Privacy policy

Last updated 21 October 2026

What we collect

• No accounts. We do not ask visitors for a name, email or payment details. The only form is the optional sign-up for a free key to our price API (see API keys).
• Google Analytics measures visits (see Analytics). In the EU, the EEA, the UK and Switzerland it sets no cookie unless you accept. We also count clicks to stores anonymously, storing nothing about you (see Counting clicks). No advertising trackers, no ads.
• Searches: a title you search is sent in the page address (/search/?q=) to show results; we do not keep a history of searches.

Counting clicks to stores (no personal data)

When you follow a link from a price table to a store, our server counts the click: which store, which game, where the link was on the page and what kind of page it was on, with the time. We do not store your IP address, a cookie, your browser details or anything else that could identify you or link two clicks together, so this needs no consent. Clicks by automated programs (search engine crawlers, link checkers, link previews) are not counted: to tell them apart, the server looks at the browser name your browser sends with the request, and does not store it. We use the counts to see which stores and page layouts are useful to visitors. When you follow a price card in one of our blog articles to one of our game pages, we count that click the same way, together with the address of the article it was in, so we can see which articles help readers find prices.

API keys (developers only)

If you sign up for a free key to our price API, we store the email address, project name and project address you give us, the date, and a one-way fingerprint of the key (not the key itself). We use the email only to contact you about the API. If you ask for a partner check, our server loads the page you name once to look for a link to our site and stores that address and the date. The API itself keeps a short-lived count per address or key in memory to apply its limits and stores nothing about the people who use apps built on it. To delete your key and data, email us.

Browser extension and userscript

Our browser extension and userscript show a price badge on game pages of the Steam store. They read only the address of the Steam page you are on (to find the game's Steam app ID) and the price Steam shows on it (to hide the badge when Steam is already as cheap), and send only that app ID to superduperbundle.com to get the price. They collect no personal data, browsing history or cookies, run on no other site, and do not change links, cookies or checkout pages on Steam or any store. The extension keeps the answers for 15 minutes in the browser's session storage, which is cleared when the browser closes. Clicking "Compare prices" opens our website, where this privacy policy applies.

Analytics

We use Google Analytics to count visits and see which pages and stores are useful. It loads after the page has loaded. If you are in the EU, the EEA, the UK or Switzerland, Google Analytics starts in its consent mode: it sets no cookie and sends only cookieless measurements (no identifier that links your visits) until you press Accept in the bar shown to visitors in Europe. If you press Decline, it stays that way and any Analytics cookies are deleted. Elsewhere, Analytics uses its cookies from your first visit. Your choice is kept in your browser's local storage (gk-consent), not in a cookie, and you can change it at any time with Cookie settings (also in the footer). Google Analytics and our other measurement tags are managed with Google Tag Manager, which loads on every page and follows the same consent setting.

• Provider: Google Analytics 4, by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), acting as our processor. Google may transfer data to the United States; Google LLC is certified under the EU-US Data Privacy Framework.
• What it records: the pages you view, when you follow a link to a store (which store, platform, and the row it was in), your approximate location derived from your IP address (Google Analytics does not store the IP address itself), and your device, browser and screen type.
• Cookies: _ga and _ga_LSBKFTD2Q6 on SuperDuperBundle, which distinguish visits; they expire after up to two years unless you delete them or decline. In the EU, the EEA, the UK and Switzerland they are set only after you accept.
• What it is not used for: no advertising, no remarketing, no Google signals, no selling or sharing of data for ads. Advertising consent signals are always sent as denied.
• Retention: event data is kept for 2 months, then deleted by Google.
• Legal basis: your consent (Art. 6(1)(a) GDPR; for storage on your device, § 25(1) TDDDG). You can withdraw it at any time, with effect for the future.

What others may process

• Hosting: the site runs on Cloudflare, which processes technical request data such as your IP address to deliver pages and protect the site.
• Trailers: a trailer loads only when you press play; the video then streams from Steam's servers and the player library from a public code CDN (jsDelivr), which receive your IP address.
• Our video on the About page: it loads only when you press play; the player then comes from YouTube (youtube-nocookie.com), which receives your IP address and may set its own cookies under Google's privacy policy.
• Stores: when you follow a link to a store (directly or through IsThereAnyDeal's link service), that store and link service may set cookies and record the visit under their own privacy policies.

Your requests

Questions or requests about your data: contact@superduperbundle.com.