Skip to content

Privacy

Last updated 25 August 2026

TheGameCurator is built to forget you. Browsing, answering the questionnaire and getting recommendations require no account and store nothing about you: close the tab and it is gone.

There is exactly one exception, and it only exists if you ask for it. Connecting a Steam account creates a record so your Play Later list survives across devices. That is described in full below, and you can delete it yourself at any time.

What stays in your browser

  • Your answers. Platform, source, budget, duration, vibes, genres and mode are held in sessionStorage. They are deleted by your browser when the tab closes.
  • Your cookie choice. If you set one on the cookie policy page, a single entry in localStorage records it. Your answer about advertising is not kept here — Google stores that one itself, in its own consent message.

Neither is a cookie in the transmitted sense: nothing is attached to requests, and nothing leaves your device on its own.

What the server does

The server acts as a proxy to Steam. When you ask for recommendations it forwards your filters, fetches public store data, scores it, and returns five titles. That work happens inside a single request and leaves nothing behind.

  • Public store data (titles, prices, genres, Deck ratings) is held in a short-lived in-memory cache to stay inside Steam's rate limits.
  • Account data is never cached. If you link a Steam profile, the owned-games list is fetched per request, used to rank, and discarded.
  • If you are not signed in, your SteamID is not written to any log, file or database by the application.

Linking a Steam profile

Linking is optional and only reads what Steam already publishes: your persona name, avatar, and the list of games on a public profile. If the profile or its game details are private, nothing is read and the app tells you how to change it. You can unlink at any time by clearing the field, or by closing the tab.

If you connect a Steam account

This is entirely optional. Nothing on this page changes unless you press Connect with Steam.

Sign-in uses Steam's own OpenID service. You authenticate on Steam's site, we never see your Steam password, and Steam tells us only your numeric SteamID. We then read your public persona name and avatar so the interface can show who is signed in.

What is stored once you are signed in:

  • An account record holding your SteamID, persona name and avatar URL. It has no email address behind it — a placeholder address derived from your SteamID is used internally, at a domain that cannot receive mail.
  • Your Play Later list: the Steam app ID, title, artwork URL and store link of each game you save, with the date you saved it.
  • A session cookie, so you stay signed in between visits. This one is strictly necessary for a feature you asked for, and is set only after you sign in.

This data lives in Supabase (PostgreSQL hosting), which acts as our data processor. Access is enforced at the database level: policies attached to the table make it impossible for one signed-in account to read or change another's list.

We never receive your library, playtime, friends or purchases through sign-in, and we do not post anything to Steam on your behalf.

Third parties

  • Valve / Steam. Requests to Steam are made by our server, not your browser, so Steam does not see your IP address. Store artwork, however, is loaded directly from Steam's CDN by your browser.
  • Google Fonts and Fontshare serve the two typefaces. Your browser contacts them to fetch the font files.
  • Supabase stores accounts and Play Later lists, and only if you have connected a Steam account. It is not contacted at all otherwise.
  • Google AdSense, which pays for this site, together with Google's consent platform and its ad-fraud checks on adtrafficquality.google. The AdSense library loads on every page, because it is what delivers Google's consent message — but no advertising cookie is set, and no ad is served, until you have answered that message. Google is an independent controller for everything it collects; we never see it. The cookie page sets this out in full and can reopen the message.

Your rights

If you have never connected a Steam account, no personal data is stored and there is nothing to export, rectify or erase — closing the tab is a complete deletion.

If you have connected one, the data listed above is personal data and you have the usual rights over it: access, rectification, erasure, restriction, objection and portability. Signing out ends the session; to have the account record and Play Later list deleted outright, contact the operator of this deployment. Removing every game from your list deletes those rows immediately.

Not affiliated with Valve

TheGameCurator is an independent project. Steam and the Steam logo are trademarks of Valve Corporation.