Steam ID — Your public Steam identifier, used to fetch your game library.
Game Library — The list of games you own, including names, playtime, and last played dates.
Game Metadata — Genres, tags, review scores, and images fetched from Steam and IGDB for recommendation accuracy.
Passwords — Authentication is handled entirely by Steam. We never see your password.
Email address — Steam OpenID does not share your email with us.
Payment info — We have zero access to billing, purchase history, or wallet balance.
Friends list — We don't read your social connections or chat messages.
Your data is stored in a Supabase PostgreSQL database with encryption at rest. Row Level Security (RLS) ensures that your library data is only accessible to you — no other user can query your games.
We do not sell, share, or provide your data to any third parties. Game metadata (genres, tags, scores) is cached globally and is not user-specific.
We use a single session cookie to keep you logged in. This cookie is HttpOnly, Secure, and SameSite. We do not use tracking cookies, analytics cookies, or advertising cookies.
You can permanently delete your account and all associated data at any time from the Settings page.
Account deletion removes your user record, your entire game library association, and all recommendation history. This action is irreversible.
What2PlayNext is an open-source project. If you have any privacy-related questions, please open an issue on our GitHub repository.