and errors.
The legal basis is the performance of the service you request by using the app (LGPD, art. 7, V); for error reports, the legitimate interest in keeping the app working (art. 7, IX). You can turn off notifications in your device settings at any time.
Who we share it with
- Google Firebase (Google LLC): authentication, database, functions, notification delivery and error reports (Crashlytics). The data is stored on Google servers, including in the United States, under Google Cloud's contractual safeguards.
- Google Play: processes the Pro payment and confirms the purchase to the app; we only receive the order number and whether it was paid.
- Steam / Valve: the SteamID is sent to the Steam Web API to fetch the profile's game list, and sign-in uses Steam OpenID.
- SteamCMD API (api.steamcmd.net) and Steam: receive only game ids to look up versions, sizes and announcements — none of your data.
We don't share data with other companies, except when required by law.
How long we keep it
- As long as your account exists. When you delete the account, the data above is deleted immediately.
- Accounts without sign-in (anonymous) unused for more than 30 days and with no device registered for notifications are deleted automatically, with their data.
- The stored Steam library expires in 10 minutes. Tokens of devices that no longer exist are removed when delivery fails.
- Error reports stay in Crashlytics for up to 90 days.
- The Pro purchase record is deleted together with the account.
- Server technical records (logs), which may contain the account identifier, are kept for up to 30 days for diagnostics.
The version history of the games (builds, sizes, Steam announcements) is public and isn't linked to you.
Your rights
Under the LGPD you can ask for confirmation of and access to your data, correction, deletion, portability and information about sharing. To delete everything, use Delete account in the app menu or see Delete account and data. For other requests, write to xbtechnologies.app@gmail.com.
Security
Data travels encrypted (HTTPS/TLS) and database access is restricted by rules: each account can only read and change its own data.
Children
Patch Watcher is not directed at children under 13 and doesn't knowingly collect data from children.
Changes
If this policy changes, we update the date at the top and, when the change is relevant, let you know in the app. The Portuguese version prevails in case of divergence.