Privacy

What we collect and why

When you compare libraries

You give us Steam profile links, SteamID64s or custom URL names. We use the official Steam Web API to fetch the public data for those profiles — display name, avatar, owned games, playtime, recently played games and wishlist — and compare them. We don't save those libraries; Steam responses are held in server memory for up to an hour so repeat requests are fast, then discarded. We do keep public store information about games (genres, categories, price) to power filters.

When you sign in through Steam

Sign-in happens on Steam's website; we never see your password. Steam tells us your SteamID64, and we store it with your display name, avatar and custom URL. If you use them, we also store your profile customizations, collections, saved groups, your plan status and — if you link the Discord bot — your Discord user ID.

Share links and votes

A share link stores the SteamID64s in that comparison and a summary (names, avatars, counts and a few game titles) so the link and its preview card work. A vote stores a random voter ID kept in your browser, the name you type (optional) and your choices.

Payments

Subscriptions are processed by Stripe. We receive a customer ID, subscription status and renewal date; your card details and billing email stay with Stripe. Older Ko-fi payments: we store the Ko-fi transaction ID, amount, tier, supporter name, email and message so we can match the payment to your account.

Analytics

We count product events (for example "comparison started" or "vote cast") with a random browser ID, the page path, the referring website's domain and campaign tags. No Steam IDs, names or IP addresses are stored with these events. We also use Google Analytics, which sets cookies to measure visits.

Cookies and browser storage

• wbp_session — keeps you signed in (30 days, HttpOnly).
• steam_nonce, wbp_next — protect the sign-in round trip (10 minutes).
• Local storage — your random analytics ID, recent groups, layout preference and voter name.
• Session storage — your shortlist and where this visit came from.
• Google Analytics cookies (_ga and similar).

Who processes data for us

Valve (Steam Web API, sign-in), Vercel (hosting), Supabase (database), Stripe (payments), Ko-fi (legacy payments), Google (analytics) and Discord (the bot). We don't sell or rent personal data, and we don't use it for advertising.

Where data is stored

Our database and servers are in the United States.

How long we keep it

• Account data: until you ask us to delete it.
• Share links and votes: until you ask us to remove them.
• Analytics events: 13 months.
• Payment records: as long as tax and accounting rules require.

Your choices

You can ask us to export or delete your data, unlink Discord, or remove a share link: email trentonsmith608@gmail.com. You can also make your Steam game details private at any time — we'll then be unable to read them.

Children

WeBothPlay isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll update the date above and mention it on the site.