Wishfall

Privacy Policy

Last updated: October 15, 2026

Wishfall ("the Service") recommends discounted games based on your Steam wishlist. This policy explains what data we process, why, and the rights you have. The principle is simple: we process only what is needed to generate recommendations, we don't create accounts, we don't store your data in a database, and we never sell it or use it for advertising.

Data we process

  • Your SteamID64 and, when you sign in through Steam, your public Steam nickname and avatar URL.
  • Your Steam wishlist (app IDs, date added, order), provided "Game details" is set to Public in your Steam privacy settings.
  • The filters, region and interface language you choose in the Service.
  • Our hosting provider may keep standard access logs (IP address, time, browser type) for security and troubleshooting.

We never receive your Steam password, email address, payment details or friends list.

Where the data comes from and how sign-in works

  • All data is retrieved through the public Steam Web API provided by Valve.
  • Sign-in uses Steam's official OpenID: your password is entered only on Steam's own pages, and the Service receives nothing but your SteamID.
  • You can also skip sign-in and enter a public profile link instead.

How we use it

  • To read your wishlist, work out your recent taste and rank today's deals accordingly.
  • To remember your sign-in state, filters and language preference.
  • Never for advertising, selling user profiles or any purpose unrelated to recommendations.

Storage and retention

  • The Service has no account system and uses no database.
  • Your sign-in state lives in a signed cookie (sd_session) valid for 30 days; signing out deletes it.
  • To reduce requests to Steam, the server keeps short-lived in-memory caches: wishlists for 10 minutes, game data for 30 minutes, player profiles for 1 hour. They are cleared on restart.
  • Filters are kept in your browser's local storage and the interface language in a cookie (wf_locale); both exist only on your device.

Third parties

  • Valve Corporation (Steam): the data source. Your Steam data is also governed by Valve's privacy policy.
  • Game artwork is loaded directly from Steam's content delivery network, so your browser contacts Valve's servers directly.
  • Our hosting provider, which runs the servers behind the Service.

We use no third-party analytics or advertising SDKs.

Your rights

  • Signing out deletes the session information the Service holds; clearing your browser's cookies and local storage removes all remaining local data.
  • Whether your wishlist can be read is controlled by your Steam privacy settings, which you can set to private at any time.
  • Laws in the EU, UK, Japan, South Korea and elsewhere give you the right to access, correct and delete your personal data. Because the Service keeps nothing persistently, such requests are usually fulfilled the moment you sign out. For anything else, contact us at the address below.

Children

  • The Service is not directed at children under 13; Steam itself requires users to be at least 13.

Changes and contact

  • If this policy changes materially, we will update the date at the top of this page.
  • Contact: leonsun1214@gmail.com
← Back to home