Privacy Policy
Contents
- Who We Are
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing
- Cookies & Tracking
- Third-Party Services
- Data Security
- Data Retention
- Your Rights
- Children's Privacy
- Changes to This Policy
- Contact Us
At SteamsGuru, your privacy is treated as a fundamental right, not a compliance checkbox. This Privacy Policy explains in plain language what personal information we collect, why we collect it, how we use it, who we share it with, and the rights you have over it. By accessing or using SteamsGuru — whether browsing our storefront, creating an account, or purchasing a digital product — you acknowledge the practices described in this document.
1. Who We Are
SteamsGuru is a digital marketplace that sells downloadable digital products including software, assets, templates, and similar goods. When this policy refers to "SteamsGuru", "we", "us", or "our", it means the platform and its operators. References to "you" or "your" mean any visitor, registered user, or purchaser.
2. Information We Collect
Information you give us directly:
- Name and email address when you register or check out
- Payment information — processed exclusively by third-party payment providers; we never store raw card details on our servers
- Username, profile preferences, and account settings
- Messages, support tickets, or feedback you send to us
Information collected automatically:
- IP address, browser type, operating system, and device identifiers
- Pages visited, time on site, referring URLs, and clickstream data
- Session tokens and authentication cookies
- Approximate geographic location derived from IP (country/region level)
Automatically collected data is used in aggregate or pseudonymous form to improve the platform. It does not, on its own, identify you as an individual.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Processing purchases, delivering digital products, and issuing order confirmations
- Creating and managing your account and authenticating your sessions
- Sending transactional emails — order receipts, download links, password resets
- Responding to support inquiries and resolving disputes
- Detecting and preventing fraud, abuse, or unauthorised access
- Sending promotional emails only if you have explicitly opted in — you may unsubscribe at any time
- Analysing usage patterns to improve site performance and product offerings
- Complying with applicable laws and legal obligations
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes — ever.
4. Legal Basis for Processing
For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we process your personal data under the following legal bases:
- Contract — processing necessary to fulfil your purchase or provide account services
- Legitimate Interests — fraud prevention, security, and platform improvements, where these do not override your rights
- Consent — marketing emails and non-essential cookies, where you have given explicit consent
- Legal Obligation — compliance with applicable laws and regulations
5. Cookies & Tracking
We use cookies and similar technologies for the following purposes:
- Essential cookies — session management, authentication, and cart persistence; these are required for the site to function and cannot be disabled
- Analytics cookies — aggregate traffic analysis to understand how users navigate our site
- Preference cookies — storing your display or locale preferences
You may manage non-essential cookies through your browser settings or our cookie consent tool. Note that disabling cookies may impact certain site features including login persistence and checkout functionality.
6. Third-Party Services
We work with a limited number of trusted third-party providers to operate SteamsGuru. These providers access your data solely to perform services on our behalf and are contractually bound to protect it:
- Payment processors — to handle payment authorisation securely (e.g. Stripe or similar PCI-DSS compliant providers)
- Email delivery providers — to send transactional and, where applicable, promotional communications
- Hosting and infrastructure — cloud servers and CDN services that store and deliver site content
- Analytics platforms — aggregate usage data to help us improve the site
We are not responsible for the independent privacy practices of external websites that may be linked from our platform.
7. Data Security
We implement industry-standard technical and organisational measures to protect your personal information. These include encrypted connections (HTTPS/TLS), hashed password storage, access controls limited to authorised personnel, and regular security reviews.
Despite these measures, no transmission over the internet and no method of storage can be guaranteed to be 100% secure. If you suspect any unauthorised access to your account, please contact us immediately.
8. Data Retention
We retain your personal data for as long as necessary to provide services to you, maintain accurate transaction records, comply with legal obligations (including tax and accounting requirements), and resolve disputes. Account data is typically retained for the lifetime of the account plus a reasonable period thereafter. When data is no longer required, we securely delete or irreversibly anonymise it.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete information
- Erasure — request deletion of your data, subject to legal retention obligations
- Portability — receive your data in a structured, machine-readable format
- Restriction — request that we limit processing of your data in certain circumstances
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw Consent — withdraw consent for consent-based processing at any time without affecting prior processing
To exercise any of these rights, contact us via our Contact page. We will respond within 30 days. We may need to verify your identity before processing certain requests.
10. Children's Privacy
SteamsGuru is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it without delay.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also notify you by email or via a site notice. Continued use of SteamsGuru after changes are published constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out through our Contact page. We are committed to addressing your concerns promptly and transparently.