Privacy Policy — Icarus Eureka Portal
Last updated: April 23, 2026
This Privacy Policy describes how the Icarus Eureka Portal ("Portal", "Service") collects, uses, and protects information about its users. By using the Service, you agree to this Policy.
Provider: David Beauchamp / Eureka Endeavors Contact: dave@beauchamps.net Location: Reston, Virginia, USA
1. What We Collect
Account data (logged-in users only)
When you sign in with Steam, we store:
- Your SteamID64 (public Steam identifier)
- Your Steam display name and avatar URL (public Steam profile data)
- Your privacy consent timestamp (when you accepted this Policy)
We do not receive or store your Steam password — authentication is handled by Steam's OpenID flow.
Save file editing sessions
When you upload a save file, we temporarily store its contents to enable the editing flow. For logged-in users, we retain your three most recent sessions per tool (pets, prospector, prospects). Older sessions are automatically deleted.
For anonymous users, sessions are retained only for the duration of your browser session.
Usage analytics
We log anonymous events (uploads, downloads, edits, errors) to improve the tools. These logs do not include your Steam identity or save file contents.
Payment data
When you purchase premium access, PayPal processes the transaction. We receive from PayPal:
- A transaction identifier
- The purchase amount and currency
- Your PayPal payer ID (opaque identifier, not your email)
We do not receive or store your PayPal password, credit card number, or full billing address.
Bug reports
If you submit a bug report, we store the report text, your Steam display name, and any save files you attach — until the report is resolved and closed.
2. What We Do Not Collect
- Passwords (Steam handles authentication)
- Full payment instrument data (PayPal handles payment processing)
- Save files beyond your active sessions
- Any data from your Steam library, friends list, or play history
- Third-party tracking or advertising identifiers
3. How We Use Your Data
- Account data — to personalize the Portal, show your display name and avatar, and remember your consent status
- Save sessions — to enable the editing features you're using
- Usage analytics — to understand how the tools are used and fix bugs
- Payment data — to grant premium access and reconcile billing
- Bug reports — to investigate and resolve reported issues
We do not sell, rent, or share your personal data with third parties except:
- PayPal — for payment processing (their privacy policy applies)
- Steam / Valve — for authentication (their privacy policy applies)
- Hosting providers — data is processed on our server infrastructure in Helsinki, Finland
- Law enforcement — only when required by a valid legal request
4. Your Rights
You have the right to:
- Access and export your data — download all your data from your profile page at any time
- Delete your account and personal data from your profile page
- Anonymization — if you delete your account, session records are unlinked from your identity but may be retained in anonymized form for fraud prevention and service integrity
- Correct inaccurate data by contacting us at dave@beauchamps.net
- Object to processing — contact us if you have concerns
- Withdraw consent — delete your account to withdraw consent
EU residents have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.
5. Data Retention
| Category | Retention |
|---|---|
| Account data | Until you delete your account |
| Active editing sessions | 3 most recent per tool (logged-in) or browser session (anonymous) |
| Payment records | 7 years (tax / accounting requirement) |
| Bug reports | Until resolved, then closed but kept for history |
| Anonymous usage logs | 90 days |
6. Security
We use standard web security practices:
- HTTPS for all connections
- Server-side encryption for stored sessions
- Access controls on administrative functions
- Regular backups to protect against data loss
No system is 100% secure. If you believe your account has been compromised, contact us immediately.
7. Children
The Portal is not directed to users under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it.
8. Third-Party Services
Syndication to Reddit
We operate a Devvit app (icarustools-blog) on Reddit that reads our public blog Atom feed (/blog/feed) and syndicates new posts to r/IcarusTools. This app does not receive or process any user data — it reads only public blog content.
Cookies and local storage
We use a small number of functional cookies and localStorage entries for session management and UI preferences. We do not use advertising, analytics, or tracking cookies.
9. International Users
The Service is operated from the United States with servers in Finland. By using the Service, you consent to the transfer of your data to these jurisdictions.
EU residents: we rely on your consent (Article 6(1)(a) GDPR) and contractual necessity (Article 6(1)(b) GDPR) as the legal basis for processing your data.
10. Changes to This Policy
We may update this Policy at any time. We will post the updated version with a new "Last updated" date at the top. Significant changes will be communicated via a notice on the Portal.
11. Contact
Questions, concerns, or requests regarding your data:
David Beauchamp / Eureka Endeavors Email: dave@beauchamps.net