Privacy

The short version

This is a community-run, non-commercial directory of Scrap Mechanic Workshop creations. We don't sell data, we don't run ads, we don't have an analytics tracker following you around. If you never sign in, we never see who you are.

What we store

If you sign in with Steam, we save:

• Your public SteamID, persona name, and avatar URL.
• Your Steam account age and Scrap Mechanic playtime — these come from Steam and are used to filter brand-new throwaway accounts.
• The times you signed in, commented, voted, favourited, or submitted an item — so moderators can keep the site readable.

We do not collect your email, password, phone number, real name, IP address, or browsing history.

Cookies

• smse_session — signed-in session, expires after a week of inactivity.
• smse_captcha — short-lived (30 min) state for the anti-bot challenge.
• bot_verified — set after you pass the challenge, lasts 30 days.
• smse_rating_mode — remembers whether you prefer Steam ratings, site ratings, or both.
• smse_theme — remembers your chosen colour theme.

All cookies are first-party, signed / HTTP-only where it matters. No advertising trackers.

Where the data lives

• Database: Neon (serverless Postgres, free tier).
• Hosting: Vercel.
• Workshop metadata & thumbnails: Steam (hotlinked).

Vercel and Neon may keep ephemeral operational logs. We don't put personal data in log messages beyond what's needed to fix bugs.

Your controls

• Stop using the site any time — logged-out visitors leave no identifying data.
• Ask for deletion of your account data by opening an issue on the project's GitHub. Content you posted (comments, suggestions) may be anonymised rather than deleted to keep discussion threads readable.

Changes

If this policy meaningfully changes, the update will be announced in the site's release notes. This page will always show the latest version.