STEVEGAMES

Draft for legal review

Privacy Policy

Draft privacy information based on the application code inspected on 27 September 2026. Provider settings, retention periods, operator details, and applicable privacy rights require confirmation before launch.

Information handled

Supabase Auth handles account credentials and email addresses. The application stores profile display names, usernames, and avatar URLs; reviews, comments, replies, and votes; and account-linked game views, favorites, and download activity. Download event rows can be associated with an account and game. Hosting and service providers may process network, device, and security metadata when requests are made.

Purpose and providers

Information is used to authenticate accounts, display profiles and community content, operate the game catalog, remember account activity, and protect the service. Supabase provides authentication and database services. Cloudflare R2 stores uploaded media. Their processing and retention are also governed by the operator’s provider configuration and applicable provider terms.

Retention and deletion

Account and community data is retained while needed to operate the service. The account deletion endpoint deletes the authenticated account; current database foreign keys cascade deletion to associated profile and user-owned activity records. Avatar object cleanup is attempted after account deletion. Provider security logs may have separate retention periods that must be configured and documented by the operator.

Your choices and rights

You may edit profile information in account settings and request account deletion there. Depending on your location, you may have additional rights to access, correct, export, restrict, or object to processing. Contact the operator to exercise rights or raise a privacy concern.

Security and third-party content

The platform uses server-side authentication checks and access policies, but no internet service can guarantee absolute security. Download links may lead to third-party software; review the terms and privacy practices of those providers before using them.

Contact and operator

[CONFIGURE THE LEGAL OPERATOR NAME, PRIVACY CONTACT EMAIL, AND POSTAL ADDRESS BEFORE LAUNCH.]