Privacy
The short version: we collect nothing we do not need, we do not track you, and we do not sell anything about you.
Updated 2026-08-19
What we keep
Reading control schemes needs no account, and we keep nothing about you for it.
If you sign up, we keep your email address, the public name you chose, a hash of your password (the password itself is not something we can read) and the date the account was created. Signing in with Google gives us your address and name from it, and we ask for nothing else.
After that we keep what you make: control schemes, starred games, votes on other people's schemes, action names you wrote yourself, and anything you send through the feedback forms.
If you point the overlay at your Steam profile, your steamid and your public Steam name stay in your session until you disconnect it or the session ends. No Steam password and no Steam sign-in is involved: you type the profile address in yourself, and what a profile is playing is public.
What other people see
A published scheme is public, and your public name and a link to your author profile sit next to it. Your email address is shown to nobody but you and the curator.
Drafts are yours alone. So is your list of starred games.
Cookies and browser storage
A session cookie keeps you signed in while you are here. A "remember me" cookie does the same for thirty days if you asked for it. Both are needed for the site to work at all.
One more cookie holds the starred-games list for visitors without an account. That is the one the banner asks about: decline it and the star simply does not work, and nothing else changes. Your answer to the banner is kept in a cookie too, otherwise we would have to ask every time.
The token that proves a form was sent from our own page lives in that same session cookie; there is no separate cookie for it.
The overlay also keeps the way you arranged it in your browser's own storage: which sections, rows and devices to show for each game, in what order, under what names, which scheme you picked for a game, and whether auto-detection is on. It stays in your browser, never reaches the server, and goes when you clear the browser's data.
There is no advertising and no third-party tracking on this site.
Visits are counted by our own software on our own server. It sets no cookies and remembers nothing about you. To tell one visit from another within a day it derives a short number from your address and browser; that number changes daily and cannot be turned back into you. What we see are anonymous totals: how many visits, which pages, which country, and which link brought them. None of it is shared with anyone.
Third parties
Cloudflare Turnstile checks that a form is being filled in by a person. It does not profile visitors.
Google, only if you choose to sign in with it.
Game artwork loads from Wikimedia Commons and from Steam's content network, so their servers see your request for the image.
If you point the overlay at a Steam profile, our server asks Valve who that is and what they are playing. What travels to Valve is the profile you named, not your address; we hold the answer for a few minutes so as not to ask the same thing over and over.
Letters (address confirmation, password resets) go out through the mail service we configured; it sees the recipient and the text.
If you upload a screenshot of a control settings screen instead of typing the layout in by hand, that image is sent to OpenAI: their model is what reads it. We keep the file only until the recognition finishes and delete it right after; anything a failed run leaves behind is swept nightly. Do not upload screenshots that show anything beyond the controls.
How long it lives
Account data lives as long as the account. A password reset link lasts an hour and an address confirmation a day; once used, neither works again.
Server logs are kept briefly and exist only to find faults.
Your rights
You can close your account yourself from your profile. When you do, you choose what happens to your schemes: take them with you, or leave them on the site with your name removed.
The address, the name, the password, the starred games and your votes go with the account. Anything you sent through the feedback forms, and the action names you added to the vocabulary, stay on the site with nothing left pointing back at you: the author's name is gone from them.
For a copy of your data, or to correct something, write to us.
Your contributions
Schemes you publish become part of an open database under CC BY-SA, the same licence as the material the rest of the catalogue is built from. Publishing one is agreeing to that.
That database may one day be offered through an API, open to everyone or paid for. Such an interface would carry the catalogue and the schemes and nothing besides. It would carry them under the same CC BY-SA licence and with the same credit to whoever wrote them, and charging for access changes neither of those.
Email addresses are not part of it and never will be. Neither are drafts, starred games, votes, or anything you sent through a form. A public author name travels with a published scheme, because giving credit is what the licence asks for. If you would rather your name went nowhere, a scheme can stay on the site without it when you close the account.
Game cover art
Cover art belongs to the publishers of the games and is not part of our CC BY-SA database. We show it to make a game recognisable, we keep no copy of it (the file is served by Steam or by Wikimedia Commons), and we remove it on the rights holder's request.
If you hold the rights and would rather not see your artwork here, write to us and it goes.
Getting in touch
A game we are missing can be asked for with a form. Reporting a mistake in a scheme, or adding a correct one of your own, needs an account.
Questions about your data, about this notice, and anything else reach us at izevai.dev@gmail.com.