# Privacy Policy — Steam Profile Presets

_Last updated: 2026-05-24_

## Summary

Steam Profile Presets is a browser extension that lets you save and restore
Steam profile customization sets (background, frame, mini-profile, animated
avatar, theme, showcases, avatar image). The extension stores data **only on
your own computer**, in the browser's local extension storage. No data is
collected, transmitted, or shared with the developer or any third party
beyond Steam itself, which is required for the extension to function.

## What data the extension handles

The extension processes the following data **only when you explicitly press a
button** ("Save current customization", "Apply", "Export", "Import"):

- **Steam profile customization items** (IDs and names of equipped frames,
  backgrounds, themes, showcase configurations).
- **Your Steam ID** of the currently logged-in account, read from the active
  steamcommunity.com tab.
- **A short-lived Steam Web API token** (`webapi_token`), retrieved from
  your authenticated Steam session. Used in-memory only for the duration of
  a save/apply operation. Never stored to disk.
- **Your avatar image** (only if the "Avatar image" checkbox is enabled when
  saving). Stored as a base64 data URL inside the corresponding preset.
- **Preset name** that you type yourself.

## Where the data is stored

All presets are stored locally via the `chrome.storage.local` API on your
device. They never leave your machine unless **you** click "Export JSON",
which produces a file you can save or share at your own discretion.

## What we do NOT do

- We do **not** operate any server. There is no backend.
- We do **not** collect analytics, telemetry, crash reports, or usage data.
- We do **not** sell, rent, or share your data.
- We do **not** use your data for advertising or for any purpose unrelated
  to the single advertised function of the extension.
- We do **not** transfer your data to third parties.

## Network requests made by the extension

To do its job, the extension talks to Steam's own endpoints from your
browser, using your existing Steam session:

- `steamcommunity.com` — read profile/inventory data, upload avatar, save
  showcase configuration.
- `api.steampowered.com` — read currently equipped items and apply the
  selected ones (Steam Web API).
- `*.steamstatic.com` — download your avatar image when "Avatar image" is
  enabled.

These requests are made directly from your browser to Steam. They do not
pass through any server controlled by the developer.

## Permissions justification

- `storage` — to save your presets locally.
- Host permissions for `steamcommunity.com`, `api.steampowered.com`, and
  `*.steamstatic.com` — required to read and apply Steam profile
  customization.

## Your control

- You can delete any preset from the popup at any time.
- You can remove all data by uninstalling the extension; Chrome clears its
  local storage on uninstall.
- Exported JSON files are owned and controlled by you.

## Account safety

The extension only performs the actions you would normally perform yourself
on your Steam profile edit page, and only when you press a button. It does
not run in the background, does not act on a schedule, and does not
interact with any account other than the one currently signed in to
steamcommunity.com in your browser.

## Contact

For questions about this policy, please open an issue in the extension's
public repository or contact the developer through the Chrome Web Store
support link on the extension's listing page.