Privacy
Last updated: 8 November 2026
Who we are
I’ve Played It (the website at iveplayedit.com and the iPhone, iPad and Android apps) is run by I’ve Done It LLC, Saint George, Utah, USA. We are responsible for the personal data described here.
Signing in
You can sign in with Steam, with Google, with Apple (in the iPhone and iPad app), or with a code we email you. We never see your Steam, Google or Apple password.
- Google: we receive your Google account ID, your email address if Google has verified it, and your first name, which becomes your display name until you connect Steam (then your Steam profile name is used).
- Apple: we receive your Apple account ID, an email address (your real one, or a private relay address if you choose Hide My Email), and your first name the first time you sign in, used as your display name the same way. We also keep a token from Apple so that when you delete your account we can tell Apple to remove I’ve Played It from your Apple ID.
- Email code: we store your address once you've proved it's yours by typing the code. Codes are stored only as a hash and expire after 10 minutes.
What we read from Steam
You sign in on Steam's own page, or connect Steam to an account you made another way. With your permission, we read your SteamID, public profile name and avatar, the games you own with their playtime, your recently played games, your achievements, your wishlist and your Steam friends list. Steam only shares these when your profile's Game details setting is public.
What we store
- Your SteamID, profile name and avatar URL, once Steam is connected.
- How you sign in: your Google or Apple account ID if you use one, and your email address if you sign in with one or add one.
- Your library: which games you own, playtime, our estimate of when you last played, and achievement progress with unlock dates.
- Your Steam wishlist, for prices and alerts.
- Your Steam friends list (their SteamIDs only), to show which friends are here too.
- When you start and stop playing, seen from your Steam status every few minutes, while “Notice when I stop playing” is on (Settings). It needs your Steam profile to be public.
- What you create here: shelves, your queue, notes, ratings, reviews and diary entries.
- Your settings, and your signed-in sessions (we store only a hash of each session token).
- Your email address, if you sign in with it or add one. We use it to sign you in and to send the notifications you turn on, and nothing else. Every notification email has a link to turn that kind off.
- If you subscribe to Premium: your plan, when it renews or ends, and which store you bought it from. We never see your card details.
- Public store information about games (names, tags, art links, prices), shared across all users.
The apps keep your sign-in token in your phone's secure storage, and a copy of recent screens and actions you took while offline on the phone until they can be sent. Signing out removes them.
Why we use it
- To run the service you signed up for: your daily pick, library, progress, stats, friends, alerts and Premium.
- To keep it working and secure: error reports, preventing abuse, and the private beta waitlist.
- With your consent: notification emails you turn on, and the invite cookie where we ask first.
What we don't do
- We don't sell or rent your data, or share it for advertising.
- We don't show ads or use advertising or tracking cookies.
- We don't use your Steam data for marketing.
- We don't read save files or anything on your PC or phone beyond what's described here.
Who processes it for us
Your data, including what we read from Steam, is stored in the United States. These companies handle it on our behalf, only to provide the service:
- Neon (database, on Amazon Web Services in Northern Virginia) and Vercel (hosting the site and the apps' server).
- Inngest runs background jobs such as library syncs and price checks; it sees internal account numbers, not your name or email.
- Resend sends our emails.
- RevenueCat keeps track of Premium subscriptions across the web and the apps, under an internal account number. Stripe takes web payments, and Apple and Google take payments in their app stores.
- Sentry receives error reports when something breaks: what failed and where, with an internal account number but not your name, Steam ID, email or anything you typed.
- Anthropic writes the “Story so far” recap from a game's title and the achievements you unlocked in it. Nothing that identifies you is sent.
- Steam, Google and Apple handle signing in with them. Cover art is loaded directly from Steam's servers, so Steam can see which images your browser or phone requests.
We also look up public game information at IGDB (run by Twitch) and prices at IsThereAnyDeal. Those requests are about games, not about you.
How long we keep it
We keep your data while your account exists. Sign-in codes expire after 10 minutes, and sessions after 30 days on the web and 180 days in the apps, or when you sign out. When you delete your account, it's removed from our database straight away; copies in our database backups are overwritten within a few weeks.
Your choices and rights
- Export: Settings → Your data → Export my data downloads everything we store about you as JSON.
- Delete: Settings → Your data → Delete account, on the website or in the app, removes your account and everything in it immediately. Your Steam account is untouched, and if you signed in with Apple we tell Apple to remove I’ve Played It from your Apple ID. If you subscribed on this website, the subscription is cancelled and your record at RevenueCat is deleted. Stripe keeps its record of past payments, as payment law requires. Subscriptions bought in the App Store or Google Play have to be cancelled there.
- Correct: change your email and settings in Settings, or email us to correct anything else.
- Stop sharing: set your Steam game details back to private at any time. Your picks will stop updating.
- Visibility: Settings → Privacy controls who can see your profile, activity, library and wishlist.
Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to or restrict how we use it. Email privacy@iveplayedit.com and we'll reply within 30 days. If you're in the EU, EEA, UK or Switzerland, you can also complain to your data protection authority.
Cookies and storage
We keep a few small cookies on your device, and no advertising or tracking cookies. Fonts and icons are served from our own domain.
| Name | What it's for | Kept for |
|---|---|---|
| ip_session | Keeps you signed in. | 30 days, or until you sign out |
| ip_openid_state, ip_google_state | Protects Steam and Google sign-in from forgery. | 10 minutes |
| ip_theme, ip_accent, ip_skin, ip_backdrop | The light or dark mode, palette and theme you picked, so pages load in them. | 1 year |
| ip_tz | Your time zone, so today's game changes at your midnight. | 1 year |
| ip_consent | Your answer to the cookie question, where we ask it. | 1 year |
| ip_ref (optional) | The invite link you arrived from, so the friend who invited you gets credit when you sign up. | 30 days, or until you sign in |
The site also keeps actions you take while offline in your browser's local storage until they can be sent. Everything except ip_ref is needed for the site to work. In the EU, EEA, UK and Switzerland we ask before setting ip_ref; elsewhere it's set when you open an invite link.
Age
I’ve Played It is for people aged 13 and over, matching Steam's own minimum age. We don't knowingly collect data from younger children; if you think a child under 13 has an account, email us and we'll delete it.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you by email or in the app before it takes effect.
Contact
Privacy questions and requests: privacy@iveplayedit.com. Anything else: support@iveplayedit.com.