Privacy
DeckPilot stores only the data needed to operate the dashboard, subscriptions, audit history, and account management flows.
Data we store
The app stores username, optional email, subscription state, account labels, selected game ids, session events, payments metadata, and audit records.
Sensitive data
Application passwords are one-way hashes. Compatibility account credentials, when accepted in non-production flows, are encrypted at rest. Steam Guard codes are not stored.
Export and deletion
Users can export account data and delete their workspace account from Settings. Audit records may be retained where needed for security and billing integrity.
Payments
Payment provider secrets are stored only in server environment variables. Redirect pages do not grant subscriptions; verified provider events are required.