Privacy Policy

the operator of SteamRadar is responsible (the "controller") for the personal data processed through SteamRadar, its apps and its API. Write to us through the contact form for anything about your data.

We store your e-mail, name, a hash of your password, what you follow, the messages you send and receive, your credits and purchases, and your referral relationships. Other members see your name, the profiles and studio games you verified, and the other games attached to your profile (marked as not verified) — never your e-mail address.

If you sign in with Steam, or verify a profile by signing in with Twitch or Google, we receive only the account id and the public profile details needed for that. If you use our iOS or Android app and allow notifications, we store your device's notification token.

We also keep a hash of the devices you sign in from, to warn you by e-mail about a sign-in from a new device.

Your public profile — name, username, bio, website and profile picture, your verified games and channels, your posts with their images, comments, likes and shares, who you follow and who follows you — is visible to everyone on SteamRadar. Members you chat with see when you are online and when you are typing. You can edit or delete these at any time; deleting your account removes them.

Messages are stored so that both sides can read them in their inbox. Messages that a recipient reports can be read by our team to stop abuse.

When you open a support ticket or write to us through the contact form, we keep your name, e-mail address and what you write, and use them only to answer you.

Payments are handled by Stripe; we never see or store card numbers. We keep the amount, the credits bought, the status and Stripe's payment reference, and — for affiliates — commissions and payout requests.

To see which pages and searches are useful we log each request without your IP address: a visitor is a hashed id that changes every day, two first-party cookies remember only the date of your first visit and where you first came from (a referring site, campaign or affiliate link), and referrers keep their domain only. These raw request logs are deleted after 30 days; only daily totals are kept.

For YouTube channels and Twitch streamers who cover games we list public profile data (name, follower counts, country, links, videos and streams about games). For Steam games we list the studio and its public links. We also record the business contact address that creators and studios publish themselves (YouTube About page, Twitch bio, Steam store page, their website or press kit).

We do not sell, show or share those addresses — with anybody, in any form. Members reach creators and studios with SteamRadar messages. We use an address only to deliver those messages to its owner: each message is e-mailed in full, with the sender's name, a link to read and reply after a free sign-up, and a one-click unsubscribe. A profile's owner can also claim it to receive messages directly in an account.

We do this on the basis of legitimate interest — helping game studios, publishers and creators find each other for business — limited to contact details that the creators and studios published for business requests themselves.

Every e-mail we send has an unsubscribe link: one click and we never e-mail that address again, and members can no longer message the profiles that list it (waiting messages are cancelled). You can also ask with the form below: so that nobody can switch off someone else's profile, we confirm through the contact address on file. Members who receive unwanted messages can report them and block the sender.

• Contract — to run your account, deliver your messages, sell and count credits, and pay affiliate commissions.
• Legal obligation — to keep payment and tax records.
• Legitimate interests — security and abuse prevention, usage statistics without IP addresses, answering support requests, and listing the public business contacts of creators and studios.
• Consent — where we ask for it, for example app notifications; you can withdraw it at any time.

We share data only with providers that help us run SteamRadar, under contracts that oblige them to protect it:

• Amazon Web Services — servers, database and e-mail delivery.
• Stripe — payments (Stripe's privacy policy).
• Google / YouTube API Services — public YouTube channel and video data, and Google sign-in (Google Privacy Policy).
• Twitch — public stream data and Twitch sign-in.
• Valve / Steam — game data and Steam sign-in.

We do not sell personal data, and we do not use advertising or third-party tracking cookies.

Some of these providers process data outside the European Economic Area, for example in the United States. Those transfers are covered by an adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission's standard contractual clauses.

SteamRadar uses only its own (first-party) cookies:

• steamradar — keeps you signed in and protects forms; deleted when you log out or close the session.
• sr_lang — remembers the language you chose; 1 year.
• sr_seen — the date of your first visit, for visitor statistics; about 13 months.
• sr_src — where you first came from (a referring site, campaign or affiliate link); 30 days.
• pr_ref — the affiliate link you arrived through, so the referrer gets credit; 30 days.
• pr_cc — the Steam store region you picked for prices; 6 months.
• pr_flash — a one-time notice after an action ("Message sent"); 1 minute.

You can delete cookies in your browser at any time; without the session cookie you cannot stay signed in.

• Account data — as long as your account exists. Deleting it removes your profile, follows, alerts, claimed profiles, keys, sessions and support tickets.
• Messages — stay with their recipients after you delete your account, shown as from "Former member".
• Posts, images, comments, likes and follows — until you delete them or your account.
• Payment and payout records — as long as tax and accounting law requires.
• Contact-form conversations — as long as needed to answer you, or until you ask us to delete them.
• Creator and studio data — while the profile is public and relevant. After an opt-out we keep only a one-way hash of the address, so that we never e-mail it again.
• Raw request logs — 30 days; after that only daily totals are kept.

You can ask for a copy or deletion of your data at any time. Delete your account yourself in Dashboard → Settings → Delete my account: it removes your profile, follows, alerts, claimed profiles, keys and sessions; messages you sent stay with their recipients as from “Former member”, and payment records are kept as long as the law requires.

You also have the right to have your data corrected, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent you gave. Ask through the contact form; we answer within one month. You can also complain to the data protection authority of the country where you live or work.

Passwords are stored only as hashes; sign-in, reset and confirmation links are single-use and stored as hashes too. All traffic is encrypted (HTTPS), and only the people who run SteamRadar can access the database.

SteamRadar is not meant for children under 16. If we learn that an account belongs to a child, we delete it.

The date at the top shows the latest version. If we change how we use personal data in a way that matters, we will tell members by e-mail before the change applies.

Questions, requests or complaints about your data: use the contact form. Members can also open a ticket in Support.