Privacy Policy
Last updated: May 17, 2026
SteamVault (“SteamVault”, “we”, “us”) is a free achievement-tracking service built on top of the public Steam Web API. This policy explains what data we handle, why, and how to get it removed.
1. What we collect
Steam profile data. When you sign in with Steam, Steam shares your SteamID64, persona name, avatar URL, profile URL, and (if public) country code. We use this to display your profile and identify your session.
Public Steam game data. For any SteamID we look up, we read the publicly available owned-games list, playtime, achievements, and global achievement statistics from the Steam Web API. If your Steam profile is private, no game data is available to us.
Session cookie. When you sign in we set a cookie named sv_session containing your SteamID, persona name, and avatar. It is HMAC-signed and expires after 7 days.
Forum and suggestion content. Posts, replies, and votes you submit are stored associated with your SteamID and persona name.
Aggregate counts. We maintain a global member counter and leaderboard sorted sets that include SteamID, persona name, avatar, country code, and your computed stats.
What we do not collect. No email addresses, no passwords, no payment data, no real names beyond what your Steam persona shows publicly.
2. How we use it
We use the data above solely to operate SteamVault — to build your profile page, render leaderboards, power comparisons, detect achievement rarity, and run the forums and suggestion board. We do not sell data and we do not share it with advertisers beyond standard analytics if and when enabled (see Section 5).
3. Where it is stored
Computed profile and leaderboard data is cached in Upstash Redis (EU/US region). The application runs on Vercel (US). Steam game data is fetched live from Valve's Steam Web API on each profile build.
4. Cookies
SteamVault sets a single first-party cookie: sv_session, used to keep you signed in. We do not use tracking cookies. If we enable analytics or advertising in the future, this page will be updated and consent requested where required.
5. Third parties
SteamVault interacts with the following services to operate:
- Steam Web API (Valve Corporation) — to read your public Steam data.
- Upstash — to cache leaderboards and computed profiles in Redis.
- Vercel — to host the application and serve pages.
- Ko-fi — if you choose to donate, you interact directly with Ko-fi; we do not see your payment data.
If we enable Google AdSense or analytics in the future, those vendors will be listed here and the relevant disclosures added.
6. Your choices
To remove your profile and any cached data from SteamVault, email dewald.schoonbee911@gmail.com from the email associated with your Steam account or include your SteamID64. We will purge your record within 30 days. You can also sign out at any time to clear the session cookie.
Because we only display data Steam itself exposes publicly, changing your Steam privacy settings will also affect what SteamVault can show.
7. Children
SteamVault is not directed at children under 13 and we do not knowingly collect data from them. If you believe a minor has signed in, contact us and we will remove the record.
8. Changes
If we make material changes to this policy we will update the “Last updated” date and, where appropriate, surface the change in-product.
9. Contact
Questions or removal requests: dewald.schoonbee911@gmail.com