Privacy
What this site stores, why, how long it keeps it, and how to have it removed. Effective 10 November 2026.
The short version
Reading this site stores nothing about you. Sending a report, voting in the queue, uploading a crash log or signing in with Patreon each store the specific things listed below, and nothing beyond them. There are no analytics, no tracking cookies and no third parties watching these pages.
The uncomfortable detail, stated rather than buried: your IP address appears inside a rate-limit counter in our database for up to a day, because that is how the counter stops abuse. Nothing else keeps it.
What is stored, line by line
Just visiting
| What | Why | How long |
|---|---|---|
| Nothing, for simply reading the site | There is no analytics service, no tracking pixel, no advertising and no third-party script on these pages. | — |
| An IP address inside a rate-limit counter | To stop one machine hammering a form or the sign-in endpoints. The counter's key contains the address. | Deleted by the daily job once the counter is over a day old. |
| Ordinary server logs at our host | Vercel records requests (address, path, user agent) to run the service. We do not add to them or export them. | Vercel's own retention, not ours. |
When you send us something
| What | Why | How long |
|---|---|---|
| A compatibility report you send | The title, the status, the console model, the Greenhouse version, your notes, and a handle if you choose to give one. This is the point of the database and it is published. | Until you ask us to remove it. |
| A queue request or vote | The title, and — for a vote — a keyed hash of your IP address so one browser cannot vote twice. The address itself is never stored, and the hash cannot be turned back into it. | As long as the request is on the queue. |
| A crash report you upload from the console | The log text, the title name, the Greenhouse version and the console model. It is uploaded only when you press the button and confirm; the console removes account names, file paths and anything key-shaped from the log before it leaves your console. | Until you ask us to delete it. Only we can read it. |
If you take out a membership
| What | Why | How long |
|---|---|---|
| Your Patreon user id and membership state | Whether a pledge is active, which tier, the amount, and when we last checked with Patreon. This is what entitlement is decided from. | Until you ask us to delete it. |
| Your Patreon access and refresh tokens | To re-check your membership without making you sign in again. Encrypted at rest (AES-256-GCM); never written anywhere in the clear. | Replaced on each sign-in; deleted with your record. |
| A hash of each console's device id, and what you call it | To hold your consoles to the membership's device limit, to show them on your account page, and to let you unlink one. The hash is a one-way digest of an id the console generates for itself; it is not a serial number and we never receive one. | Until you unlink the console or delete your record. |
| One row per entitlement token we sign | So a token can be revoked, and so two consoles using one identity can be detected. It holds times, a key id, and the reason it was issued. | Until you ask us to delete your record. |
| Patreon webhook receipts | Patreon tells us when a pledge changes. We keep the event name, the Patreon user id and a hash of the body, so the same delivery is not processed twice. | 90 days. |
| A console sign-in attempt | The code on your TV, a hash of the console's one-time secret, and an expiry, for the few minutes the QR code is on screen. | Deleted a day after it expires. |
What we never collect
- No name and no email address from Patreon — the sign-in asks for your identity and your memberships, and nothing else.
- No payment details, ever. Patreon takes the money; we never see a card, an account number or a billing address.
- No Steam credentials. Your Steam sign-in happens on your own phone, against Steam, and Greenhouse never has your password.
- No list of the games you own or play. The console does not report what you launch, and there is no endpoint here that would receive it.
- No advertising, no profiling, no sale or trade of anything on this page to anyone.
Cookies
Two, both strictly functional, both set only after you choose to sign in. One remembers that you are signed in so your account page can show your consoles. One lasts ten minutes and belongs to the console-linking flow. Both are HTTP-only and signed, neither follows you anywhere, and there is no cookie banner because there is nothing to consent to.
Who else is involved
- Patreon — membership and all payments. Signing in sends you to Patreon and back; their privacy policy covers what they hold, including everything about money.
- Vercel — hosting. Serves these pages and keeps ordinary request logs.
- Neon — the database everything above lives in.
- Steam — your own downloads and sign-in, directly from your console to Steam. Nothing about that passes through us.
Having your data removed
Write to playgreenhouse@proton.me from the Patreon account in question, naming the console and roughly when you sent anything you want removed, and we will delete it. For a membership that means your patron record, your stored Patreon tokens, your consoles and the token log that goes with them. A published compatibility report can be removed, or kept with your handle taken off, whichever you ask for.
Deleting your record ends entitlement, so the consoles linked to it stop being members. That is the same thing as cancelling, and it cannot be undone from our side — you would sign in again as a new record.
You can also ask us what we hold about you, and we will send it back as a file.
Changes
If what is stored changes, this page changes with it and the date at the top moves. Questions go to playgreenhouse@proton.me.