Privacy policy
This is a translation provided for convenience. In case of any discrepancy, the Spanish version prevails.
This website works without accounts or registration. Almost everything happens in your browser and we don't store personal data on our servers except the bare minimum explained here. If anything is unclear, get in touch.
1. Data controller
Alejandro Velasco Perez · alexvelascoperez21@gmail.com. The owner's other details are in the legal notice.
2. Summary
- The questionnaire and the recommendations are calculated in your browser. Your answers never leave it.
- Connecting Steam is optional. We only store your Steam identifier (SteamID) in a cookie in your browser. Your library is requested from Steam at that moment and then discarded.
- Library Battle and Play with friends use public Steam profiles, including those of people who don't use this website. We don't store them. Anyone who doesn't want to appear can exclude their profile with one click or set it to private on Steam.
- There is no advertising, we don't sell data and we don't use third-party cookies.
3. What data we process, why and on what legal basis
Questionnaire, recommendations and history
Recommendations are calculated in your browser from your answers. Your answers, the games you dismiss and the result are kept in the browser's session storage (sessionStorage) so you don't lose your progress if you reload, and they are deleted when you close the tab. The last 10 recommended games (which game, match and date, never your answers) are kept in local storage (localStorage) for the "Your recent games" section and to avoid recommending the same game again. The same applies to the games suggested by "What do we play now?" in Play with friends (only the game, not who was in the group). You can delete them in Your history. None of this is sent to our servers.
If you connect your Steam account (optional)
- How: by signing in on the official Steam website ("Sign in through Steam"), which only confirms your SteamID to us (we never see your password or email), or by typing your profile address, its name, your SteamID or your friend code. In the second case we don't check that the profile is yours: Steam only gives us what the profile owner has made public.
- What we request from Steam: your public name, avatar and profile address, whether the profile is public, and your list of games (the name of each game, minutes played in total and in the last two weeks, and the date of the last session when Steam provides it). Steam may also send us your real name and location if they are public: we discard them without using them.
- What for: to recommend games from your library, to work out your backlog (an estimate: Steam doesn't say whether you've finished a game), to show your library in "My library", to calculate "How much is your Steam worth?" (we add up the current price of your games on the Steam store; it isn't stored) and to use your profile with one click in Library Battle and Play with friends. Your name and avatar appear at the top right.
- What we store: your SteamID, in a signed technical cookie in your browser that the page's code cannot read, for a maximum of 30 days. Your library is not stored on our servers: it reaches your browser, which keeps a summary in the tab's storage for up to 30 minutes (deleted when you close it). "My library" is a personal page that isn't indexed.
- Legal basis: providing the service you request when you connect your Steam account (art. 6.1.b GDPR).
- How to disconnect: "Disconnect Steam" (or "Change profile") in your account menu at the top right, or in My library. This deletes the cookies and the tab's data.
Choosing from your Steam friends
In Library Battle and Play with friends you can pick players from your friends list. This only works with your own session (nobody can request someone else's list) and only if your friends list is public on Steam. We request from Steam your friends' identifiers and, for each one, their public name, avatar, whether their profile is public and whether they are online at that moment. It isn't stored on our servers: your browser keeps it for up to 15 minutes in the tab's storage.
Library Battle
- It compares two public Steam profiles. Whoever creates the battle types in the profiles: the two players don't need to use this website.
- What we request from Steam for each profile: public name, avatar, profile address, list of games with playtime (total and last two weeks), Steam level and number of badges.
- What is shown: the totals for each category, each player's most played game, games in common and a title for each player ("Collector", "Insomniac"…) that sums up those same public numbers with a bit of humour and explains where it comes from ("Has tried 640 games"); it doesn't judge the person. The share link (
/en/battle/…) contains both SteamIDs, and its preview when shared (WhatsApp, Discord…) shows the names, avatars, titles and score. Every time it's opened, the battle is recalculated with the data at that moment. - What we store: nothing on our servers. Your browser keeps your last 6 battles (identifiers, names and score) in local storage, and you can delete them from the page itself. Battle pages are not indexed by search engines.
Play with friends ("What can we all play?")
- It cross-checks the libraries of several public Steam profiles. One person uses it by typing in the profiles; nobody else needs to sign in.
- What we request from Steam for each profile: public name, avatar and list of games with playtime and the date of the last session. For games that aren't in our catalogue we check the type and multiplayer modes on the Steam store (data about the game, not the person), which we keep for 30 days.
- What is shown: the games you all own and, for each one, every participant's hours. The share link (
/en/play-with-friends/…) contains the participants' SteamIDs and the result is recalculated when it's opened. - What we store: nothing about the profiles or the libraries. These pages are not indexed. The games you all own that aren't in our catalogue yet are added to the anonymous game count described below (only the game's Steam number).
- "What do we play now?": with your answers (how many are playing, time, what you fancy and energy) we pick one of those games in common. It's calculated in your browser from the same result, without asking Steam for anything again, and the answers are not stored.
If your profile appears in Library Battle or Play with friends and you haven't used this website
Someone has typed in your Steam profile to compare it with theirs or to find games in common. This information is for you (art. 14 GDPR):
- Who the controller is: the owner of this website (section 1).
- What for: to show the person who asks the comparison of the two profiles (Library Battle) or the games you have in common (Play with friends).
- What data and where it comes from: only what your profile makes public on Steam. We request it from the official Steam API at that moment: public name, avatar, profile address, games with their playtime and, in Library Battle, level and badges. Never private data: if your profile or your games are private, Steam doesn't give them to us.
- Legal basis: the legitimate interest of the person using the website, and our own, in comparing public Steam profiles (art. 6.1.f GDPR). We have weighed it against your rights: we only use data you have made public, we don't store it, the pages don't appear in search engines and you can exclude yourself at any time.
- Who sees it: the person who creates the battle or the group and anyone who receives the link they share. The link contains your SteamID (your profile's public number) and, when shared, the preview shows your name, your avatar and the score. Our hosting provider (section 4) processes it on our behalf.
- For how long: we don't store your data. Every time someone opens the link it is requested from Steam again; the hosting provider's technical logs last a maximum of 24 hours.
- How to object: on Exclude my profile you sign in with Steam to prove the profile is yours and, from that moment, nobody will be able to use it on this website (including links already shared). To do this we only store your SteamID on the exclusion list, for as long as you want to be on it (legal basis: handling your objection, art. 21 GDPR). You can also set your "game details" to private on Steam, or write to us to exercise any other right (section 6).
We don't notify you individually because we have no way of contacting you (we don't have your email or any other data apart from the public profile): that is why we publish this information here (art. 14.5.b GDPR).
Security and abuse prevention
So that nobody exhausts access to Steam with thousands of requests, we limit profile searches, battles and cross-checks per connection. To do this we keep, for one hour, a counter linked to an encrypted code derived from your IP address (never the IP itself), which deletes itself. Legal basis: legitimate interest in protecting the service (art. 6.1.f GDPR).
Games not yet in our catalogue
When a library is loaded, or when Play with friends finds games the whole group owns, we anonymously count how many times each game we don't have yet appears (only the game's Steam number, a counter and the date), to decide which games to add. We don't store who it belongs to or any other part of the libraries. Legal basis: legitimate interest in improving the catalogue (art. 6.1.f GDPR); it's data about the game, not the person. Only a random sample of loads is counted, and nothing is stored in your browser for this.
Visit statistics
We use Vercel Web Analytics, from our hosting provider, to count visits in aggregate. It doesn't use cookies or store anything in your browser. It records the page visited, the referring page, the approximate country or region, and the type of device, operating system and browser. To count unique visits it uses a code calculated from the request that is discarded after 24 hours. Before sending the page visited we remove Steam identifiers from the address (battles and groups are recorded as a generic page).
We also count some actions on the website, such as completing the questionnaire, sharing a battle or which game we recommend to you, always with closed options or ranges (never your name, your SteamID or your games).
Legal basis: legitimate interest in knowing how the website is used in order to improve it (art. 6.1.f GDPR). If we add another analytics tool, we will update this policy beforehand.
Contact
If you write to us at alexvelascoperez21@gmail.com, we use your email and whatever you tell us only to reply to you. Mail is received in a Gmail (Google) account. We keep the message until your query is resolved and then delete it. Legal basis: your consent when you write to us (art. 6.1.a GDPR).
Technical data
Like any website, when you visit it your browser sends technical data (IP address, browser, page requested) to our hosting provider, which logs it for security and for the service to work. Those logs are kept for a maximum of 24 hours.
Images
Game covers and Steam avatars are loaded directly from Steam's servers, so your browser connects to them and Valve may receive technical data from that connection under its own privacy policy.
4. Providers and international transfers
- Vercel Inc. (US): hosting, running the website and visit statistics. Server functions run in the US (Washington D.C.).
- Upstash, Inc. (US): database for the abuse counter (1 hour) and the anonymous game count, hosted in the US (Virginia).
- Valve Corporation (US): Steam. We request public profile data from it and it provides the sign-in. It acts on its own behalf, under its own privacy policy.
- Google: Gmail, if you write to us.
These providers are in the United States, so there are international data transfers. They rely on the safeguards these providers offer under the GDPR (European Commission standard contractual clauses or the EU-US Data Privacy Framework). With Vercel (Pro plan) and Upstash, their data processing agreements apply, which include the standard contractual clauses.
We don't sell or pass on data to third parties for commercial purposes.
5. For how long
- Steam session cookie: 30 days or until you disconnect.
- Abuse counter: 1 hour.
- List of excluded profiles: your SteamID, for as long as you want to be on it.
- Hosting technical logs: a maximum of 24 hours.
- Vercel Web Analytics visit identification: 24 hours (after that only aggregated statistics remain).
- Emails: until the query is resolved.
- What your browser stores: until you close the tab (sessionStorage) or until you delete it (localStorage).
6. Your rights
You can request access to, rectification, erasure, restriction or portability of your data, and object to its processing, by writing to alexvelascoperez21@gmail.com. As we have no accounts and don't store data linked to a person, in practice almost everything is in your hands: disconnecting Steam deletes the cookies, in Your history you delete the recommended games, and on Exclude my profile (or by setting your profile to private on Steam) you prevent others from using it on the website. If you have given your consent (for example, by writing to us), you can withdraw it at any time. If you believe we haven't handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
7. Automated decisions
Recommendations are calculated by an algorithm from your answers and, if you connect Steam, from your library. They are suggestions with no legal effects and nothing that significantly affects you: you can ignore them or ask for another.
8. Minors
The website is for a general audience: it isn't aimed at children under 14 and doesn't ask for age. If you are under 14, don't connect your Steam account or use Library Battle or Play with friends without permission from your parent or guardian (in Spain, below that age their authorisation is required: art. 7 of Organic Law 3/2018). The questionnaire and the catalogue can be used without giving any data. If you are a parent or guardian and want us to delete something, or want your child's Steam profile not to be usable here, write to us or use Exclude my profile.
9. Changes
If we change what the website does with your data (for example, if we add advertising or a tool with cookies), we will update this page and the date at the top and, where the law requires it, ask for your consent beforehand.