Terms of Service & Privacy Policy
Read our Terms of Service and Privacy Policy. Learn about your rights, our responsibilities, and how we handle your data on s&box Explorer.
summarize TL;DR - Quick Summary
description Terms of Service
1. Acceptance of Terms
By accessing and using s&box Explorer ("the Service"), you accept and agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use the Service.
2. Description of Service
s&box Explorer is a community-powered package viewer and discovery platform for s&box content. The Service provides:
- Browse and search functionality for s&box packages, games, and assets
- User profiles and authentication via Steam OpenID
- Package information aggregated from official s&box APIs
- Community features including news, charts, and organization pages
3. User Accounts
To access certain features, you may authenticate using your Steam account via Steam OpenID. By doing so:
- You authorize us to access your public Steam profile information
- You are responsible for maintaining the security of your Steam account
- You agree to provide accurate and current information
- You must not impersonate others or provide false information
4. Acceptable Use
You agree not to:
- Use the Service for any illegal purpose or in violation of any laws
- Attempt to gain unauthorized access to the Service or its systems
- Interfere with or disrupt the Service or servers
- Use automated systems (bots, scrapers) without explicit permission
- Transmit any malicious code, viruses, or harmful content
- Harass, abuse, or harm other users
5. Intellectual Property
The Service displays content from the official s&box API. All s&box-related trademarks, content, and intellectual property belong to Facepunch Studios. Package content belongs to their respective creators. The Service's code, design, and original content are provided under open source licenses where applicable.
6. Disclaimer of Warranties
THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. We do not guarantee:
- Continuous, uninterrupted, or secure access to the Service
- Accuracy, completeness, or reliability of any content
- That the Service will be error-free or that defects will be corrected
- That the Service will meet your specific requirements
7. Limitation of Liability
To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from your use of the Service.
8. Changes to Terms
We reserve the right to modify these terms at any time. Changes will be effective immediately upon posting. Your continued use of the Service after changes constitutes acceptance of the modified terms.
9. Termination
We reserve the right to suspend or terminate your access to the Service at any time, with or without cause, with or without notice, for any reason including violation of these terms.
shield Privacy Policy
1. Information We Collect
We collect and process the following types of information:
Authentication Data
When you sign in with Steam, we collect:
- Steam ID (unique identifier)
- Steam username
- Profile avatar URL
- Public profile information
Usage Data
- Pages visited and features used
- Search queries and filters applied
- Session duration and activity timestamps
- Browser type, device information, and IP address
Preferences
- Theme selection and UI preferences
- Saved settings and configurations
2. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Authenticate users and manage sessions
- Personalize your experience (themes, preferences)
- Analyze usage patterns to improve the Service
- Monitor for security threats and abuse
- Comply with legal obligations
3. Data Storage and Security
Your data is stored securely using industry-standard practices:
- Session data is stored in a SQLite database with appropriate access controls
- Passwords are never stored (authentication is handled via Steam OpenID)
- IP addresses are obscured for privacy (last octet masked)
- HTTPS encryption protects data in transit
- Regular security updates and monitoring
4. Data Retention
We retain different types of data for varying periods based on their purpose:
Active sessions are tracked; inactive sessions are automatically cleaned up after 30 days of inactivity
Stored until you delete your account or manually clear them from settings
Automatically expires and refreshes based on content type (packages, user data, etc.)
Retained for security monitoring, debugging, and compliance purposes
5. Third-Party Services
We integrate with the following third-party services:
- Steam OpenID: For authentication (see Steam Privacy Policy)
- Steam Web API: For real-time presence status and friends list (optional, user-enabled)
- s&box API: For package and user data (see s&box)
- Google Fonts: For typography
- Analytics: We collect usage analytics including page views, user behavior patterns, and profile engagement metrics to improve the service
6. Cookies and Local Storage
We use cookies and browser local storage for:
- Session management and authentication
- Remembering your preferences (theme, settings)
- Analytics and performance monitoring
You can control cookies through your browser settings, but this may limit Service functionality.
7. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share data only in these circumstances:
- With your explicit consent
- To comply with legal obligations or valid legal requests
- To protect our rights, property, or safety, or that of our users
- In connection with a business transfer (merger, acquisition, etc.)
database Data Collection Details
What We Collect
Profile Information
Steam ID, username, avatar from your public Steam profile
Usage Analytics
Pages viewed, search queries, session duration
Technical Data
Browser type, device info, masked IP address
Preferences
Theme choice, UI settings, saved configurations
What We Don't Collect
Authentication is handled by Steam OpenID
No payment or credit card information
Only public Steam profile information
No personal messages or communications
No GPS or precise geolocation tracking
No fingerprints, facial recognition, etc.
verified_user Your Rights
You have the following rights regarding your personal data:
Access
You can view your profile information and settings at any time by visiting your profile page when logged in.
Correction
Profile information is synced from your Steam account. To update it, modify your Steam profile. Preferences can be updated in your settings page.
Deletion
You can request deletion of your account and associated data by logging out and ceasing to use the Service. Session data will be automatically cleaned up after 30 days of inactivity. For immediate deletion, contact us.
Portability
You can download a copy of your personal data in a machine-readable JSON format directly from your Settings page. This includes your profile information, preferences, and session history. The export is generated instantly and can be used to transfer your data or keep a personal backup.
Opt-Out
You can opt out of data collection by not creating an account or by using the Service without authentication. Note that some features require authentication.
help How to Exercise Your Rights
quiz Frequently Asked Questions
help_outline Do you sell my data to third parties?
No, never. We do not sell, trade, or rent your personal information to anyone. Your data is only used to provide and improve the service.
help_outline Why do you need my Steam account?
Steam authentication allows us to provide personalized features like saved preferences and user profiles. We only access your public Steam profile information - we never see your password or private data.
help_outline Can I use the site without logging in?
Yes! You can browse packages, search, and view most content without an account. Authentication is only required for personalized features like saving preferences and viewing your profile.
help_outline How do I delete my account?
Simply log out and stop using the service. Your session data will be automatically deleted after 30 days of inactivity. For immediate deletion, contact us via GitHub.
help_outline Is my data encrypted?
Yes. All data transmitted between your browser and our servers is encrypted using HTTPS. Session data is stored securely in a database with appropriate access controls.
help_outline Do you track my IP address?
We collect IP addresses for security and analytics purposes, but we obscure the last octet for privacy (e.g., 192.168.1.xxx). This helps us detect abuse while protecting your privacy.
help_outline Is this service GDPR compliant?
We follow GDPR principles including data minimization, purpose limitation, and user rights. You have the right to access, correct, delete, and export your data at any time.
help_outline What happens if there's a data breach?
In the unlikely event of a data breach, we will notify affected users promptly and take immediate action to secure the system. We maintain regular backups and security monitoring to prevent such incidents.
contact_mail Contact & Updates
Questions or Concerns
If you have questions about these terms or our privacy practices, or wish to exercise your rights, please contact us:
We aim to respond to all inquiries within 48-72 hours. For urgent security concerns, please mark your issue as "security" on GitHub.
Policy Updates
We may update these policies from time to time. Significant changes will be communicated through the Service. The "Last Updated" date at the top of this page indicates when the policies were last revised.
Version History
Version 1.1 - Privacy Update
Latestschedule November 20, 2025
Added data collection disclosures for Steam Presence (real-time status), Advanced Analytics (user behavior tracking), and Profile Analytics (view tracking). Updated third-party services section.
Version 1.0
schedule November 12, 2025
Initial release of Terms of Service and Privacy Policy
info Future updates will be listed here with clear change descriptions
info Important Disclaimer
s&box Explorer is an independent, community-driven project and is not affiliated with, endorsed by, or connected to Facepunch Studios or s&box. All s&box-related trademarks, service marks, and company names are the property of their respective owners.
This Service aggregates publicly available data from official s&box APIs and Steam. We are not responsible for the accuracy, availability, or content of third-party services.
Questions?
We're committed to transparency and protecting your privacy.