No passwords at all
You sign in with a six-digit code sent to your email. Codes last about ten minutes, work once, and are kept only in a scrambled form that cannot be turned back into the code. Repeated wrong guesses are cut off.
Security and reliability
Built to be trusted with your library.
GameDock holds the record of your games and what you paid for them, so it is built the careful way. Your store sign-ins never leave your browser, what GameDock holds is private to you and encrypted where it matters, and every change has to pass more than 11,400 automated tests before it reaches you.
At a glance
- No passwords anywhere in GameDock.
- Your store sign-ins stay in your browser.
- The keys GameDock holds are encrypted.
- Your library stays private unless you share it, and your spending always does.
- Every change is tested before it goes live.
01
Your accounts
No password to steal, and your store sign-ins never leave your browser.
Sessions you control
Account › Security lists every browser signed in as you. Sign one out, or all of them, and it takes effect straight away rather than when the session would have expired.
Store sign-ins stay in your browser
The Companion uses the store websites you are already signed in to. Your passwords and sign-in cookies never leave your browser; GameDock receives what the Companion reads, and the limited access keys some stores issue for syncing.
A fresh pass for every job
Each thing the Companion does for GameDock is approved by a single-use pass tied to your account and to that one job, so a pass for one task cannot be reused for another.
02
Your data
Private to you, and yours to take or delete.
Kept apart from everyone else's
Everything you own is stored against your account. Automated tests call every part of GameDock as a different account and check it can reach nothing of yours, and any database query that forgets which account it is for fails the build.
Encrypted where it matters
The few access keys GameDock does hold, for PlayStation, Xbox, GOG, RetroAchievements and SteamGridDB, are encrypted with AES-256, each one locked to the record it belongs to so it cannot be moved to another.
No card details, ever
Payments are handled entirely by our payment provider; GameDock never sees your card. It even drops the card digits Steam prints on its receipts, keeping only what a game cost.
Yours to take or delete
Export everything whenever you like. Disconnect a store and erase what it added, or delete your account and everything in it, immediately, yourself.
03
The service
Built so that one mistake is not enough.
A private network
The database and cache are not reachable from the internet at all, and everything travelling between them and GameDock is encrypted, as is everything they store.
Only the access each part needs
GameDock reads and writes your data through an account that cannot change or delete the database's structure, and each part of the service can reach only what its own job requires.
Guarded at the edge
Every request passes a web application firewall that blocks known attacks and limits how fast anyone can try to sign in. Every page carries modern browser security protections.
Errors that give nothing away
When something goes wrong, you see a plain message and a reference number. The details stay in our logs, never in the page.
Signed downloads
GameDock Companion and GameDock Helper are signed when they are built, and each download is published with a checksum and a signature you can check against our public key.
Email you can trust
GameDock's email is signed and authenticated, so a message pretending to be from GameDock fails the checks your email provider runs.
04
Tested before it reaches you.
A service that holds your library has to keep working the same way tomorrow as it does today. So every change, however small, runs the whole test suite first, and one that fails, or leaves any code untested, does not go live.
- Automated tests
- 11,400+
- Run on every change
- Code covered
- 99.99%
- Or the release stops
- Security checks
- 250+
- Each one blocks a release
- Test layers
- 4
- From single functions to a real browser
01
Every function
Thousands of small tests check each piece of logic on its own: how a price converts, how achievements merge, how a purchase is matched to a game.
02
Every screen
Each page and control is rendered and used as you would use it, including the error messages you should rarely see.
03
A real database
Integration tests run against a real database with every change to its structure applied, and check that each account can reach only its own data.
04
A real browser
End-to-end tests drive a real browser through a production build of GameDock, with the Companion loaded as a real extension, cut off from the internet so nothing outside can affect the result.
Alongside them, more than 250 security checks look at GameDock itself: that every part of it asks who you are before showing anything, that no database query can forget whose data it is reading, and that nothing reaching the web can reveal how it works inside. The tools GameDock is built with are pinned to exact versions, and a release stops if any of them has a known serious flaw.
Found a problem?
If you think you have found a security issue in GameDock, please tell us at support@gamedock.co or through the contact form before sharing it anywhere else, and we will look into it straight away. For what GameDock stores and why, see what we store and the privacy policy.
Bring your games together, safely.
Create your account in a minute and connect the stores you use. Free for your whole library, and no card needed.