YOUR DATA / YOUR CHOICE

Privacy, without the fog.

ValveTime is a fan project. Browsing does not require an account.

Anonymous by default

Without analytics consent, we count only aggregate pageviews by page. We do not set an analytics identifier, hash your IP for uniques, collect engagement, or connect visits across days. JavaScript-disabled visits use a first-party image request. We do not fingerprint you or track you across websites.

Optional analytics

If you allow analytics, a random first-party identifier lasts 35 days. It measures unique and returning visitors, sessions, live activity, retention, page engagement and interactions. Coarse country, region and city come from Vercel request headers, never precise geolocation. Referrers are grouped by domain; marketing campaign codes are collected, but full query strings and URL fragments are not. Browser, operating system and device category come from the user-agent; we do not store the raw user-agent.

Raw IP addresses are never stored by our application. For a separate daily unique count we hash the trusted Vercel IP header with a random daily salt, which expires after two days. These hashes cannot measure returning visits. Aggregate counters expire after 90 days, unique identifiers and cohorts after 35 days, live activity after five minutes (the display uses two minutes). Vercel may process request information to host and secure the site under its own policies.

Your choices

Use “Privacy choices” to decline or withdraw analytics anywhere on the main site. Consent is required worldwide, including the EU and UK. Your preference is stored for 180 days; withdrawing deletes the analytics identifier. Historical aggregate counts cannot be traced back to you. We honor your choice independently of email or Discord sign-in.

Email and Discord

Email alerts require explicit signup followed by confirmation. Pending emails expire in seven days; confirmation links expire in 48 hours. Confirmation email is delivered via Resend when configured. Every confirmation includes a one-click unsubscribe link that removes your record. Confirmed identities expire after one year unless refreshed. Discord sign-in requests only your username and ID; sharing your verified email is a separately labelled option. We do not request your servers, messages, friends or presence. Sign-in cookies last 30 days and are essential to the account feature. Sign-in streaks count days you sign in, not hidden activity.

The private admin dashboard can view and export opted-in identities. We do not sell or enrich identities. Patch alerts are sent only after confirmation and when the site’s mail dispatcher is enabled.

Manage or delete your Discord identity · Use the unsubscribe link in your email to delete your email subscription.