Privacy Policy

Last updated: April 11, 2026

What we collect

SteamLaunch collects only what is needed to provide the service:

  • Account info from your OAuth provider (email, name, avatar)
  • Project data you enter (game name, genre, launch date, goals, wishlist counts, content items)
  • Usage data (pages visited, features used) for improving the product

What we do NOT collect

  • Passwords (authentication is handled by Google, GitHub, or magic link)
  • Payment information
  • Steam credentials or API keys
  • Game source code or builds

Cookies

SteamLaunch uses cookies strictly for:

  • Authentication session (Supabase auth token)
  • UI preferences (sidebar state, theme)

We do not use analytics cookies, tracking pixels, or advertising cookies. No data is shared with ad networks or data brokers.

How we store it

All data is stored in Supabase (PostgreSQL) with Row Level Security enabled. Each user can only access their own data. Data is encrypted at rest and in transit. Supabase infrastructure is hosted on AWS in the United States.

Third-party services

We use the following services to operate SteamLaunch. Each processes data only as needed to provide its function:

  • Supabase (authentication and database)
  • Vercel (hosting and serverless functions)
  • Resend (email notifications, if enabled)
  • GitHub API (optional, for docs integration, only if you connect it)

API access

If you generate an API token in Settings, third-party AI assistants (such as Claude or Cursor) can access your SteamLaunch data on your behalf via the MCP protocol. Only you control this access, and you can revoke the token at any time. We do not share your data with any AI service without your explicit action.

Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data (right to be forgotten)
  • Port your data to another service
  • Object to processing of your data
  • Restrict processing in certain circumstances

To exercise any of these rights, contact us at privacy@steamlaunch.dev. We will respond within 30 days.

Data retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days. Backup copies may persist for up to 90 days before being purged.

Data deletion

You can delete your account and all associated data at any time from Settings. You can also request deletion by emailing privacy@steamlaunch.dev.

Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected in the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance.

Contact

Questions about privacy? Reach out at privacy@steamlaunch.dev