Back to home

Privacy Policy

Effective August 25, 2026

1. Data We Collect

When you use Co-Op Now, we may collect:

  • Account data: email address, display name, and profile picture from your Google account
  • Steam data: your public Steam profile, game library, and friend list (only when you link your account)
  • Discord username: optionally provided by you
  • Usage data: game preferences, votes, group memberships, and play session logs
  • Technical data: browser type, device info, and IP address for security and analytics

2. How We Use Your Data

  • To provide and improve the Service
  • To match you with other players based on game preferences
  • To send game night reminders and price alerts you've opted into
  • To prevent abuse and enforce our Community Guidelines
  • To generate anonymized, aggregate analytics

3. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers: hosting and database, email delivery (Resend), and — only with your analytics consent — Microsoft Clarity for product-experience analytics. The Service is currently free and Co-Op Now does not process payment details today.
  • Other users: your display name, avatar, and game preferences are visible to group members and (optionally) in player discovery
  • Legal authorities: when required by law or to protect rights and safety

4. Steam Data

We access your Steam data through the public Steam Web API. We only read publicly available information — we never access your Steam password, purchase history, or payment details. You can unlink your Steam account at any time from Settings.

5. Cookies, Local Storage & Analytics Consent

We use strictly necessary cookies and browser local storage for authentication, security and your product preferences (for example language and display settings). These are required for the Service to work and are not used for advertising. We do not use third-party advertising or cross-site tracking cookies.

Product analytics. We run our own first-party product analytics to understand which features are used and where journeys break. Optional analytics — and any optional analytics storage — only start after you choose "Allow analytics" in the consent banner. If you choose "Necessary only", or make no choice, optional analytics identifiers are not written and optional analytics events are discarded.

Microsoft Clarity. Microsoft Clarity only loads after you give analytics permission. In our implementation, no analytics permission means Clarity is never loaded. When it loads, we configure Microsoft’s ConsentV2 signal with analytics_Storage = granted and ad_Storage = denied: we do not use Clarity advertising storage, and we do not use the Identify API or send custom account identifiers to Clarity.

At a high level, Clarity captures page rendering (DOM structure) and interactions such as clicks, scrolls and navigation, which are reconstructed into session replays and heatmaps. It is not a literal video recording of your screen. Sensitive fields and personal-data areas of the interface are masked so their content is not captured.

Under the current Microsoft Clarity Terms, Microsoft receives data through Clarity and acts as an independent controller for that data, processing it under its own Microsoft Privacy Statement. We cannot promise limits on Microsoft’s own use of that data beyond the consent signal we send.

Provider retention. Under Microsoft’s current Clarity retention policy, ordinary playback data is generally retained for 30 days, while certain sampled, favorited or labeled session data, click data and heatmap data may be retained for up to 9 months. This is Microsoft’s provider-side policy and can change.

You can change or withdraw your analytics choice at any time via "Cookie / analytics settings" in the site footer. Withdrawing consent stops Clarity, sends a denied consent signal, clears its cookies where technically possible, and purges optional analytics identifiers from your browser.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

As a user based in the EU/EEA, you have the right to:

  • Access and download your personal data
  • Request correction or deletion of your data
  • Withdraw consent for data processing
  • Object to or restrict certain processing activities
  • Data portability

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

Co-Op Now accounts and community features are intended for people aged 18 and older. We do not knowingly permit users under 18 to create accounts. Public game information and other content may be viewed without an account. If we learn that an account belongs to someone under 18, we may remove the account and take appropriate steps regarding their personal data.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security policies, and secure authentication via OAuth 2.0.

10. Changes to This Policy

This Privacy Policy is a notice, not a contract you accept. We may update it from time to time, and we will notify users of material changes as appropriate or where required.

11. Contact

Data controller: Co-Op.Now (Sweden). For privacy-related questions, contact us at [email protected].

Co-Op Now is an independent community platform and is not affiliated with Steam, Valve, or any game publisher.