Privacy policy · private testing

What we store

Steam ID and display name, the visible libraries and friend lists you ask us to check, sync status, game preferences, private groups, invitations, votes, sessions, RSVPs, notifications, and any optional discovery or manually entered provider data. Steam sign-in happens at Steam. We never request or store your Steam password. An essential HTTP-only session cookie keeps you signed in for up to seven days.

Who sees it

Your website profile can also store a picture, bio, interests and gaming preferences. Uploaded pictures are resized and re-encoded without image metadata. Public profile visibility is off by default. Enabling it shares these profile fields and your picture with signed-in players. Player following is not offered. Group owners choose whether to publish a searchable group description and recruitment post; private members and plans remain available only to members. Join-request introductions are visible to the group owner. Profile pictures, recruitment posts and requests are removed through account/group deletion cascades.

For username accounts we also store a username, display name, salted scrypt password hash, hashed single-use recovery codes, and temporary sign-in attempt counters. We do not collect an email address. We never store the website password or recovery codes in plain text. Recovery resets the password and revokes existing sessions. Without your password or an unused recovery code, we cannot recover the account.

Selected visible Steam profiles may be compared at a signed-in user’s request. Private group details are restricted to members. Your discovery profile is searchable by other opted-in users only when you enable it. Discovery does not expose your imported Steam library. Blocking hides discovery profiles in both directions and removes connection requests; it does not remove shared group membership or restrict public Steam data.

Services and retention

The server requests data from Valve’s Steam services. Game artwork and the Steam sign-in image load from Steam content servers; those requests expose your network address to those services. We have no advertising, analytics, email reminders, or payment integrations. Library refresh failures retain your last successful import and mark it stale. Friend lists refresh after a successful library sync. Temporary cached Steam profiles may remain until maintenance removes them. Account and group records remain until deletion or a test-data reset. This is a private playtest; we may reset test data as development continues.

Your choices

Change your Steam game-detail visibility in Steam. Remove synced Steam data in Account to clear your stored library and friends; your Steam ID remains the sign-in identity. Delete your account to remove its sessions, preferences, discovery profile, connections, blocks, submitted reports, manual games, votes, RSVPs, notifications, and group memberships. Groups you own and their invitations and sessions are also deleted. Session creations are deleted when their creator deletes their account. Cached public profile data checked by others may be retrieved again at their request.

Backups and requests

Render encrypts persistent storage and its daily disk snapshots at rest. Snapshots are available for at least seven days under Render’s retention policy, so deleted data may remain in backups after active-account deletion. Database recovery requires a consistent SQLite backup and reconciliation with account deletions before reopening access. Independent offsite database backup automation is not yet configured for this private test. Contact the operator for privacy requests. Reported profile IDs can remain in reports submitted by others for moderation.

We are independent of Valve Corporation. Steam data remains subject to Steam API terms.