Privacy
What Shelfcloud stores about you, why, and for how long. This describes what the software actually does — it was written against the database schema, not from a template.
The short version
- Signing in tells us your SteamID64. Nothing else about your Steam account.
- We store which cloud games you chose and which you launched.
- We never see your Boosteroid, GeForce NOW, Xbox or Amazon password. Those stay in your browser.
- We store no IP addresses in the database, and no email or real name.
- Launch history is kept 180 days. Request logs 90 days. Both are then deleted.
What is stored
Everything held about a signed-in person, by purpose:
| What | Why | Kept for |
|---|---|---|
| SteamID64, first seen, last seen | Identifies your library across devices. It is the public number Steam gives every account. | Until the account is deleted |
| Your chosen games — game, service, storefront, when added | This is the library the plugin puts on your Steam Deck. | Until you remove them |
| Steam app IDs you own | Only if you use “Sync Steam library” or “Add all my games”, so we can show which catalogue games you already own. Numbers only — no names, playtime or achievements. | Until you sign out or re-sync |
| Your service settings — which services you have, preferred service, country | So a game launches on a service you actually have, in a region where it exists. | Until changed |
| Device credentials — a hashed token per signed-in device, with a label and last-used time | Keeps your Deck signed in. Stored as a SHA-256 hash, so the database never holds a usable credential. | 180 days, then expires |
| Launches — which game, which service, when | Refreshes a launch link if a provider changes it, and produces the “most played” figures on the catalogue. | 180 days |
| Request log — which API route, status, how long it took | Operating the service: finding faults, and spotting abuse of the gateway. | 90 days |
What is never stored
- Your cloud service passwords. Shelfcloud never handles them. You sign in to Boosteroid, GeForce NOW, Xbox or Amazon Luna inside your own browser, and that browser keeps the session in its own profile on your device.
- Your Steam password. Sign-in goes through Steam’s own OpenID page. Shelfcloud receives only the confirmed SteamID64 afterwards.
- IP addresses. They appear briefly in the server’s operational journal, which rotates, and are never written to the database.
- What you browse on the site. The request log records the API route (/api/game/{id}), not a page-by-page history, and never the contents of a search.
- Session tokens in logs. The sign-in URL carries a credential, so the logs store the route pattern and replace the token itself with ***.
- Email address, real name, age, payment details. None are collected.
Who else sees anything
- Steam
- Handles sign-in. If you use “Sync Steam library”, the server asks Steam’s Web API which games you own, using its own API key — your Steam profile must be public for that to return anything.
- The cloud services
- Boosteroid, GeForce NOW, Xbox and Amazon Luna. Shelfcloud sends them nothing about you: it reads their public catalogues. When you play, you connect to them directly and their own privacy terms apply.
- Artwork hosts
- Cover images load straight from Steam’s CDN and SteamGridDB, so your browser contacts those hosts and they can see your IP address — as with any site that loads images. Some artwork is fetched by the server instead, in which case they see only the server.
There is no analytics service, no advertising, and no third-party tracking script on this site. Nothing about you is sold or shared beyond what is listed above.
What you can do
- Sign out — revokes that device’s credential. Your choices are kept.
- Remove all games (in the Deck plugin) — empties your library.
- Delete everything — open Services on the catalogue page and use Delete account. It removes your library, your owned-games list, your service settings, every device credential and your entire launch history, and signs out every device. Your entries in the request log stop naming you. It takes effect immediately and cannot be undone; signing in again gives you a new, empty account.
Security
- Device tokens are stored hashed, never in a form that could be used to sign in.
- The gateway refuses catalogue and launch requests from anyone not signed in.
- Accounts can be blocked if the gateway is abused; a blocked account is refused immediately.
- Every database query is parameterised, so values you type cannot become SQL.
Changes
If what is collected changes, this page changes with it. It is written from the schema, so it is meant to stay true rather than general.
Questions, or a request to delete everything held about you: [email protected].
Last reviewed 13 September 2026.
Shelfcloud is an independent, open-source project. It is not affiliated with, endorsed by, or sponsored by Valve, Steam, Microsoft, Xbox, NVIDIA, GeForce NOW, Boosteroid, Amazon, Amazon Luna, or any other service named here. All trademarks belong to their respective owners. Shelfcloud points your browser at a provider's own URL using your own subscription — it does not proxy, rehost, resell or circumvent any service.