Privacy

The short version

Steam Intelligent never sees your Steam password. It reads your public Steam profile and library once per sign-in, holds that snapshot in memory for about 15 minutes, and keeps nothing in a database. There is no account to create beyond signing in through Steam, and nothing here is sold or shared with anyone other than the third parties named below.

What signing in does

"Sign in through Steam" sends you to Steam's own sign-in page, on Steam's domain, using Steam's OpenID login. Steam handles your password entirely — this app only ever receives your Steam ID back from Steam, and verifies that response with Steam directly before trusting it.

What's read from your Steam account

• Your Steam ID and public profile (persona name, avatar, profile URL).
• Your owned games, playtime, and last-played dates.
• Per-game achievement unlock state, when you open a game's page — plus that achievement's rarity across all Steam players, which is not personal data.

All of it comes from the Steam Web API and only for games and profile fields you've made public. If your Steam profile or game details are set to private, that data isn't readable and the app says so rather than showing an empty page.

What's stored, and for how long

• Session cookie — a sealed cookie named steam_session holding only your Steam ID and the time you signed in. It can't be read or edited outside this app, and there is no server-side session store — the cookie is the only copy. It carries a rolling 30-day expiry: signing in refreshes it, 30 days of inactivity ends it.
• Library snapshot — your games, playtime, and achievement data are held in server memory for about 15 minutes so pages load quickly, then re-fetched from Steam. Nothing here is written to a database, and it expires on its own without any action from you.
• Sign-in state cookie — a short-lived cookie (10 minutes) that only exists during the Steam sign-in handshake itself, to confirm the response actually came from that handshake.

Third parties

• Valve/Steam — the source of every piece of library and profile data above, governed by Steam's own privacy policy. Steam Intelligent is not affiliated with or endorsed by Valve.
• Google Tag Manager — loaded on every page, including this one, for basic site analytics. It may set its own cookies; Google's privacy policy governs what it does with that data. There is no in-app cookie preference control today — a browser's own tracking-protection or extension settings are the practical opt-out.
• Vercel — hosts the app and, like any host, sees request-level data (IP address, request logs) in the ordinary course of serving pages.

Removing your data

Signing out clears the session cookie immediately. Because nothing else is persisted — the library snapshot lives only in memory and expires on its own within about 15 minutes — there is no separate deletion request to make; there is nothing left to delete once the cookie is gone and the snapshot has expired.

Questions

Open an issue on the GitHub repository for anything not covered here.