Privacy Policy

Last updated: October 27, 2026

This policy explains what personal data Steam AI Filter (https://steamaifilter.xyz) collects, why, who we share it with, and how you can access, correct or delete it. Contact for privacy requests: support@steamaifilter.xyz.

1. Data we collect

• Account data (only if you create an account): your email address, a salted hash of your password (we never store the password itself), your scan credit balance and the date you signed up.
• Purchase records: order ID, amount, number of credits and date, received from our payment provider. We never receive or store your card details.
• Wishlist scans: the Steam ID you scanned, the number of games and the time of the scan. We do not store the list of games on your wishlist.
• Session cookie: one strictly necessary cookie (sid) that keeps you logged in for up to 30 days. We use no advertising or tracking cookies.
• Technical data: our hosting provider processes IP addresses and request logs to deliver the site and protect it from abuse.

Checking a single game does not require an account and does not store any personal data.

2. How we use it

• to provide the Service: log you in, run scans, add and deduct credits (performance of a contract);
• to process purchases, refunds and keep accounting records (legal obligation);
• to answer support requests and prevent fraud and abuse (legitimate interest).

We do not sell your personal data and do not use it for advertising.

3. Who we share it with

• Waffo (Waffo.com Limited), our merchant of record, processes payments. When you buy, you give your payment details directly to Waffo under its own privacy policy.
• Cloudflare hosts the Service and its database.
• Steam (Valve): to check games and wishlists we request public data from Steam. We send the game ID or Steam ID you entered, nothing else about you.

We may disclose data if required by law. These providers may process data outside your country, under appropriate safeguards.

4. How long we keep it

• Account data: until you delete your account.
• Login sessions: until you log out or after 30 days.
• Purchase records: kept for as long as tax and accounting law requires (usually up to 7 years), even after account deletion, but no longer linked to your email.

5. Your rights and how to use them

Depending on where you live (for example under the GDPR, UK GDPR or CCPA), you have the right to:

• Access your data: your Account page shows your email, credit balance and purchase history. For a full copy of everything we hold about you, email support@steamaifilter.xyz.
• Correct it: to change the email on your account, email us from the current address.
• Delete it and close your account: use Delete account at the bottom of your Account page. This immediately and permanently deletes your email, password hash, sessions, credit balance and scan history. Unused credits are lost, so request a refund first if you want one. If you cannot log in, email us and we will delete it within 30 days.
• Export your data in a portable format, object to or restrict processing, and withdraw consent: email us.
• Complain to your local data protection authority.

We answer requests within 30 days and do not charge for them. We may ask you to confirm the request from your account email.

6. Security

Traffic is encrypted with HTTPS, passwords are stored only as salted PBKDF2 hashes, and access to the database is limited to the operator.

7. Children

The Service is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

8. Changes

We will post changes here and update the date above. For material changes we will email account holders.

9. Contact

Privacy questions and requests: support@steamaifilter.xyz.