Privacy Policy

1. Who is responsible

Game Report: Sales & Wishlists (“Game Report” or “the app”) is published by KASTEN (“we”, “us”). For privacy questions or requests, contact contact@kasten.fr.

This policy covers the app’s handling of information. Steam, itch.io, Apple and their service providers operate their own services under their respective privacy policies.

2. Information the app handles

You can explore Game Report using fictional demonstration data without connecting a platform account. If you connect your accounts, the app processes information needed to display your portfolio:

• API credentials: the Steamworks Financial API Group keys and itch.io API key that you choose to enter.
• Portfolio information: game identifiers, titles, studio names, cover image addresses, account labels, enabled games and links between matching titles.
• Business reports: available sales, revenue, refunds, wishlist activity and cumulative itch.io purchase and revenue figures.
• Public game information: review scores, recent review text and game artwork retrieved from platform services.
• App state: synchronisation timestamps and settings needed to maintain your local portfolio.

The app uses this information to authenticate your requests, retrieve reports, display statistics and reviews, and update widgets. KASTEN does not receive your API keys or portfolio reports through an app-operated backend.

3. Connections to Steam and itch.io

When you connect or synchronise an account, the app sends its API key directly to the corresponding platform over HTTPS. Steam keys are used with the Steam partner financial API; itch.io keys are used with the itch.io API. The app does not send one platform’s key to the other platform.

The app also requests public game metadata and reviews from Steam and loads artwork from the image addresses returned by the platform. Your financial API key is not sent with public metadata or artwork requests.

Like other internet services, these providers receive your IP address and request information, which may include game identifiers and language preferences. They may retain connection or security logs under their own policies. Direct connections do not mean that no information leaves your device.

• Valve / Steam Privacy Policy
• itch.io Privacy Policy

These services may process information outside your country. Their policies describe their retention, international processing and available privacy controls. Game Report’s local cache is separate from the records they maintain.

4. Local storage, security and widgets

API keys are stored in the iOS Keychain using device-only protection and are accessible to the app while the device is unlocked. Reports and portfolio settings are stored in local app files protected by iOS data protection.

To display widgets, the app writes a limited financial summary and its last synchronisation time to a shared on-device container used by the app and its widget extension. This widget snapshot does not contain API keys or review text.

iOS may permit background synchronisation for active Steam accounts. It uses the same direct platform connection; execution depends on iOS scheduling and access to protected data. Widgets may continue to show previously synchronised information.

Game Report does not provide its own cloud storage or cross-device sync service. Depending on your device and Apple backup settings, some app files may be included in system backups. Apple manages these backups separately. No storage or transmission system can guarantee absolute security.

5. Advertising, analytics and this web page

Game Report does not include advertising networks, third-party analytics SDKs or its own telemetry endpoint. We do not use the app to track you across other companies’ apps or websites, sell your app data, or use your reports for advertising.

This privacy page contains no analytics scripts, cookies, external fonts or embedded third-party media. Its hosting service may process standard request information, such as IP addresses, for delivery, security and server logs. Contact KASTEN for information about the hosting of this page.

6. Retention, deletion and your choices

The app retains locally cached reports and saved settings so you can revisit them between synchronisations. It does not apply an automatic expiry period to your saved portfolio.

• Stop access at the source: revoke the relevant API key in Steamworks or itch.io. Revocation prevents future successful API access using that key, but does not erase reports already stored on your device.
• Pause a Steam account: disable the account in the app to suspend its synchronisation. Hiding or disabling a game does not delete its history, and its data may still synchronise while its account remains active.
• Control background activity: use the iOS Background App Refresh settings. Remove widgets if you do not want their summaries displayed.
• Remove app data: use iOS “Delete App”, rather than “Offload App”, to remove the app and its ordinary local data. Shared widget files and backups may have separate lifecycles. Keychain items can persist after uninstalling; do not rely on uninstallation to revoke a credential.

For effective credential revocation, revoke keys with their issuing platform. Manage any device backups through Apple’s settings. Deleting Game Report does not delete your Steam or itch.io accounts or their records. KASTEN cannot remotely access or erase your device’s local files or Keychain.

7. Contacting us and your privacy rights

If you email us, we receive your email address and the information you choose to include. We use this correspondence to respond to your request and retain it only as needed to handle support, resolve disputes or meet legal obligations. Do not send API keys or confidential financial reports unless there is a specific need and an agreed secure method.

Where applicable data protection law requires a legal basis, support correspondence is handled to respond to your request, provide requested assistance, pursue our legitimate interest in supporting the app, or comply with legal obligations, as appropriate.

Depending on your location and the information concerned, you may have rights to access, correct, delete or obtain a copy of your personal information, restrict or object to processing, and withdraw consent where processing relies on consent. Contact us to exercise these rights. You may also complain to your local data protection authority. Requests concerning Steam or itch.io records should be directed to the relevant platform.

8. Children

Game Report is a business reporting tool intended for game developers and studios. It is not directed at children. If you believe a child has sent personal information to KASTEN, contact us so we can review and address it.

9. Changes to this policy

We may update this policy when the app or our practices change. The date at the top identifies the latest revision. Material changes will be communicated as required by applicable law.