Privacy policy

Last updated: 24 October 2026

Acheev is operated by Tamperan (the "Company", "we", "us"), a company in the United Kingdom. We take your privacy very seriously. Our philosophy is to have the smallest privacy footprint possible and to be open, transparent and decent in how we operate with your data.

The purpose of this policy is to describe what information we collect and hold, what we do with it, and who else sees it.

Applicability

This policy applies to all visitors to the Web Site or Documentation, and all accounts.

Compliance

We are compliant with, and operate within the terms of, the UK GDPR, EU GDPR, CCPA and other relevant legislation.

Part of this compliance includes your right to access, correct, and request removal of any data we hold about you, and to object to how we use it. You can delete your account yourself at any time (see Deleting your account); for anything else, contact us via our Discord or the contact form. Requests will be handled in compliance with relevant legislation. You also have the right to complain to a data protection authority - in the UK, that's the ICO.

Why we're allowed to use your data

• To provide the service you signed up for (contract): your account, syncing your gaming library and achievements, and showing your progress.
• Our legitimate interests, balanced against yours: cookieless page-view and search counts, product events and error reports from the server, keeping the service secure, counting promotions, and anonymous aggregate statistics.
• Your consent: analytics cookies and the analytics described under "If you accept" below. You can withdraw it at any time with the "Manage cookies" link.

Information we collect & how it is used

Your online account

You sign in to https://acheev.net with an account you already have - Steam or Xbox - governed by that platform's own terms. There are no Acheev passwords.

Through that sign-in we receive and store:

• Steam: your Steam ID, display name, avatar and profile link. Steam does not give us an email address.
• Xbox: your Xbox user ID, gamertag, avatar and the email address on your Microsoft account. Xbox sign-in runs through OpenXBL, a third-party Xbox Live service, which completes the Microsoft sign-in and passes your profile to us. We don't use your email address to contact you; we keep it because it comes with the sign-in.

We also store your browser's language, your time zone, and when you were last active, plus the settings you choose on the site (favourites, checklist ticks, whether to show adult content). We retain all of this for the life of your account.

If you tick "Stay signed in", you stay signed in for 30 days; otherwise the sign-in cookie lasts until you close your browser (some browsers restore it when they reopen).

Your gaming library & achievement data

Acheev is an achievement-hunting companion, so the core of the service is reading your gaming activity from the platforms you connect. We collect and store the games you own, your playtime, your achievements and trophies, their unlock state and timestamps, and related progress data, so we can show you progress-aware guides and recommendations.

• Steam and Xbox: synced from the platform's APIs using your Steam ID or Xbox user ID - the Steam Web API directly, and Xbox through OpenXBL. We check for new activity every few minutes and re-read your full library every few weeks. A private Steam profile can't be synced.
• PlayStation is linked, not signed in with: you give us your PSN online ID and prove it's yours by putting a code in your PSN "About Me", which we read from your public PSN profile. We store your PSN account ID, online ID and avatar. We don't sync PlayStation trophies yet. You never give us your Sony password or any Sony token.

This data is held securely and is not disclosed to third parties except as described in this policy.

Your public profile

Acheev is partly a public, social site. Your player page is public, and search engines can index it. It shows your display name (from your linked platform), avatar, links to your Steam and Xbox profiles, your stats and your completed games. Your name and progress also appear on public leaderboards, in the public activity feed (for example "X hit 100% on Y"), and on shareable gamer cards. Your PSN online ID is not shown publicly. There is currently no private-profile setting, and disconnecting a platform doesn't take you off these pages; deleting your account does, once its 14-day grace period ends.

Disconnecting a platform

You can disconnect Steam, Xbox or PlayStation from your profile at any time. The connection, and the games, achievements and progress synced from it, are deleted straight away. Activity-feed entries already posted (such as "X hit 100% on Y") and leaderboard credit already earned stay until you delete your account. You can't disconnect the last account you sign in with - delete your account instead.

Deleting your account

You can delete your account from your profile. Deletion takes effect 14 days later; until then you can sign back in and cancel it. After 14 days we erase your account and everything tied to it: your linked accounts and their synced libraries, your favourites, checklist ticks and leaderboard entries, your activity-feed entries and your name on anyone else's, your guide requests and corrections, your sessions and API keys, and any contact-form messages you sent. A few records are kept with everything identifying removed: guide resources you added stay on the site without your name, records of your cookie choices stay without your account, and internal event records stay tied only to a random ID.

Analytics data already sent to PostHog (see below) is keyed to an internal account ID, never your name or email, and isn't deleted automatically. Ask us and we'll delete it.

Web & product analytics

We use PostHog for product analytics, to understand how people use Acheev so we can improve it. We use no other analytics provider and we do not perform any 'fingerprinting'. PostHog processes our analytics data in the European Union.

PostHog's browser traffic goes through our own server, so PostHog never sees your IP address. The only location it receives is your country and region, from our network provider (see below) - never a city or your coordinates.

What happens depends on the choice you make in our cookie banner:

• Before you choose. We count page views and site searches without storing anything on your device - no cookies, nothing in browser storage. The identifier PostHog uses lives in your browser's memory only, lasts until you next load a page in full (moving around the site keeps it), and isn't linked to your account, even if you're signed in. Searches are counted with the text you typed and how many results it found. Nothing else is recorded: no clicks, no session recording.
• If you accept. PostHog stores an identifier in a cookie and in your browser's storage, so your visits can be recognised over time. It records page views, searches and clicks, and may record sessions so we can see how pages are used. Text on the page and everything you type is masked, so a recording shows layout and clicks with the text replaced by asterisks. Images (such as player avatars) and some labels that aren't page text (such as an image's description) can still appear. If you're signed in, your analytics are linked to your Acheev account by an internal account ID - never your name or email.
• If you reject, or your browser sends a Global Privacy Control signal, the PostHog script doesn't run, and any PostHog cookies or storage already on your device are cleared.

Where consent is required of us (see Cookies) you're asked first and the "before you choose" mode applies until you do. Elsewhere analytics start in the "if you accept" mode and you can turn them off at any time with the "Manage cookies" link, which we honour immediately.

Separately, our server tells PostHog about events on your account - for example that you signed in, or that a page you requested returned an error - whatever you chose in the banner. These carry only an internal account ID, your role and account status, and for errors the page address; never your name or email. We use them to keep the service working and understand how it's used.

Communications

If you use our contact form, we store your name, email address, message and your account if you're signed in, and we receive a notification of it on our own servers. We use it only to reply to you.

To keep spam out, the contact form uses Cloudflare Turnstile to check a person is sending it. While the form is on screen, Turnstile runs in your browser and sends Cloudflare signals about your browser and device, including your IP address; Cloudflare tells us whether the check passed, and we keep nothing from it. This is security for the form you're sending, so it doesn't need your consent, and it only runs on the contact page.

If you choose to communicate with us via our Discord or any online forum hosted by us, anything you post may be visible to others in accordance with our Terms of Use, and is subject to the terms and privacy policy of the platform that hosts it (for example Discord). Any such participation is optional and at your discretion.

We don't send email newsletters or marketing.

Steam Deck plugin, API keys and AI tools

If you use the Acheev Steam Deck plugin, you sign in with Steam and the plugin is given an API key for your account. Editors can create API keys, and can connect AI tools (such as Claude) to Acheev's guide-authoring API. Those tools read and write guide content; they don't receive other players' personal data from us. Their own handling of what you do with them is governed by their provider's terms.

Third-party services

These receive some of your data so we can run Acheev:

• Steam (Valve) - your Steam ID, to read your profile and library.
• OpenXBL - your Xbox sign-in passes through them, and we ask them for your Xbox library by your Xbox user ID.
• Sony - your PSN online ID, to find your public profile and check the code in your "About Me".
• PostHog - analytics, as described above.
• Cloudflare - sits in front of acheev.net, so it handles every request to the site, including your IP address, and tells us which country and region a request comes from. Cloudflare runs a global network, so this processing may happen outside the UK and EU. Cloudflare also runs Turnstile, the contact form's spam check, described under Communications.

Players' avatars are shown straight from Steam's, Xbox's and PlayStation's own image servers, so when a page shows one, your browser fetches it from Valve, Microsoft or Sony, which see your IP address and browser as with any image request. Game details (from IGDB) and guide videos (from YouTube) are fetched by our server without anything about you.

Anonymous aggregated data

We use everyone's achievement data together to work out things like which achievements players tend to unlock before others, and how rare each achievement is. We reserve the right to share anonymous aggregate data publicly, such as the relative popularity of different games, or the average completion rate of an achievement.

Such disclosure will be aggregated and anonymous and will not contain sufficient detail to identify any individual.

Disclosure

We do not disclose your data to any third party except as expressly outlined in this policy, or with your explicit consent, or for these limited circumstances:

• to protect, enforce, or defend the legal rights, privacy, safety or property of the Company, our affiliates or their employees, agents and contractors (including enforcement of our agreements and Terms of Use)
• to protect against fraud
• to comply with the law, where we are obligated to disclose such data to a government or law enforcement
• to respond to valid requests from government and public authorities

Such disclosures, if made, may be outside your country of residence.

We do not sell your data, and we do not share it with anyone for advertising or marketing.

AI

We use AI tools to help write guide content. Acheev does not send your personal or progress data to any AI provider, and your data is not sold to, nor used to train the models of, any AI provider.

Location

Acheev's servers and databases are hosted in the United Kingdom and/or the European Union, and PostHog processes our analytics in the European Union. Cloudflare's processing, described above, may happen elsewhere.

Promotions on the site

Some pages carry a small promotion for one of our own products. These are labelled "Promoted", and they are our own, served by us. We do not run a third-party ad network, we do not sell advertising space, and no advertiser or ad-tech company receives your data or places anything on your device through them.

To know whether a promotion is working, we count four things: how often one was rendered, whether it was actually on screen (at least half of it, for at least a second), whether it was clicked, and whether that led to a sign-up on the product it promoted.

How that is measured matters, so here it is in full:

• No cookies and no device storage of any kind are used for promotions. Nothing is written to your browser, and nothing is read from it. This is why promotions need no consent and are not part of the cookie banner.
• To avoid counting the same person twice, we derive a one-way hash of your IP address and browser user-agent, keyed with a secret that's different every day. Your IP address itself is never stored. Without our secret key the hash can't be traced back to you, or used to link you from one day to the next.
• Clicks pass through a redirect on our own site so we can count them before sending you on. We record which page the click came from and where it went. The destination link carries only a campaign label - never anything identifying you.
• The individual records above are deleted after 90 days. What we keep beyond that is a daily count per promotion, which contains no identifier of any kind.
• We do not build a profile of you, do not track you across other websites, and do not target promotions based on anything about you.

Cookies

We use a small number of strictly necessary cookies, which don't need your consent:

We also install a small offline page in your browser's cache, so you see a proper message rather than an error if you lose your connection.

With your consent we also use analytics cookies:

Our cookie banner offers four categories - strictly necessary, preferences, analytics and marketing. Of the optional ones, the only one Acheev actually uses today is analytics. The preferences and marketing categories appear so that your choice is recorded before anything could ever rely on it. We currently set no preferences or marketing cookies at all, and if that changes it will only apply to people who have already opted in.

Some guides include YouTube videos. They don't load with the page, and until you click one your browser makes no request to YouTube at all. Played on the page, a video uses YouTube's privacy-enhanced mode; opened on YouTube itself (in a new tab, say), YouTube's usual cookies apply. Either way that's under Google's privacy policy, not ours.

Where we ask first. In the UK, the EU and EEA (including its outermost regions, such as Réunion, and the Åland Islands), Switzerland, Gibraltar, Jersey, Guernsey, the Isle of Man and Quebec - and wherever we can't tell where you are, including elsewhere in Canada if we can't tell which province - nothing beyond strictly necessary is enabled until you choose, and the banner asks you. Elsewhere the optional categories start enabled and you can turn them off at any time with the "Manage cookies" link. Where you are is worked out from your country (and, in Canada and the US, your province or state), as reported by Cloudflare.

You can accept, reject, or change your choices at any time using the "Manage cookies" link in the footer. We honour Global Privacy Control (GPC) signals from your browser as a rejection of everything optional.

We keep a record of each cookie choice - the categories, when, which version of this policy, how you chose, and the kind of region you were in (not your country) - and link it to your account if you're signed in, so we can show we had your consent. We don't record your IP address with it.

Contact

For any privacy questions or concerns please contact us via our Discord or the contact form.

Changes to this policy

This policy may be updated from time to time. Any changes become effective at the time they are published.

We will not make changes that materially affect the privacy of your data without giving advance warning and/or the ability to opt in/out of the change.