Privacy Policy
Last updated 14 October 2026
steampeek is an independent project, not affiliated with Valve Corporation. It tracks public Steam data — player counts, chart ranks, reviews, followers — and most of that is about games, not people. This page covers the data that is about people: you, if you use steampeek, and a few groups who never signed up, described further down.
Who is responsible
steampeek is built and run by an independent developer, who decides how this data is used. For anything about your data — a copy, a correction, deletion, an objection — write to support@steampeek.app. We answer within 30 days, usually much sooner.
If you use steampeek
| Data | Why | Kept |
|---|---|---|
| Email address and sign-in method | To create your account and sign you in. We send it nothing but sign-in, account and billing mail. | Until you delete the account |
| Plan and subscription status | To decide what your account can open. Creem tells us your plan, its status and renewal date — never your card. | Until you delete the account |
| Watchlist | The games you chose to follow. | Until you remove them |
| AI usage | Which AI reports and audience scans you ran, to count your monthly credits. | Until you delete the account |
| API keys and API usage | If you create API keys (Studio): each key's name, a hash of it (never the key itself) and a short hint, when it was last used, and how many calls and units it used per endpoint each day, to enforce your limits and show you your usage. | Until you delete the account |
| Usage analytics | Which pages and features get used, so we know what to fix and build. Includes session recordings with everything you type masked. | Up to 12 months |
| Server logs | Requests our hosting records automatically, for debugging and stopping abuse. Includes IP address. | Days, set by Vercel |
We do not sell data, we do not run advertising, and we do not build profiles for anyone else.
People who never signed up
Steam reviewers. AI review reports read a game’s public Steam reviews: the text, the verdict, the playtime and the reviewer’s Steam ID, exactly as Steam publishes them. Audience insights, a Studio feature, go one step further for a sample of a game’s reviewers: from Steam’s public Web API they read what a public profile shows — the country set on it, when the account was created, how many games it owns, and which games it owns and for how long they were played. Private profiles return nothing and are skipped.
We use this only to describe a game’s audience in aggregate — what share of reviewers also play a genre, which countries they come from. Reports show statistics and quote public review text; they do not show profile details or build a picture of any one person. The data stays until the game’s report is refreshed (which replaces it) or until you ask us to remove it. If you are a Steam user and want your reviews or profile left out, send us your Steam ID or profile link and we will delete what we hold and exclude you from future scans.
Game studios and publishers. We sometimes email a studio at the business contact address it lists publicly on its Steam store page, to tell it about steampeek. We keep the address, the game it was listed on and our conversation. Reply “stop” or write to support@steampeek.app and we will not email you again; we keep the address on a do-not-contact list only so that it stays that way.
Cookies
Sign-in cookies keep you logged in. They are strictly necessary, so they are set without asking; if you block them you cannot sign in.
Analytics cookies are set by PostHog when you use the site, so we can see which pages and features get used. They hold a random identifier, not your name. You can block them with your browser’s cookie settings or any content blocker — the site works the same either way — and you can email us to have what was already recorded deleted.
Who processes it
- Vercel — hosting; serves every page and keeps request logs.
- Supabase — the database and accounts, hosted in the EU (Ireland).
- Upstash — rate limiting: short-lived request counters keyed by your IP address, your account id or, for API calls, your key’s id. They expire within about two hours.
- PostHog — product analytics and session recordings, on its US cloud.
- Creem — payments. Creem is the merchant of record: it collects your billing details and handles them under its own privacy policy.
- Anthropic — the AI model behind review reports and audience summaries. It receives public review text and aggregated audience statistics — never your account details — and does not train on them.
- Google — sign-in, only if you choose “Sign in with Google”; and our email (support and studio outreach run on Google Workspace).
Some of these providers are based in the United States. Where data leaves the EU, EEA or UK, the transfer is covered by the provider’s standard contractual clauses or the EU–US Data Privacy Framework.
Why we are allowed to
Your account, plan, watchlist, AI usage and API usage are processed to provide the service you signed up for. Analytics, server logs, the review and audience analysis and studio outreach rest on our legitimate interests — running, securing and improving steampeek, and describing public Steam data — which we weigh against yours: the data involved is public or minimal, it is used in aggregate, and you can object at any time.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to any of the processing above. Write to support@steampeek.app and we will answer within 30 days. If you are in the EU, EEA or UK you can also complain to your national data protection authority.
Children
steampeek is not aimed at children under 16 and we do not knowingly collect their data.
Changes
If this policy changes in a way that affects you, the date at the top changes, and paying subscribers get an email before a material change applies. Questions go to support@steampeek.app.
