Privacy Policy

Summary

You can read every page of itemshop.gg without an account and without giving us anything. The only data we hold is what you choose to hand over by signing in with Discord, turning on shop alerts or sending a suggestion, plus the aggregate analytics most websites collect. We do not sell personal information.

Stored in your browser

We set no cookies of our own unless you sign in (see Accounts below). A few preferences live in your browser's local storage and, unless you are signed in, never leave it:

• Your real-money price display choice (in-game prices, USD, EUR or GBP).
• Which games you have hidden from the header.
• Whether you have dismissed the “add to home screen” prompt.
• A cached copy of recently viewed pages, so the installed app opens offline.

Clearing site data in your browser removes all of it.

Accounts

Signing in is optional and uses Discord. We ask Discord only for the basic profile it calls “identify”: your Discord user ID, username, display name and avatar. We never see your email address, your servers or your messages, and we do not keep the Discord access token after reading your profile. We store that profile with the settings you sync (shop alert games, games hidden from the header, price currency), the items you save to your wishlist (which item, its name and picture as the shop showed it, and when you saved it) and the time you last signed in.

While you are signed in, your browser holds one cookie, isg_session, which is sent only to our own API and lasts up to 60 days; a second short-lived cookie guards the sign-in round trip itself. Your avatar loads from Discord's image servers. Signing out ends the session; “Delete account” on your account page erases the account, its sessions, your wishlist and the alerts on every device linked to it, at once.

Shop alerts

If you turn on notifications for a game, your browser gives us a push subscription: an endpoint URL and the encryption keys needed to send to it. We store that together with the list of games you chose. If you are signed in it is linked to your account, so the same games reach each of your devices; otherwise it is not linked to a name, an email address or anything else about you. We use it only to send the alert when that shop rotates and, if you are signed in with wishlist alerts on, when an item you saved is back in the shop. Signed out, turning alerts off in the bell menu removes the subscription. Signed in, the device stays subscribed even with no games chosen, so wishlist alerts can reach it; signing out on that device or deleting your account removes it. Revoking notification permission in your browser stops everything, and endpoints that stop working are deleted automatically.

Suggest an edit

The “Suggest an edit” button sends your message, the page you were on and its title, any text you had highlighted, and your browser's user-agent string. That is stored so we can act on it and is posted to a private channel where the site's maintainers triage corrections. There is no name or email field, so please don't put personal details in the message. Your IP address is used in memory to limit how many suggestions one address can send per hour and is not written anywhere.

Analytics

We use Google Analytics to understand which pages are read and roughly where visitors come from. It sets its own cookies and processes data under Google's privacy policy. We look at it in aggregate only. Browser settings that block third-party scripts stop it entirely, and the site works the same without it.

Hosting and logs

The site runs on Railway. Like any web server it keeps short-lived request logs, which include IP addresses, for operating and securing the service. They are not used to identify individual readers.

Third-party content

Item art and shop data come from the games' own services and from feeds such as fortnite-api.com, locker.gg, the source.gs sites (rl.source.gs for Rocket League), the Steam item store, Battle.net and Bungie.net. Images are loaded directly from those providers, and opening a Rocket League item asks rl.source.gs for its shop history, so their servers see your IP address and browser details, as they would for any image on the web. Nothing about you or your account is sent with those requests.

Advertising and affiliate links

The site shows ads served by Google AdSense. Google and its partners use cookies and similar technologies to serve and measure those ads, which can include ads based on your visits to this and other sites. You can opt out of personalised advertising at adssettings.google.com, and read how Google uses this data at policies.google.com/technologies/partner-sites. Some links may carry an affiliate code: if you click through and buy something, we may earn a commission at no cost to you. The site also links to freetokeep.gg, a sister site run by the same people.

Children

The site is not directed at children under 13, and we do not knowingly collect information from them.

Your choices and rights

You can remove everything we hold about you yourself: delete your account from the account menu, turn off alerts to delete your push subscription, and clear site data to remove local preferences. If you want a suggestion you sent deleted, or have any question about this policy, email [email protected] and we will sort it out. Depending on where you live you may have legal rights to access, correct or erase personal data; the same address handles those requests.

Changes

If this policy changes, the date at the top moves and the new text applies from then on. See also our terms of use.