Privacy

Making a receipt

When you ask for a receipt, we look up that profile through the official Steam Web API: the display name, and the list of owned games with playtime. Only public profiles work. We don't store any of it. Steam responses are cached on our servers for up to an hour, and finished card images may be cached by our hosting provider (Vercel) for up to a day.

Card links like /r/<id> are public: anyone with the link sees the same card.

Monthly receipts (only if you opt in)

If you click “Track me”, we store your SteamID, Steam display name, avatar link, the email you entered, and a daily snapshot of your owned games and playtime. We use these only to build your monthly and yearly receipts. The data is held in a Supabase database in the US until you delete it.

Analytics

We count anonymous events, such as a card being generated, downloaded or shared, using PostHog (US). It sets no cookies and stores nothing on your device, and we never send it your email or SteamID.

Abuse protection

To keep the site fair and protect our access to Steam, we count how many requests each visitor makes. For that we keep a scrambled, one-way code made from your IP address (never the address itself) with our provider Upstash, for up to two hours.

Error reports

If something breaks, a report goes to Sentry (US) so we can fix it: the error, the page it happened on, and your browser and device type. We strip SteamIDs and emails from these reports and don't send your IP address.

Delete my data

Enter the profile and the email you signed up with. This immediately deletes the profile and every saved snapshot.

Questions, or someone else signed up with your profile? Email hello@playtab.app.

Playtab is not affiliated with Valve. Data from the Steam Web API.