Privacy policy
The short version: XP Locker collects only what it needs to run your Locker, shows nothing you haven't chosen to share, never sells your data, has no ads and no tracking, and you can download or delete everything at any time.
Last updated 11 November 2026
Who is responsible for your data
XP Locker (xplocker.com) is an independent project based in the United Kingdom. Whoever runs it is the "controller" of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). To ask anything about your data, use the contact page and choose "Privacy or my data".
What we collect
| What | Why |
|---|---|
| Account: your gamertag, a scrambled (hashed) version of your password, and when you joined. We never store your actual password, and we don't ask for your name or email to sign up. | To give you an account and keep it secure. |
| Your Locker: the games, consoles and accessories you add, your wishlist, ratings, reviews, play status, notes, tags, condition, prices paid, values, favourites, chosen systems and XP. | This is the service itself. |
| Social: who you follow, your activity posts, GGs, comments, and gifts you mark "I'm getting this". | To run the feed, follows and gift wishlists. |
| Contact messages: what you send through the contact page, plus a name and email if you give them. | To reply to you. |
| Security data: your IP address, held for up to an hour to limit repeated failed log-ins and contact messages. Our web host also keeps standard server logs. | To protect accounts and stop abuse. |
Cookies and storage on your device
XP Locker uses one cookie, xplsess, which keeps you logged in. It is essential, so no cookie banner is needed. There are no advertising or analytics cookies and no tracking of any kind.
The app also saves a copy of your Locker and a few settings (like your Locker filters) in your browser's own storage, so it works offline and loads quickly. This stays on your device.
What other people can see
Your gamertag, level and XP are public. Your collection, wishlist and activity are visible according to your Privacy & friends settings on your Profile: Everyone, Friends only or Only me. Reviews you write appear on each game's page. What you paid for games is never shown to anyone else.
Who we share data with
We never sell your data or share it for advertising. Some services help run XP Locker:
- Our web host stores the site and its database on our behalf.
- IGDB (Twitch) provides game details and cover art. eBay and CheapShark provide prices. The server only sends them game names, never anything about you.
- Google Fonts, plus the code libraries for the barcode scanner (unpkg) and TV scanner (jsDelivr), are loaded from those providers, which means they see your IP address. The scanner libraries only load when you use them.
- YouTube trailers use YouTube's privacy-enhanced mode and only load when you press play.
- Steam: if you import your Steam library, your Steam profile ID is sent to Steam to read your public game list.
- Shops: when you follow a link to Amazon, eBay, CeX, Vinted or a game store, that site's own privacy policy applies. Some links are affiliate links, which can let the shop know the visit came from XP Locker.
Why we're allowed to use it
We use your data to provide the service you signed up for (contract), to keep it secure and improve it (legitimate interests), and to reply when you contact us (legitimate interests). We'll ask for consent before doing anything else.
How long we keep it
Your account data is kept until you delete your account. When you do, it's removed from the live database straight away. Copies in our backups are overwritten within 30 days. Contact messages are kept for up to 12 months.
Your rights
You can, at any time:
- Get a copy of your data: Profile → Your data → Download my data (all of it, as a file) or Export CSV (your collection, in a format Gameye and spreadsheets understand).
- Correct it: edit anything in your Locker directly.
- Delete it: Profile → Your data → Delete my account. This permanently removes your account, Locker, reviews, comments and follows.
- Object or restrict how we use it, by contacting us.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Children
XP Locker is for people aged 13 and over. If you're under 13, please ask a parent or guardian to help. If we learn an account belongs to someone under 13, we'll delete it.
Changes
If this policy changes in a way that matters, we'll say so on the site. The date at the top shows when it last changed.