Privacy policy
Last updated: 3 November 2026. This is a translation; the German version is the legally binding one.
1. The short version
- No ad banners, no advertising cookies. Microsoft Clarity and Google Analytics (usage analytics) only if you explicitly agree.
- Visitor statistics are anonymous: no IP addresses are stored.
- Signing in with Steam is optional. Your hardware details generally stay in your browser.
2. Controller
The controller for data processing on this website (doesitrun.com) is:
Patrick Layh
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
Germany
Email: kontakt@doesitrun.com
3. Hosting and delivery (Cloudflare)
The website runs on infrastructure provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers, D1 database, domain and DNS, email forwarding). When you open the site, Cloudflare processes technically necessary connection data, in particular your IP address, date and time, the requested address, your browser type (user agent) and your country. This is required to deliver the site and protect it against attacks, abuse and overload (e.g. firewall and limits on requests per IP address).
To protect against abuse and automated scraping, the website also counts how many requests come from an IP address. These counters are only kept in memory, not in the database, and are discarded after one day at the latest. I also use the country determined by Cloudflare to preselect the language (German for visitors from Germany, Austria and Switzerland, and likewise Spanish, French, Italian, Portuguese or Polish for visitors from countries where that language is spoken); nothing is stored for this.
If Cloudflare shows a browser check to protect against bots, passing it sets the strictly necessary cookie cf_clearance so the check is not repeated on every request (§ 25(2) no. 2 TDDDG).
The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is providing the website securely, quickly and reliably. A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR). More information: Cloudflare privacy policy.
4. Anonymous visitor statistics
To understand which features are used, I count page views and actions (e.g. "library checked", "game opened"). The following is stored: time, type of action with an associated value (e.g. a game's Steam AppID, the recognised graphics card or processor model, memory and video memory in rough steps, the library size in steps, the share of the library that runs on the PC rounded to 5 %, or a clicked product; an unrecognised hardware model as the text entered, shortened to 60 characters), country, device type, browser, operating system, language and referring website. To count each visitor only once per day, a shortened hash is created from IP address, browser identifier, date and a secret key. The IP address itself is not stored; the value changes daily and cannot be used to recognise anyone on other days. No cookies are set and nothing is stored in your browser. If you have turned on "Do Not Track" or "Global Privacy Control" in your browser, you are not counted at all.
The legal basis is Art. 6(1)(f) GDPR (interest in improving the service). Individual records are deleted after about 13 months; only daily totals without any personal reference remain. From these records I show combined figures on the home page (e.g. the most checked graphics card); they never allow conclusions about individual people.
5. Signing in with Steam
You can optionally sign in through Steam (OpenID by Valve Corporation). You enter your login details only at Steam; I only receive your public Steam ID. It is used to fetch the data needed for the check through the official Steam Web API: your game library with playtime, your wishlist, your profile name and avatar and, if you choose, your friends list. This only works as far as these details are public in your Steam profile. The data is processed for display and not stored permanently. These requests to the Steam Web API transfer data to Valve in the USA. Valve is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).
Signing in sets two strictly necessary cookies: slhc_st (protects the sign-in process, 10 minutes) and slhc (signed session with your Steam ID, 30 days or until you sign out). The legal basis is Art. 6(1)(b) GDPR (providing the feature you requested); for the cookies § 25(2) no. 2 TDDDG. Valve's privacy information: Steam privacy policy.
6. Your hardware details and the hardware detector
The graphics card, processor, memory and settings you enter are stored in your browser (local storage, "localStorage") and are not sent to me unless you use one of the features listed below. For the anonymous visitor statistics (section 4), only the recognised model or rough steps are counted, without any link to you.
You can optionally download and run the hardware detector on your PC. It only reads: processor, number of threads, amount, type and speed of memory, graphics card(s) with video memory, the Windows version, free disk space and the AppIDs of installed Steam games. It does not change anything on your system and asks for your confirmation before sending. The result is sent to this website, collected once by the page that started the download and then deleted immediately. Results that are not collected can no longer be retrieved after 30 minutes and are deleted by the following day at the latest. If you cancel, only "cancelled" is reported. The legal basis is Art. 6(1)(b) GDPR.
7. Features that store data
- FPS reports and ratings: If you are signed in and report your measured FPS or rate whether a game runs, your Steam ID, the game, your answer, your settings (resolution, quality, upscaling) and your graphics card and performance scores are stored. They improve the estimates for all users; others only see them aggregated without your Steam ID. Stored until you request deletion. FPS reported without signing in and clicks on “Is this right?” are stored with a random ID from your browser instead of a Steam ID (no IP address, no account), together with the game, your answer, your settings and graphics card. Reported FPS only count towards the estimates after a review. You can request deletion through the contact form.
- FPS leaderboard: Only if you explicitly agree after an FPS report, your Steam name, avatar, a link to your Steam profile and the number of games you measured are shown publicly on /leaderboard. Name and avatar are refreshed daily through the Steam API for this. The legal basis is your consent (Art. 6(1)(a) GDPR). You can remove yourself on that page at any time, the entry is then deleted immediately.
- Sharing hardware with friends: If you turn this on, your hardware is stored with your Steam ID so your Steam friends can see it. Turning it off deletes the entry immediately.
- Link for friends ("Let them add their PC"): If you create a link for a friend in "Play together", your display name and Steam ID and your friend's name and Steam ID are stored under a random code. If your friend enters their hardware through the link (graphics card, processor, memory, video memory if given, operating system), it is stored there and visible to anyone with the link. Deleted 6 months after the last change, or immediately on request by email.
- Sharing results: When you create a share link, the shared list, your display name, your graphics card, your processor and the result numbers are stored under a random code. Anyone with the link can see them. Stored for 12 months.
- Game tips: When signed in, you can write short tips for a game and mark other people's tips as helpful. The game, the text, your Steam ID and the time are stored, for marks the tip and your Steam ID. Tips only appear publicly after I have reviewed them, without your Steam ID. Rejected tips are deleted; otherwise they are stored until you request deletion.
- Website feedback: If you send me a message with the feedback button, the text, the page you were on, the language and, if given, your email address are stored. Deleted once the feedback has been dealt with, at the latest after 12 months.
The legal basis is Art. 6(1)(a) and (b) GDPR (voluntary use of the feature). You can request deletion by email at any time.
8. Error log
If a technical error occurs in your browser, the error message, affected file and page as well as browser and operating system are sent, without IP address and without Steam ID. This is used to fix bugs (Art. 6(1)(f) GDPR). Deleted after 30 days.
9. Storage in your browser (localStorage)
The site stores your settings (e.g. language, look, filters), your hardware details and, after signing in, a note of which Steam account they belong to in your browser. This is strictly necessary for the features you request (§ 25(2) no. 2 TDDDG). You can delete this data at any time in your browser settings; signing out removes the account-related details.
10. Content from other providers
- Images from Steam: Game covers and icons as well as profile pictures (avatars) of Steam accounts are delivered by this website itself: the server fetches them from Steam's image servers (Valve Corporation) and Cloudflare caches them. Your browser does not connect to Steam for this, and Valve receives no data about you. The images are not copied permanently; the rights remain with Valve and the game publishers.
- Price history: The lowest Steam price so far for games on your wishlist is requested by this website from the IsThereAnyDeal service. Only the games' numbers (AppIDs) and the country are sent, no data about you; your browser does not connect to IsThereAnyDeal.
- Discord bot: When you use the /doesitrun command in Discord, Discord sends your inputs (game, hardware) and technical request data to this website so the answer can be calculated. The inputs are only used for that answer and are not stored. Discord's own privacy policy applies to Discord itself.
- Anti-cheat information: Whether a game's anti-cheat blocks it on Linux or the Steam Deck comes from GamingOnLinux's anti-cheat list (used with permission). A copy of it is stored on this website; your browser does not connect to any third party for it.
- Linux/Proton ratings: Compatibility ratings for Linux and the Steam Deck come from ProtonDB. They are fetched through this website, sending only the game's number (AppID); your browser does not connect to ProtonDB.
- Microsoft Clarity (usage analytics, only with consent): If you click "Yes, OK" in the notice at the bottom of the page, I load Microsoft Clarity (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Clarity records how the site is used (clicks, scrolling, mouse movements, pages visited, device and browser) so I can find bugs and confusing parts. Clarity masks what you type into form fields by default. For this, Clarity sets cookies (e.g.
_clck,_clsk) and sends data to Microsoft, possibly also to the USA (Microsoft is certified under the EU-US Data Privacy Framework). Without your "Yes" Clarity is not loaded, and with "Do Not Track" or "Global Privacy Control" turned on the site doesn't even ask. Your choice is stored in your browser (analyticsConsent). The notice only appears once you open another page within the website; nothing is stored for that. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time: change your choice. Microsoft privacy statement. - Google Analytics 4 (usage statistics, only with consent): If you agree in the same notice, I also load Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics counts page views and actions and processes your approximate location, device type and browser; your IP address is not logged, but is processed briefly to determine the approximate region. For this, cookies are set (
_ga,_ga_…, stored for up to 13 months) and data is sent to Google, possibly also to the USA (Google is certified under the EU-US Data Privacy Framework). The analytics data is deleted after 14 months. Without your "Yes" Google Analytics measures nothing and sets no cookies (Google "Consent Mode", default "denied"; only the script file is fetched from Google like any other file, so Google sees your IP address but stores nothing about you), and with "Do Not Track" or "Global Privacy Control" turned on the site doesn't even ask. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time: change your choice. Google privacy policy. - YouTube (hidden extras): Two hidden extras (the duck in the title bar and a sale video) play a YouTube video in privacy-enhanced mode (youtube-nocookie.com, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). YouTube is only loaded after you explicitly click "Load" in a notice first. Only then is data such as your IP address sent to Google, possibly also to the USA (Google is certified under the EU-US Data Privacy Framework). Your consent is stored in your browser (
ytConsent). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); you can withdraw it at any time by deleting the site data in your browser. Google privacy policy. - Fonts: Fonts are served by this website itself; there is no connection to Google Fonts.
11. Links to shops (Amazon Associates, eBay Partner Network)
For hardware suggestions I link to shops such as Amazon or eBay. Affiliate links are marked with an asterisk (*) and labelled as advertising. These links go through a redirect on this website, which only counts anonymously that a link was clicked. Once you are on the shop's site, its privacy policy applies; Amazon may set cookies there to record that you came from this site.
As an Amazon Associate I earn from qualifying purchases. This costs you nothing extra. Amazon's privacy information: Amazon privacy notice.
Links to eBay (used graphics cards) can be partner links of the eBay Partner Network. If you buy through them, I earn a commission and the price stays the same for you. eBay may set cookies on its site for this; eBay's privacy policy applies there.
12. Contact by email and contact form
If you write to me, I process your details to answer your request (Art. 6(1)(b) or (f) GDPR). Emails to kontakt@doesitrun.com are forwarded to my mailbox via Cloudflare Email Routing.
With the contact form, your email address, name (optional), subject and message are stored in this website's database and forwarded to me by email. Your IP address is not stored; it is only used briefly in memory to limit mass submissions. Messages from the form are deleted once the request has been dealt with, at the latest after 6 months, unless legal retention obligations apply.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to kontakt@doesitrun.com is enough.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one where you live.
14. Further information
You can use the website without providing personal data. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. I update this policy when the website or the law changes.