Privacy Policy.

Information this site uses

The site displays public s&box package, server, map, library, player-count, and activity data from public game-related sources. That content is about public packages and servers, not private visitor accounts.

Browsing does not require an account or email address. Entering an optional giveaway requires Steam sign-in.

Giveaways and Steam sign-in

Steam sign-in provides a Steam ID, current display name, avatar, and profile link. For a giveaway entry, the site also checks the public s&box achievement required by that giveaway and records its unlock time and the entry time.

This information is used to enforce one entry per account, verify eligibility, select and contact the winner through Steam, prevent abuse, and retain a record of the giveaway. A winner's public Steam display name, avatar, and profile link may be shown temporarily with the giveaway result. The sign-in session uses a necessary, signed, HTTP-only cookie and does not provide this site with your Steam password.

Local browser storage

The live “on site” count uses a random temporary browser ID in sessionStorage. It is used only to estimate active visitors and normally disappears when the browser session ends.

Aggregate usage counters

The site records aggregate counts for page views, search usage, sort usage, filter usage, analytics clicks, play links, random game clicks, and outbound package links.

For active giveaways, aggregate funnel counters cover widget displays and opens, prize and game links, Steam sign-in, achievement checks, and entry outcomes. The same temporary browser-session ID used by the live visitor count estimates unique browser interactions. Only aggregate totals and approximate unique counts are retained; the site does not keep visitor-level giveaway event histories.

These counters are intentionally limited. Search terms are not stored, and the counter files group user agents into broad buckets such as browser, bot, tool, or other.

Server logs

Like most websites, the server and reverse proxy may keep request logs that can include IP address, requested URL, timestamp, referrer, status code, and user-agent. Logs are used for security, abuse prevention, debugging, and understanding crawler behavior.

Third parties

The site loads fonts from Google Fonts and links to external services such as sbox.game, Steam protocol links, Ko-fi, and sponsored hosting links. Those services have their own privacy practices.

The site uses Google Analytics to measure aggregate visits, traffic sources, approximate location, device and browser information, page engagement, and performance. Google may process this information under its own privacy practices. The site does not run advertising scripts.

Contact

Questions about this policy can be sent to crosschainer in the s&box Discord.