Vapor Terms & Conditions and Privacy Policy

Effective date: September 22, 2026

1. About Vapor and Non-Affiliation

Vapor is an independent companion app for viewing and organizing Steam libraries, achievements, game information, and activity. It is not affiliated with, endorsed, sponsored, or specifically approved by Valve Corporation or Steam. Steam, SteamGridDB, Apple, and other third-party names and assets belong to their respective owners.

Vapor's notes, pins, hidden items, and artwork customizations affect your experience in Vapor. They do not change your Steam account, unlock achievements on Steam, or change your Steam privacy settings.

2. Connecting a Steam Profile

You can connect through Steam's sign-in page or enter a Steam ID or vanity URL. Steam handles your Steam password and authentication. Vapor does not ask for or receive your Steam password. When you use Steam sign-in, the response passes through our website's callback service to return your Steam ID and a sign-in verification value to the App. A manually entered profile identifier lets Vapor retrieve available profile information; it does not authenticate ownership of that Steam account.

The information available to Vapor depends on Steam's APIs, the profile's privacy settings, and any personal Steam API key you choose to provide. A personal key may allow Steam to return additional account data, such as library information or last-played dates. It does not guarantee access to private achievement progress. Use only API keys you are authorized to use.

3. Privacy: Information Stored on Your Device

Vapor stores your local library and preferences on your device. Depending on the features you use, this includes:

Notes and photos selected for custom artwork are not uploaded to our API backend or SteamGridDB. Vapor does not provide its own cloud account or cloud synchronization for these local customizations. Device backups and restores may include app data according to your Apple and device settings.

Vapor shares local library summaries, artwork, and sign-in and Pro-access status with its widget extension through storage on the same device. Widgets may download remote artwork directly from its host. Information displayed in widgets can be visible to anyone who can see the relevant device screen.

If you enable biometric protection for hidden games, the operating system performs authentication. Vapor receives the authentication result, not your fingerprint or face data. Hiding a game in Vapor does not make it private on Steam.

4. Privacy: Our Backend and Service Requests

Vapor uses a backend hosted by Cloudflare. Many Steam API and SteamGridDB requests pass through this backend. Depending on the request, it processes Steam IDs or vanity names, game identifiers, language and other request parameters, the installation identifier, app version, your IP address, and the response from the relevant service. We use this information to return the requested data, cache responses, prevent abuse, and keep the service reliable.

If you add a personal Steam API key, the App sends it to our backend over HTTPS for validation and relevant Steam requests. The backend forwards the key to Steam. The key is stored locally in your device Keychain; our application code does not save it in a backend database or write it into our usage analytics or custom application logs. Responses to requests using that key bypass the backend's shared response cache.

Without a personal key, successful responses may be cached on Cloudflare, including Steam profile, library, wishlist, recommendation, and player-achievement data returned using Vapor's shared Steam credentials. Public achievement descriptions and rarity data are also stored in a persistent backend cache. The combined achievement response is marked not to be stored by client caches, but its underlying shared-key player-progress response may still be cached at the backend.

Our backend uses your IP address and installation identifier to limit excessive requests. Cloudflare also processes network and request information to host, secure, and operate the service. These activities continue when optional usage analytics are disabled.

5. Privacy: Usage Analytics and Operational Logs

The Share usage analytics setting is enabled by default. While enabled, requests to Vapor's backend generate limited usage and performance events containing a random installation identifier, app version, service and endpoint category, cache result, request outcome, status code, duration, event count, and whether shared or personal Steam credentials were used. We use these events to understand feature usage, prioritize improvements, and diagnose reliability problems.

The installation identifier is pseudonymous, not anonymous: it lets us associate backend requests from the same installation over time. It is not your Steam ID or an advertising identifier. It is retained when you sign out and may survive reinstalling the App because it is stored in Keychain.

Our usage analytics dataset does not include Steam IDs, vanity names, API-key values, IP addresses, query strings, complete request URLs, notes, or photos. Dynamic identifiers are removed from endpoint categories. Vapor does not use this dataset for advertising or cross-app tracking.

You can turn off future per-request usage analytics in Settings > Miscellaneous > Share usage analytics. This does not delete previously recorded events or stop the installation identifier from being sent for request limiting. Backend operational events, such as upstream-call counts, errors, and rate-limit activity, continue. These system analytics events are recorded without the app installation identifier.

Operational logs are separate from the usage analytics dataset. Cloudflare's request and diagnostic logging may include request URLs and related metadata, including Steam IDs, vanity names, or game identifiers present in those URLs. Disabling usage analytics does not disable these logs or the processing required to provide and protect the service.

6. Privacy: Third Parties, External Content, and Sharing

Vapor interacts with the following services depending on the features you use:

Services contacted directly from your device receive ordinary network information such as your IP address. Their websites, media, and authentication pages may use cookies or other technologies under their own policies. These services may process information in countries other than your own.

If you use a share card or the system share sheet, the content you choose is passed to the destination app or recipient you select. Review the card before sharing: it may reveal profile details, games, achievements, or activity. The destination's handling of that content is governed by its own terms and privacy policy.

7. Privacy: Retention and Your Controls

You can edit or remove notes and artwork, change feed sources and search provider, remove widgets, and change Steam privacy settings. Deleting the App removes its ordinary app data according to iOS behavior, but Keychain items, backups, previously shared content, backend caches, and third-party records may remain. Deleting or signing out of Vapor does not delete your Steam account or cancel an Apple subscription.

Depending on applicable law, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, and to object to certain processing or withdraw consent where processing relies on it. You may also complain to your local data-protection authority. Contact us using the details below to make a privacy request. Because analytics uses an installation identifier rather than a Steam ID, a Steam ID alone may not identify the relevant analytics records.

8. Data Accuracy and Service Availability

Vapor depends on third-party APIs, your connection, Steam privacy settings, and backend availability. Information may be incomplete, delayed, cached, or unavailable. Last-played dates may be estimated from recent activity or achievement unlocks. Statistics and year replays are derived from available data and are not a complete record of your historical play sessions.

We cannot guarantee the accuracy, completeness, or timeliness of game data, prices, reviews, news, artwork, or other external content. Check the Steam store or relevant provider before making a purchase or relying on that information. Local customizations are not a guaranteed backup and can be lost when app data is cleared.

9. Vapor Pro Purchases and Subscriptions

Vapor Pro is offered through Apple's in-app purchase system as monthly or yearly subscriptions and a one-time Lifetime purchase, subject to availability. The App Store purchase screen shows the applicable price, billing period, and any offer terms before you confirm. Available Pro features are described in the App.

Subscriptions renew automatically unless canceled through your Apple Account subscription settings. Apple charges your selected payment method according to the terms shown at purchase. You can manage your plan through Vapor's subscription-management option or your Apple subscription settings. Canceling stops future renewals; access normally continues through the paid period, subject to Apple's terms and applicable law. Signing out, deleting Vapor, or purchasing Lifetime access does not itself cancel an existing subscription.

A Lifetime purchase grants Pro access for the supported lifetime of Vapor; it is not a promise that the App or every feature will operate forever. If Vapor is permanently discontinued, that access ends, subject to applicable consumer rights. Use Restore Purchases with the Apple Account used to purchase when needed. Restoring a purchase restores eligible Pro access, not deleted local notes or customizations.

Refund requests for purchases billed by Apple are handled through Apple's refund process. Eligibility depends on Apple's terms and applicable law. Nothing in these Terms excludes a refund or other remedy you are legally entitled to receive. See Apple's instructions for canceling a subscription.

10. Intellectual Property and Your Content

Third-party game images, logos, names, descriptions, news, and other assets remain the property of their respective owners. Vapor claims no ownership of that content, and access through Vapor does not grant you additional rights to copy, publish, or commercially exploit it.

You retain your rights in notes and images you provide. You are responsible for having permission to use and share your selected content. Local artwork selection and share-card features do not transfer ownership of your content to us.

11. Acceptable Use

Use Vapor and its supporting services lawfully and respect third-party rights and service terms. Do not misuse another person's credentials, bypass request limits or access controls, or interfere with the operation or security of the App or backend. We may restrict requests or access to protect the service from abuse.

12. No Warranty and Limitation of Liability

To the extent permitted by applicable law, Vapor is provided on an "as is" and "as available" basis, without warranties that it will be uninterrupted, error-free, or perfectly accurate.

To the extent permitted by applicable law, the developer is not liable for indirect, incidental, special, consequential, or punitive damages, including loss of data, use, or goodwill arising from use of or inability to use the App. These limitations do not exclude liability, warranties, or consumer remedies that cannot lawfully be excluded or limited.

13. Changes and Discontinuation

Features and supporting services may change, be suspended, or be discontinued, including when third-party services change or become unavailable. Such changes remain subject to applicable law and any rights associated with your purchase.

We may update these Terms and this Privacy Policy to reflect changes to the App, services, or legal requirements. We will update the effective date on this page and provide any additional notice or request any consent required by applicable law. Changes do not remove rights you already have under applicable law.

14. Contact and Privacy Requests

For support or questions about these Terms, or to exercise privacy rights, contact: contact@vaporachievements.com.

Please do not include Steam passwords, personal API keys, or payment-card details in a support or privacy request.