1. Scope and contact
This Privacy Policy applies to perfectshelf.app and the PerfectShelf service (“PerfectShelf,” “we,” or “us”). Questions and privacy requests may be sent to support@perfectshelf.app or submitted through Contact & support.
PerfectShelf is independent from Valve Corporation and Steam. Steam’s own handling of your information is governed by the Steam Privacy Policy.
2. Information we collect
Steam identity and public Steam Data
When you choose Steam sign-in, Steam returns your SteamID64. PerfectShelf may then retrieve and cache data available for that Steam account through Steam services: profile name, vanity name, avatar and profile URL; owned-game AppIDs and names; playtime and last-played time; achievement eligibility, achievement definitions, icons, rarity percentages, unlock status and unlock times; perfect-game status; and summary statistics derived from those records. The private Achievement Planner stores which eligible in-progress games you choose to track and creates a completed-plan stub for each perfected shelf game. It also stores your sections and ordering, notes, optional YouTube video links, spoiler preference, and game resource bookmarks. Your Steam profile and Game details must be public for a shelf and Planner inventory to build.
Registered contact information and alerts
We collect an email address you provide, its verification status, verification and delivery records, support communications, in-app account alerts, read status, delivery status, and your alert email preferences. Steam does not give PerfectShelf your Steam password or Steam account email.
Referrals and Supporter access
We store referral codes, first-touch attribution, referrer/referee relationships, qualification dates, account activation dates, Supporter grants, revocations, and related audit records. Historical trial and referral reward records remain retained, but those programs are inactive.
Billing records
When paid checkout is enabled, we expect to store provider-generated customer, checkout, transaction, refund and dispute identifiers; purchase dates; amounts and currency; webhook event identifiers and processing state; and an auditable history of Supporter grants. Full payment-card details are entered with and handled by the payment processor. PerfectShelf does not receive or store them.
Cookies, requests and diagnostics
PerfectShelf and Cloudflare process ordinary request information such as IP address, time, route, browser headers, security signals and error diagnostics. We do not use advertising cookies or third-party behavioral analytics.
3. How we use information
- Authenticate Steam profile ownership and build the shelf the owner requested.
- Publish the owner’s selected shelf, achievement galleries and share exports.
- Maintain the owner’s private tracked and completed Planner views, sections, notes, saved video links and resource bookmarks alongside cached progress summaries.
- Refresh Free shelves and Planner inventory when the owner requests the available 24-hour refresh, and schedule Supporter accounts automatically at the start of each UTC hour, subject to Steam availability and capacity.
- Record newly perfected games and deliver requested completion and access alerts.
- Verify a unique contact address, deliver essential service email and answer support requests.
- Operate Supporter access, referrals, payments, refunds, security, abuse prevention, audits and financial reporting.
- Diagnose failures and maintain service reliability while keeping Steam API usage low.
We do not sell personal information or Steam Data, use it for unsolicited marketing, or use advertising profiles.
4. What becomes public
An active public shelf may display the Steam profile name, avatar, vanity URL, perfect games, artwork, playtime, achievements, rarity, unlock dates, perfected dates, summary statistics and owner-selected presentation. The owner may download and share images containing some of the same current-perfect information. Registered email, billing identifiers, support messages, alerts, alert preferences, hidden games, in-progress Planner inventory, tracking choices, sections, notes, saved video links, bookmarks and private administrative records are not public.
7. Storage locations and transfers
PerfectShelf’s production D1 database uses Cloudflare’s Eastern North America location hint, so stored account and Steam-derived records may reside in the United States or Canada. Cloudflare’s global network may process requests and security metadata in other countries. Resend stores its account data, email metadata, logs and API records in the United States. Future payment-processor data will be stored and transferred as described in that provider’s policy.
Internet services necessarily transfer information across borders. We use the providers’ contractual and technical safeguards but cannot promise that every transient network operation occurs in one country.
8. Retention, deletion and anonymization
If Supporter access expires, is revoked, or is refunded and no other grant remains valid, the account becomes Free. The public shelf, achievement galleries, cached Planner inventory, tracking choices, Completion Plans, notes, saved links, bookmarks, alerts, presentation controls, and saved preferences remain available. Refreshes become manually requested once every rolling 24 hours. We keep registered-email, alert-delivery, support, referral, entitlement, audit and billing records while needed to provide the service, resolve disputes, prevent fraud or referral abuse, and meet legal or accounting duties.
You may request deletion at Contact & support. After verifying ownership, we will delete or anonymize data that is no longer required. We may retain minimal SteamID-bound historical access, referral, security, transaction, tax, refund, dispute and audit records where needed to establish Supporter purchase history, preserve financial ledgers, comply with law, or establish legal claims. Deleting an account ends its public shelf and may make the service unavailable to that SteamID.
9. Your choices and rights
You can make Steam Game details private to stop future successful library retrieval, change your registered email from Account settings, view your Supporter end date without any automatic renewal to cancel, or request access, correction, export, deletion or restriction through support. We may ask you to sign in through Steam or verify the registered email before acting. Applicable law may provide additional rights and a right to complain to a privacy regulator.
10. Security and changes
We use signed HttpOnly cookies, same-origin write checks, restricted administration, encrypted provider connections, secret storage outside the repository and auditable account actions. No system is perfectly secure, so please report suspected misuse promptly and never send a Steam password, API key or full card number to support.
We may update this policy as the service or its providers change. Material changes will be posted here before they take effect where reasonably possible.