Privacy Policy

1. Data we process

• Sign in with Steam: when you sign in via Steam OpenID, Steam only confirms your 64-bit Steam ID to us; we fetch your profile name and avatar URL from the Steam Web API. We never see your Steam password, and Steam does not share your email address with us.
• Favorites and price alerts: the games you favorite; the game, target price and currency of each alert. If you set an alert without an account, the email address you provide for the notification.
• Steam wishlist: only when you press “Sync my Steam wishlist”, your public wishlist is read from Steam. The list itself is not stored; only the games that exist in our catalog are added to your favorites.
• Technical data: to prevent abuse (spam, click bots) your IP address is hashed one-way and kept for at most 1 minute; the raw IP address is not stored for this purpose. Server logs may be kept briefly for debugging.
• Anonymous usage statistics: page views, on-site searches and “Go to store” clicks (game and store) are recorded without cookies. To count unique visitors, your IP address is hashed one-way with a secret key that changes every day; the raw IP is not stored and you cannot be recognized across days. These records are deleted after 180 days.
• “Worth It?” votes: to prevent repeated votes without an account, your vote is kept in your browser (local storage) and on our server together with a one-way hash of your IP address; the raw IP is not stored.

2. Cookies and local storage

• Session cookie (next-auth.session-token): remembers that you are signed in, valid for up to 30 days. Strictly necessary.
• Security cookies (next-auth.csrf-token, next-auth.callback-url): block forged requests during sign-in and return you to the page you came from. Strictly necessary.
• Currency preference (currency cookie and browser local storage): remembers your TRY/USD choice for 1 year. Functional.
• Language preference (NEXT_LOCALE cookie): remembers your Turkish/English choice for 1 year. Functional.
• Advertising cookies: when Google AdSense ads are shown on the site, Google and its partners may use cookies for interest-based advertising. You can turn off personalized ads in Google Ad Settings. How Google uses data: policies.google.com/technologies/partner-sites.

3. Third parties

• Valve (Steam): sign-in verification, game information, reviews and wishlists. Steam's privacy policy applies to the data you give Steam.
• CheapShark and Microsoft (Game Pass catalog): price and catalog data are requested by our server; no personal data is shared in these requests.
• Stores: when you are sent to a store via “Go to store”, that store's privacy policy applies. Some links may be affiliate links and include referral tags (such as UTM parameters); this never costs you anything extra.
• Google AdSense: ad delivery (see the cookies section above).

We do not sell your personal data or share it with third parties for marketing.

4. Retention and deletion

Favorites and member alerts are kept for as long as your account exists; you can delete alerts on the My price alerts page and favorites with the heart button on game pages at any time. You can request the deletion of your account and all data linked to it.

5. Your rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information about it, to learn whether it is used for its intended purpose, to have it corrected if incomplete or inaccurate, to have it deleted or destroyed, and to object.

To exercise these rights or ask questions: email destek@bualinirmi.tr.

6. Changes

When this policy is updated, the date at the top of the page changes. We announce significant changes on the site.