Privacy Policy

Last updated: April 2026

What we collect

  • Email address — used only for magic-link sign-in. Never shared, never sold.
  • Display name — shown on your listings and messages.
  • Listing content — descriptions, region, machine tags. Publicly visible.
  • Messages — direct responses to listings. Visible only to the listing owner and the sender.
  • Location preference — if you set a default metro area, we store your chosen city name and coordinates. We never collect your precise GPS location server-side; if you grant browser permission, it stays on your device unless you explicitly save a metro preference.
  • Session token — stored in an HttpOnly cookie. Used to keep you signed in for up to 30 days.
  • Sign-in IP address — we log the IP address used on each successful sign-in to detect and prevent abuse (e.g., multiple accounts from the same source). IPs are not shared externally. Shared IPs (e.g., at an arcade venue) are reviewed by hand before any action is taken.

What we don't collect

  • No tracking pixels, ad networks, or third-party analytics
  • No payment information of any kind
  • No phone numbers
  • No browsing history outside this site

How we use your data

  • Email is used to send magic-link sign-in emails via Resend. We send transactional email only.
  • Listing content is indexed publicly to help operators find each other.
  • Location preference is used to surface local listings first in browse results.

Data retention

Active listings expire after 30 days. Resolved and expired listings are retained for community record-keeping. You can request deletion of your account and associated data by contacting us. Sessions expire after 30 days of inactivity.

Third-party services

  • Resend — transactional email delivery. Your email address is transmitted to Resend to send magic links.
  • ntfy — optional push notifications. If you configure a ntfy topic, GotNexts sends listing update notifications to that topic. ntfy is self-hosted; see ntfy.eldritch.fun for that instance's privacy terms.
  • Google Fonts — the Press Start 2P font is loaded from Google's CDN. This is a standard CDN request; Google may log the request.

Contact

Questions about your data? Reach out via the listings board or file an issue on the project. This is a small, community-run operation — we'll respond.