Legal · Updated 25 July 2026
Privacy Policy
This notice explains what personal data VaultShuffle uses, where it comes from, why it is needed, and the choices available to you.
Who is responsible and how to contact us
VaultShuffle operates this service and is responsible for the personal data described here. Privacy questions, access requests, corrections and deletion requests can be sent to support@vaultshuffle.com or through Contact Us.
Account and Steam data
When you sign in with Steam, we receive your SteamID and public profile details through Steam OpenID. With your public Steam data and the Steam Web API we sync owned game identifiers, titles, playtime and last-played timestamps. If you choose Import Steam wishlist, we also request your public Steam wishlist and merge those game identifiers into your VaultShuffle Wishlist. We never receive your Steam password. You may also add wishlist entries manually, along with collections, notes, progress, pins and game-status choices.
How and why we use data
We use account and game data to authenticate you, maintain your library, calculate progress, provide Vault recommendations, run Purge reviews, keep collections and wishlists current, prevent abuse, diagnose faults and respond to support. This processing is necessary to provide the service you request and, for security and service improvement, supports our legitimate interests in operating a reliable product.
Analytics and device storage
Essential cookies and local storage keep you signed in, remember interface preferences and record your cookie choice. Vercel service telemetry is used for hosting reliability. PostHog product analytics and session capture are optional and must remain disabled when you choose Essential only. You can change this choice at any time through Cookie Settings.
Suppliers and international processing
We use Steam for sign-in and game data, Supabase for database and authentication infrastructure, Vercel for application hosting and operational telemetry, IGDB for game metadata, and PostHog only for optional product analytics. These providers process limited data on our behalf or under their own terms and may operate infrastructure outside the UK.
Messages, retention and security
Contact and feedback submissions are private support records. We keep account and library data while your account is active and retain operational or support records only as long as reasonably needed for support, security, legal obligations and backups. Access is restricted and data is protected with transport encryption and provider access controls, although no online service can promise absolute security.
Your rights
Depending on your location, you may ask for a copy of your personal data, correction, deletion, restriction, portability or an objection to certain processing. You may withdraw analytics consent without affecting earlier lawful processing. UK users may also complain to the Information Commissioner's Office. Contact us first if you would like help exercising a right.
Changes and age limits
VaultShuffle is not directed to children under 13. We may update this notice when the service or its suppliers change; the updated date above shows the current version. Material changes will be made reasonably prominent.