S&Box TrackerS&Box Tracker
Sign in

Privacy Policy

Last updated: April 11, 2026

S&Box Tracker ("we", "us") respects your privacy. This page explains what data we collect, how we use it, and your rights regarding your data.

What we collect

When you sign in with Steam, we collect:

  • Your 64-bit Steam ID (e.g., 76561198012345678)
  • Your Steam display name
  • Your Steam avatar URL

We do not collect your email address, password, or any other Steam account information. The Steam OpenID flow only exposes public profile data.

When you use the app, we store the portfolios you create, the transactions you log, and the items you reference. This data is scoped to your account and is not visible to other users.

Cookies

We use a single session cookie (__Secure-authjs.session-token) to keep you signed in. The cookie is HTTP-only, secure, and SameSite=Lax. It contains a random session token; no personal data is encoded in it.

If we enable advertising in the future, we may use Google AdSense cookies to serve relevant ads. AdSense may use cookies to personalize ads based on your visits to this and other websites. You can opt out of personalized advertising at Google Ads Settings.

Third-party services

  • Steam Community Market API — for live item prices
  • Steam Web API — for fetching your public Steam profile
  • Vercel — application hosting
  • Neon — database hosting

Data retention

We keep your data as long as your account exists. If you want your account and all associated data deleted, contact us via the contact page and we'll process the request within 30 days.

Your rights

You have the right to access, correct, or delete your personal data. Reach out via the contact page for any of these requests.