Privacy notice

Effective: 28 September 2026

What is processed

Building a VPK happens in your browser. The selected JSON is not uploaded for that operation. When you explicitly create an import or export code, the transfer snapshot is sent to the SteamNotes Cloudflare Worker. It may contain Steam account IDs, nicknames, notes, flags, and mod settings. A random browser or game client identifier is also sent so a newer code can replace the previous code from that client.

Cloudflare may process normal request metadata, including IP address and technical logs, as the hosting provider. SteamNotes does not use transfer data for analytics, advertising, profiling, or sale.

Purpose and retention

The data is processed only to provide the transfer requested by you. A transfer snapshot is deleted after its first successful import or after 30 minutes, whichever comes first. Creating a new code also invalidates the previous code from the same client. The main in-game database remains in local storage on your device.

Sharing and security

Transfer data is handled by Cloudflare infrastructure and is available to anyone who knows the short code until it expires or is used. Do not include sensitive information. Codes should be treated as temporary secrets.

Your choices and rights

You can avoid server processing entirely by building a VPK locally in the browser or using JSON backups. For access, correction, deletion, or other privacy questions, contact turbozver24@gmail.com. Because transfer records are short-lived and are not linked to an account, a valid unused code may be required to identify a specific snapshot.