Log in with itch.io

What we ask itch.io for

The login uses itch.io's OAuth flow. We request these scopes:

• profile:me — your itch.io numeric id, username, display name, profile URL, and avatar URL. Used to identify you on our side.
• profile:owned — the list of games you own or have claimed, and the itch.io bundles you own. Used to power the “Only my library” filter, optionally including the games inside your bundles.

Transfer to a third country (USA)

itch.io is operated by Itchio Inc., USA. The OAuth redirect and every owned-games refresh transmit your IP address and your itch.io access token to itch.io. We do not transfer your data to Itchio Inc. for any other purpose.

Legal basis for the transfer: Art. 49 (1) (b) GDPR — necessary for the performance of the service you have requested by logging in — combined with Art. 49 (1) (a) GDPR — your explicit consent, captured by clicking the button below.

itch.io's privacy policy is available at itch.io/docs/legal/privacy-policy.

Special categories of data (Art. 9 GDPR)

Ownership of certain itch.io bundles can reveal information considered “special categories of personal data” under Art. 9 GDPR — political opinions, philosophical convictions, or sexual orientation. itch.io bundles often have themed framing: names like Bundle for Ukraine, Indie Bundle for Abortion Funds, TTRPGs for Trans Rights in Texas, or Queer Games Bundle.

Ownership of a single bundle is not a declaration of affiliation, but a stored record can on its face reveal such information. When you log in we automatically import the list of bundles your itch.io account owns (via itch.io's API) so the library filter can include their games. Because that list can reveal the categories above, by logging in you give explicit consent (Art. 9 (2) (a) GDPR) to us storing your bundle-ownership list for the purpose of running searches against your library.

What gets stored on our side

• Your itch.io profile fields listed above.
• The list of games your itch.io account owns (refreshed at most every 30 minutes).
• The list of itch.io bundles your account owns, imported automatically and refreshed alongside your games (at most every 30 minutes).
• An encrypted copy of your access token, bound to your session cookie.

See the privacy policy — complete description, retention timelines, and your rights. You can delete your account and all associated data at any time from your account page.