Privacy Policy
Steam-Achievements.com ("the site", "we") shows Steam players their achievement progress and compares it with other players. This policy explains what information the site handles, why, and what you can do about it.
What we collect and why
When you look up a profile
When you enter a Steam profile, the site asks Steam's public Web API for that profile's public data: its Steam ID, name and avatar, the games it owns with their playtime, and its achievements with their unlock dates. This only works for profiles whose game details are public on Steam. The site has no sign-in and never sees a Steam password.
From each lookup we keep:
- A lookup record: the Steam ID, the date and time of the lookup, and whether the profile was typed into the search box or opened because your browser remembered it. We use it to count how often the site is used. Repeat lookups of the same profile within 30 minutes count as one.
- A profile summary: the Steam name and avatar, the headline figures (achievements unlocked, completion, rarity score, games with achievements, fully completed games and completion by rarity tier), and the dates the summary was created and last updated. It powers the leaderboards and the rankings shown on each dashboard.
- A cached copy of the dashboard: the game list, playtimes and achievement unlocks it shows, so the next visit loads without asking Steam for everything again. It is replaced when the profile is looked up again and something has changed.
- Games we had not seen before are added to our list of games, with a count of how many profiles own them. That list does not record who owns what.
Anyone can look up any public profile, so a lookup record means someone checked the profile, not necessarily its owner.
Randomly sampled profiles
To compare players with Steam as a whole, rather than only with people who use this site, we sampled a few thousand public Steam profiles at random. For each we keep the same profile summary as above. Sampled profiles appear on the leaderboards with their Steam name and avatar, and are counted, anonymously and in aggregate, in the percentile figures and the per-game statistics. The example profile on the home page is one of them, shown without its name, avatar or Steam ID.
Banned profiles
Profiles we believe used programs that unlock achievements without playing are listed on the Banned players page with their Steam name, avatar, number of unlocked achievements and the reason for the ban.
Usage analytics
We use Vercel Web Analytics to count visits to the dashboard. It sets no cookies and does not store your IP address. It records the page visited, the referring site, your browser, operating system, device type and country, and recognises a returning visitor only by a hash that is discarded after a day.
We also use Vercel Speed Insights to measure how quickly pages load and respond for real visitors. It records the page visited, timing measurements for that page, and your browser, operating system, device type and country. It sets no cookies, does not store your IP address, and collects nothing you type.
Request logs at our hosting providers
The site runs on Vercel (the web pages), Render (the server that talks to Steam) and Supabase (the database). Like any web host, Vercel and Render keep short-lived request logs that include your IP address and the address requested, which for a lookup includes the Steam ID. We use them only to keep the site running and to deal with abuse.
In your browser
If "Remember this profile" is ticked, your browser keeps the profile you entered and its Steam ID in local storage, so the dashboard opens with it next time. It stays on your device. Log out, untick the box or clear your browser data to remove it. The site sets no cookies.
Images from Steam
Avatars, game icons and game artwork load directly from Steam's servers, so Valve receives your IP address, as it does for any page that shows Steam images. Valve's own privacy policy covers that.
Legal basis
Where UK or EU data protection law applies, we rely on legitimate interests (Article 6(1)(f) GDPR): providing the lookup you asked for, running the leaderboards and statistics, keeping the site secure and understanding how it is used. Apart from the lookup records and analytics above, everything we keep is information Steam already makes public.
Who can see it
- Public on the site: the leaderboards (Steam name, avatar and headline figures of looked-up and sampled profiles) and the Banned players page.
- Not public: lookup records, cached dashboards, analytics and logs. Only the site's operator can access them.
- We do not sell data, and we share it only with the service providers named above, who process it on our behalf. They may store it in the United States and other countries.
How long we keep it
- Lookup records: until you ask us to delete them. If we set a fixed retention period, this policy will say so.
- Profile summaries: while the site runs, updated whenever the profile is looked up, or until you ask us to remove them.
- Cached dashboards: replaced on later lookups, or deleted when you ask.
- Browser storage: until you log out, untick "Remember this profile" or clear your browser data.
- Analytics, speed measurements and request logs: for the periods set by Vercel and Render.
Your choices and rights
- Stop future lookups by making your Steam profile or game details private: the site can then no longer read it. Anything we already hold stays until you ask us to remove it.
- Ask for a copy, correction or deletion of what we hold about your Steam ID, or object to our use of it. Contact details for these requests will be added to this page. We may ask you to show the profile is yours, and will reply within one month.
- Complain to the data protection authority where you live, such as the Information Commissioner's Office in the UK.
Children
The site is not directed at children under 13, and Steam itself requires its users to be at least 13.
Changes
We update this page whenever what the site collects changes, and the date at the top shows the latest version. See also the Terms of Use.