Privacy Policy

This Privacy Policy describes how SteamSift ("we," "us," or "our") collects, uses, shares, and protects information when you use the SteamSift website and related services (the "Service"). By using the Service, you agree to the practices described in this policy.

1. Who We Are

SteamSift is an independent game discovery service. We are not affiliated with Valve Corporation. For privacy-related questions, contact us at privacy@steamsift.com.

2. Information We Collect

Information you provide

Registration is optional. If you create an account, we collect the username and password you choose (passwords are stored as irreversible hashes), your acceptance of these Terms and this Privacy Policy, and, if you choose to provide it, a recovery email address and related verification status. We do not require payment information for normal use of the Service.

Automatically collected information

When you use the Service, we may automatically collect:

• Browser type, device type, operating system, and language settings
• IP address (which may be truncated or anonymized where supported)
• Pages viewed, links clicked, search queries, and referring URLs
• Session identifiers and, if you are signed in, account authentication cookies
• Approximate location derived from IP address
• Account activity timestamps such as last login and last seen

Feature-related data

If you use optional features, we may store:

• Bookmarked games tied to your anonymous session and/or your account
• Discover likes and swipe history tied to your anonymous session and/or your account
• Cookie consent preferences

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service
• Create and authenticate accounts; send recovery-email verification and password-reset codes
• Remember your bookmarks, likes, and preferences within a session or account
• Understand how visitors use the Service and improve functionality
• Measure performance, diagnose technical issues, and prevent abuse (including suspending abusive accounts)
• Display sponsored image advertisements where enabled and permitted by your consent choices
• Comply with legal obligations and enforce our Terms of Service

4. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on the following bases:

• Contract / steps prior to contract: to create and operate your optional account and provide account features you request
• Consent: for analytics and marketing cookies where required, and for optional recovery email where consent is the appropriate basis
• Legitimate interests: to operate the Service, secure our systems, prevent abuse, and understand aggregate usage, balanced against your rights
• Legal obligation: where we must retain or disclose information under applicable law

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep the Service working, remember your session or signed-in account, and, with your consent, support analytics and advertising. For details on the cookies we use and how to manage them, see our Cookie Policy.

6. Analytics

With your consent, we use PostHog to collect usage analytics. PostHog may process information such as page views, events, device information, and a pseudonymous identifier. You can withdraw consent at any time through the cookie settings on our site. When analytics cookies are disabled, we do not load PostHog for your session.

7. Advertising

With your consent, we may display sponsored image advertisements hosted and served by SteamSift. These ads link to third-party destinations and may be labeled as sponsored. We do not sell your personal information. You can manage marketing cookie preferences through our cookie banner or settings.

8. How We Share Information

We may share information with:

• Service providers who help us host, analyze, email, or operate the Service (such as hosting, storage, analytics, and transactional email providers including Resend for recovery-email verification and password-reset codes)
• Law enforcement or regulators when required by law or to protect rights, safety, and security
• Successors in connection with a merger, acquisition, or sale of assets, subject to this policy

We do not sell personal information as defined by applicable U.S. state privacy laws.

9. Data Retention

Anonymous session and feature data is retained for as long as needed to provide the Service or until you clear cookies or we delete inactive session data. Account data is retained until you delete your account or we delete or suspend it under our Terms. Analytics data retained by PostHog is subject to our configuration and PostHog's policies. Server logs may be retained for a limited period for security and troubleshooting. Email verification and password-reset codes are short-lived and expire automatically.

10. Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Transfers

Information may be processed in countries other than your own, including the United States, where data protection laws may differ. Where required, we rely on appropriate safeguards for cross-border transfers.

12. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access personal information we hold about you
• Request correction or deletion of your information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Receive a copy of your information in a portable format
• Opt out of certain targeted advertising or profiling where applicable

California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. As stated above, we do not sell personal information.

If you have an account, you can delete it from your account settings (password confirmation required), which removes your account credentials, recovery email, and account-linked bookmarks and likes. You may also email privacy@steamsift.com to exercise your rights. We may need to verify your request. You may also lodge a complaint with your local data protection authority.

13. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take steps to delete it.

14. Third-Party Links

The Service links to the Steam store and other third-party sites. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing information to third parties.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when changes were last made. Material changes will be posted on this page. Continued use of the Service after an update means you accept the revised policy.

16. Contact

Privacy inquiries: privacy@steamsift.com