Privacy policy

Trophy Atlas is an independent site about PlayStation trophies. It is not affiliated with PlayStation or Sony Interactive Entertainment. This policy says what we store, why, for how long, and what you can do about it. The site is run as a small personal project, not by a company. You can reach us at privacy@trophyatlas.com.

PlayStation profiles

The site shows public PlayStation Network profiles, including profiles of people who never visited Trophy Atlas. This part applies to you if your PSN profile is public, even if you never gave us anything.

What we copy. Your online ID and the IDs you used before, avatar, country, trophy level, trophy counts, the games on your trophy list, which trophies you earned and when. Games you hide on PlayStation are left out when we read your game list. A game you hide later leaves the site the next time we read the list, which happens after your trophy counts change.

Where it comes from. PlayStation Network, which shows this data to anyone while your profile is public. We read it with our own PSN accounts. We do not have your password or access to anything private.

Why. To show trophy progress, game pages, trophy rarity and search, the same service trophy sites have offered for years. Our legal basis is legitimate interest: the data is public on PlayStation, the site uses only trophy data, and you control it from your PlayStation settings.

Search engines. A public profile with 100 trophies or more can appear in Google and Bing, in English only. Smaller profiles and private profiles are kept out of search engines. AI crawlers are asked not to read profile pages.

Leaderboards. Only people who sign up and opt in appear in leaderboards. A profile nobody claimed is never ranked.

How long. We keep a profile while it is public. When PlayStation stops finding a profile, the page keeps the last public data.

How to remove your trophies from the site

Set your trophies to private on PlayStation (Settings, Users and Accounts, Privacy). At its next check, the site sees that the profile is private, removes the trophy data and the page shows only your online ID, avatar and a notice. Checks of a public profile are scheduled at least every 28 days, and can take longer while syncing with PlayStation is paused on our side. If you make the profile public again, the trophies come back at a later check.

We do not take removal requests: the PlayStation privacy setting is the way to leave the site.

Your right to object

You can object to the use of your public PSN profile by writing to privacy@trophyatlas.com. We read every objection. For a public profile, our answer is the privacy setting above, which normally hides your trophies within 28 days. If you think your case is different, tell us why.

Visitors

No tracking cookies. Public pages set no cookies. Your theme choice, brand color and a dismissed language suggestion are kept in your browser’s local storage. They never leave your device.

Traffic statistics. We use Cloudflare Web Analytics, which counts visits without cookies and without following you across sites. Cloudflare keeps these statistics for 6 months.

Server logs. Cloudflare delivers the site and sees your IP address to do so. Our site logs are kept for 7 days.

Profile import requests. When you ask the site to import a PSN profile, we keep a one-way hash of your IP address for 24 hours to limit requests, never the address itself.

Bot checks. The sign-in and profile import forms use Cloudflare Turnstile to tell people from bots. It runs in your browser, and Cloudflare processes only what that check needs.

Store links. When you follow a link to the PlayStation Store from a game page, we count the click with the game, the store region and the page language, without your IP address, cookies or anything else about you, for 13 months.

Searches without results. We keep the searched text, a count and the day, without IP address or any other data about you, for 90 days.

Errors. When a page fails, the error goes to Sentry with the address of the page, without your IP address, cookies or other request data. Sentry keeps errors for 30 days.

Accounts

Signing up is optional. With an account, we store:

• your email address, or the Google or Discord account you sign in with (we receive your email and account ID from them);
• your sessions, with the IP address and browser that started each one, until the session ends;
• the PSN profiles you link, and your settings, such as leaderboard opt-in;
• what you contribute, such as tips, votes and guides;
• the date you accepted the terms;
• what you do in the signed-in area (for example, starting a sign-in or linking a profile), without your email or IP address, to see which steps work and which do not.

Signing in uses a session cookie and a second cookie that only tells our pages you are signed in, both needed for the account to work. Sign-in codes go out by email through Amazon SES, or through Cloudflare when SES fails. To limit sign-in emails, we keep a keyed hash of each email address that asks for a code, never the address, for one day.

Why. To run your account, which is our agreement with you in the terms of use.

How long. While you keep the account, and signed-in area events for 13 months at most. You can delete it in Account, after signing in: we sign you out everywhere and remove your sign-in methods and linked profiles right away, and erase your personal data 7 days later. Signing in again within those 7 days keeps the account. Your contributions and flag disputes stay on the site without your name, since they are licensed to everyone (see the terms).

Who helps run the site

• OVHcloud (United States): the server and database, in Virginia.
• Cloudflare: delivery of the site, caching, statistics, bot checks, backup storage and sign-in emails when Amazon SES fails.
• Amazon Web Services: sign-in emails.
• Sentry: error reports.
• Better Stack: uptime alerts about our own servers, with no data about you.

Data is stored in the United States. Where these providers receive personal data from Europe or the United Kingdom, their data processing agreements use the European Commission standard contractual clauses or the EU-US Data Privacy Framework.

We do not sell personal data and show no ads.

Backups

Backups are kept for up to 30 days. Data deleted from the site leaves the backups within that time.

Children and teens

Accounts are for people 13 or older. Some public PSN profiles belong to minors, and the site cannot tell a person’s age. That is why the same protective setup applies to everyone: no private messages, no ads, no leaderboard without opt-in, and trophy data only.

Parents can make a child’s PSN profile private in the PlayStation settings or through PlayStation family management, and the site hides the trophies at the next check. If we learn that an account belongs to someone under 13, we delete it. Write to privacy@trophyatlas.com if that is the case.

Your rights

Depending on where you live, you can ask for a copy of your data, a correction, deletion of your account data, or a limit on how we use it, and you can object as described above. With an account, you can download a copy of your data once a day and delete the account yourself in Account. For anything else, or if you cannot sign in, write to privacy@trophyatlas.com. We answer within one month. You can also complain to the data protection authority where you live.

Changes

The date at the top shows the last change. When a change matters to account holders, we will say so on the site.