Log in with itch.io
Logging in is opt-in. The rest of this site works without an account; logging in enables the “Only my library” filter and the bundle-paste workflow described below.
What we ask itch.io for
The login uses itch.io's OAuth flow. We request these scopes:
profile:me — your itch.io numeric id, username, display name, profile URL, and avatar URL. Used to identify you on our side.profile:owned — the list of games you own or have claimed via direct purchases. Used to power the “Only my library” filter.profile:collections — your itch.io collection metadata. Reserved for a future feature; not stored yet.
Transfer to a third country (USA)
itch.io is operated by Itchio Inc., USA. The OAuth redirect and every owned-games refresh transmit your IP address and your itch.io access token to itch.io. We do not transfer your data to Itchio Inc. for any other purpose.
Legal basis for the transfer: Art. 49 (1) (b) GDPR — necessary for the performance of the service you have requested by logging in — combined with Art. 49 (1) (a) GDPR — your explicit consent, captured by clicking the button below.
itch.io's privacy policy is available at itch.io/docs/legal/privacy-policy.
Special categories of data (Art. 9 GDPR)
Ownership of certain itch.io bundles can reveal information considered “special categories of personal data” under Art. 9 GDPR — political opinions, philosophical convictions, or sexual orientation. itch.io bundles often have themed framing: names like Bundle for Ukraine, Indie Bundle for Abortion Funds, TTRPGs for Trans Rights in Texas, or Queer Games Bundle.
Ownership of a single bundle is not a declaration of affiliation, but a stored record can on its face reveal such information. By using the library-search feature you give explicit consent (Art. 9 (2) (a) GDPR) to us storing this data for the purpose of running searches against your library.
What gets stored on our side
- Your itch.io profile fields listed above.
- The list of games your itch.io account owns (refreshed at most every 30 minutes).
- The list of itch.io bundles you explicitly add via the paste workflow.
- An encrypted copy of your access token, bound to your session cookie.
See the privacy policy — complete description, retention timelines, and your rights. You can delete your account and all associated data at any time from your account page.
Clicking “Continue” redirects you to itch.io's consent page, where you also grant the scopes listed above. You can change your mind at any time on the itch.io side or by deleting your account from your library page.