Privacy

GameProof is a wishlist board for Steam indie games. This page says what we hold, why, and how to have it removed.

What we collect

• Your account. Your email address, the display name you enter, and the language you use on the site. We use them to sign you in and to send mail about your games. If you sign in with Google, we also receive your Google name and profile picture.
• A Steamworks read-only key, if you connect one. It is encrypted as soon as it reaches us, and only the sync host on our fixed IP can open it. It never goes into logs, emails or the browser, and we never show it back to you.
• What that key reads. Wishlist numbers and this game's net sales by day (sales are read by default; you can turn that off in the console, which deletes what was read). Numbers appear publicly only after the key is verified and the game is listed, and sales only if you also choose to show them.
• What you write on your game page. The copy, links and contact details you enter. Anything you mark public is public.
• The weekly email. The address you sign up with, its language, and when you confirmed or unsubscribed. An address that does not confirm gets no digest.
• Clicks on our short links. The time, a rough country, whether it looks like a bot, and a visitor hash made with a salt that changes every day. We do not keep the IP address. The detail is deleted after 90 days and only daily totals stay.
• Server logs. Request times and addresses, kept by our hosting provider to debug and to stop abuse.

Cookies and browser storage

We use one cookie to keep you signed in and one to remember your language. Signing in with Google also sets a short-lived cookie for that sign-in. The browser also remembers small choices such as your theme and whether you closed the email bar. We do not use advertising cookies.

Who else handles it

• Valve / Steam, because we read its official API with your key.
• Vercel, which hosts the site, and our database and fixed-IP server providers, which store and sync the data.
• Resend, which delivers our email.
• Google, only if you choose to sign in with it.

We do not sell personal data.

How to change or remove it

• Withdraw a game in the console: the page and the numbers stop being public at once.
• Delete the key or its group in Steamworks: the sync stops.
• Every digest has an unsubscribe link, and it works without signing in.
• To have your account and data deleted, write to the address on the contact page.

Videos we have already published about a game stay up after it is withdrawn, as the terms say. Write to us if something in one is wrong.