Privacy policy

Last updated November 4, 2026

We store your Steam ID, name and avatar so you can publish, and use one cookie to keep you signed in. Google Analytics runs only with your permission. We run no ads and never sell your personal data.

1What we collect

  • If you sign in: your SteamID64, plus the public name and avatar from your Steam profile at sign-in. We never see your Steam password.
  • What you publish: mod details, images, files, AI usage ratings and credits. All of it is public once published.
  • Your likes and comments. Comments and total like counts are public; the list of who liked a mod is private.
  • Reports you send, including the link to the original work.
  • Feedback you send, linked to your account and visible only to site admins.

For download statistics, we briefly store a keyed digest of your account ID, or your connection IP and browser family if signed out. Raw IP addresses and browser headers are not stored in these statistics. This helps count repeat download requests once per release per UTC day. Shared networks and changing connections can affect counts.

2Cookies

One session cookie keeps you signed in for up to 30 days. We store only a hash of it, so a database leak couldn't be used to sign in as you.

If you allow it, Google Analytics (loaded through Google Tag Manager) sets _ga cookies that last up to 2 years to count visits and see which pages are used. Google receives your IP address, browser details and the pages you view. Nothing from Google loads until you choose Allow, and saying no changes nothing else on the site. There are no advertising cookies.

3Who processes your data

Sloplock runs on our own servers with PostgreSQL and S3-compatible file storage. Cloudflare routes public traffic and may process connection information such as IP addresses. Steam handles sign-in. Google processes analytics data, only if you allow analytics cookies. We do not sell your personal data.

4How long we keep it

Your account stays until you delete it. Deleting it removes your profile, sessions, mods and feedback. Likes are removed and comments are cleared, leaving anonymous thread placeholders where needed. Records used to avoid counting repeat downloads expire within 48 hours; anonymous daily totals remain.

5Your rights

You can download or delete your data from your account settings, or email [email protected]. If you're in the EU or UK you also have the right to complain to your data protection authority.

6Contact

[email protected]