Steam LibraryHardware Check created by chicksawin cooperation with Lumnop
Build a PC

Privacy policy

1. The short version

2. Controller

The controller for data processing on this website (doesitrun.com) is:

Patrick Layh
c/o [Name/Kennung laut anschrift.net – folgt]
[Straße und Hausnummer – folgt]
[PLZ Ort – folgt]
Germany

Email: kontakt@doesitrun.com

3. Hosting and delivery (Cloudflare)

The website runs on infrastructure provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers, D1 database, domain and DNS, email forwarding). When you open the site, Cloudflare processes technically necessary connection data, in particular your IP address, date and time, the requested address, your browser type (user agent) and your country. This is required to deliver the site and protect it against attacks, abuse and overload (e.g. firewall and limits on requests per IP address).

To protect against abuse and automated scraping, the website also counts how many requests come from an IP address. These counters are only kept in memory, not in the database, and are discarded after one day at the latest. I also use the country determined by Cloudflare to preselect the language (German for visitors from Germany, Austria and Switzerland); nothing is stored for this.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is providing the website securely, quickly and reliably. A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR). More information: Cloudflare privacy policy.

4. Anonymous visitor statistics

To understand which features are used, I count page views and actions (e.g. "library checked", "game opened"). The following is stored: time, type of action (where relevant with the game's Steam AppID), country, device type, browser, operating system, language and referring website. To count each visitor only once per day, a shortened hash is created from IP address, browser identifier, date and a secret key. The IP address itself is not stored; the value changes daily and cannot be used to recognise anyone on other days. No cookies are set and nothing is stored in your browser. If you have turned on "Do Not Track" or "Global Privacy Control" in your browser, you are not counted at all.

The legal basis is Art. 6(1)(f) GDPR (interest in improving the service). Individual records are deleted after about 13 months; only daily totals without any personal reference remain.

5. Signing in with Steam

You can optionally sign in through Steam (OpenID by Valve Corporation). You enter your login details only at Steam; I only receive your public Steam ID. It is used to fetch the data needed for the check through the official Steam Web API: your game library with playtime, your wishlist, your profile name and avatar and, if you choose, your friends list. This only works as far as these details are public in your Steam profile. The data is processed for display and not stored permanently.

Signing in sets two strictly necessary cookies: slhc_st (protects the sign-in process, 10 minutes) and slhc (signed session with your Steam ID, 30 days or until you sign out). The legal basis is Art. 6(1)(b) GDPR (providing the feature you requested); for the cookies § 25(2) no. 2 TDDDG. Valve's privacy information: Steam privacy policy.

6. Your hardware details and the hardware detector

The graphics card, processor, memory and settings you enter are stored in your browser (local storage, "localStorage") and are not sent to me unless you use one of the features listed below.

You can optionally download and run the hardware detector on your PC. It only reads: processor, number of threads, amount, type and speed of memory, graphics card(s) with video memory, free disk space and the AppIDs of installed Steam games. It does not change anything on your system and asks for your confirmation before sending. The result is sent to this website, collected once by the page that started the download and then deleted immediately, at the latest after 30 minutes. If you cancel, only "cancelled" is reported. The legal basis is Art. 6(1)(b) GDPR.

7. Features that store data

The legal basis is Art. 6(1)(a) and (b) GDPR (voluntary use of the feature). You can request deletion by email at any time.

8. Error log

If a technical error occurs in your browser, the error message, affected file and page as well as browser and operating system are sent, without IP address and without Steam ID. This is used to fix bugs (Art. 6(1)(f) GDPR). Deleted after 30 days.

9. Storage in your browser (localStorage)

The site stores your settings (e.g. language, look, filters), your hardware details and, after signing in, a note of which Steam account they belong to in your browser. This is strictly necessary for the features you request (§ 25(2) no. 2 TDDDG). You can delete this data at any time in your browser settings; signing out removes the account-related details.

10. Content from other providers

11. Links to shops (Amazon Associates)

For hardware suggestions I link to shops such as Amazon or eBay. Affiliate links are marked with an asterisk (*) and labelled as advertising. These links go through a redirect on this website, which only counts anonymously that a link was clicked. Once you are on the shop's site, its privacy policy applies; Amazon may set cookies there to record that you came from this site.

As an Amazon Associate I earn from qualifying purchases. This costs you nothing extra. Amazon's privacy information: Amazon privacy notice.

12. Contact by email and contact form

If you write to me, I process your details to answer your request (Art. 6(1)(b) or (f) GDPR). Emails to kontakt@doesitrun.com are forwarded to my mailbox via Cloudflare Email Routing.

With the contact form, your email address, name (optional), subject and message are stored in this website's database and forwarded to me by email. Your IP address is not stored; it is only used briefly in memory to limit mass submissions. Messages from the form are deleted once the request has been dealt with, at the latest after 6 months, unless legal retention obligations apply.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to kontakt@doesitrun.com is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one where you live.

14. Further information

You can use the website without providing personal data. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. I update this policy when the website or the law changes.