This Privacy Policy explains how we collect, use, and share information when you use the FloatPilot browser extension, website, and related services (the “Service”).
Contact: support@floatpilot.store
1) What we collect
- Account & auth (Steam OpenID): SteamID64, display name, avatar, proof of login.
- Usage & settings: feature toggles (e.g., estimation, bargain helper), configs purchased/uploaded, Credits balance and transactions.
- Payments: processed by Stripe (we don’t store full payment card data).
- Technical logs: user agent, request IDs, error logs, rate-limit counters.
- Cookies & local storage: session/auth cookies on the site; extension storage for preferences
2) How we use data
- Authenticate you via Steam and display your profile info in-app.
- Operate features (estimations, configs marketplace), enforce licenses and anti-circumvention protections.
- Process payments, maintain Credits balances and transactions.
- Maintain security, troubleshoot, measure performance, and improve the Service.
3) Sharing
We share data with service providers that help us run the Service; they only receive what’s needed to perform their services:
- Hosting/infra: Vercel (site/functions).
- Database/storage/auth: Supabase (database, file storage, operational auth data).
- Payments: Stripe (payment processing, billing).
- Authentication: Steam OpenID (to sign you in).
We do not sell your personal data.
4) Data location & international transfers
Data may be processed in the EU/EEA and other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.
5) Retention
- Account & transactions: while your account is active and as required for recordkeeping (e.g., tax, fraud prevention).
- Configs and purchase records: as long as necessary to operate the marketplace and resolve disputes.
- Logs: typically 30–180 days, unless needed longer for security or legal reasons.
6) Your rights (EEA/UK and similar)
Subject to law, you may have the right to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing relies on consent. To exercise your rights, contact support@floatpilot.store. You can lodge a complaint with your local supervisory authority.
7) Security
We use technical and organizational measures (encryption in transit, access controls, least-privilege, monitoring, rate limiting). No method is 100% secure.
8) Children
The Service is not intended for children under the digital age of consent in their country. Do not use the Service if you are under that age.
9) Third-party links
Links to third-party sites/services (e.g., Steam, CSFloat) are governed by their own policies.
10) Changes to this Policy
We may update this Policy. We will post the new version here and update the “Last updated” date in the page header. Continued use after changes means you accept the updated Policy.
11) Contact
Questions or requests? support@floatpilot.store
12) Cookies & local storage details
- Session/auth cookies (site): keep you logged in and secure requests.
- Extension storage: saves your preferences and an API key. You can clear this via your browser’s extension storage controls.
- We do not run third-party advertising trackers. Any analytics we use are aggregate and limited to operating and improving the Service.