Privacy Policy

Last updated: September 23, 2026

This is an English translation of the Japanese Privacy Policy. If the two differ, the Japanese version prevails.

Unlocka is an unofficial app for managing your own Steam achievements as Planned and In Progress tasks. It is not provided or endorsed by Valve Corporation. Unlocka never writes to Steam and never asks for your Steam password.

Information We Collect and How We Use It

After you review the explanation and agree, the app collects the following public information when you search for a profile, during the first load, when you sync manually, and during automatic sync if you turn it on.

InformationPurpose
The SteamID, custom ID, or profile URL you enterIdentifying the profile you specify
Public display name, avatar, profile URL, and privacy settingConfirming and displaying the profile you add
Owned games, playtime, and last played timeShowing your library and recent games
Achievement definitions, unlock status, unlock time, and global unlock rateAchievement search, detecting completed tasks, and showing your collection
The game you are playing now and online statusSwitching suggestions while you use the app

A public profile and public "Game details" are separate Steam settings. Depending on your privacy settings or limits of the Steam API, some information may not be available. The app does not verify account ownership. Please add only profiles that you manage.

Information Stored on Your Device

The app stores the selected SteamID, display name, the version of the explanation you agreed to, and the auto sync setting on your device. Task status, task order, notes, and loaded achievements are stored per SteamID, and the original data is kept when you switch accounts.

Tasks and notes are never sent to a server. Tasks from older versions that cannot be matched to an account are kept on your device and imported only when you choose to. Old caches are not deleted automatically either. Images may remain in the device's image cache.

Depending on your operating system's backup settings, data stored on your device may be included in backups made by the OS provider.

Servers and Third-Party Services

To show update notices, the iOS app fetches shared, public version information from our relay server when it starts and when it returns to the foreground. This request does not include your SteamID, anything you entered, device identifiers, or the installed version.

So that no Steam API key is included in the app, we use Cloudflare Workers as a relay. The identifier you enter is sent to Cloudflare, and the necessary identifier is passed to Valve's Steam Web API. The profile, games, and unlock status retrieved are returned to your device as a response and are not stored in the app's server database or shared cache.

The shared cache stores only per-game achievement definitions and global unlock rates, which are not linked to any person, with a 24-hour expiry. Steam profile images and game images are requested directly from their image hosts, so those hosts also receive normal connection information such as your IP address.

The "Find a Guide" links on the achievement screen open external sites (Google Search and Steam Community) in your device's browser only when you tap them. Only the game name and achievement name are passed as search terms; your SteamID, display name, and notes are not. Those sites handle information according to their own policies.

Identifiers are sent from the app to the relay server in the body of HTTPS requests and are never included in URLs. Personal results are marked so they are not stored in HTTP caches. Requests from the relay server to Steam include identifiers in the format required by the Steam API.

Persistent storage of request logs and traces, and Logpush forwarding, are turned off for the relay Worker. The app's own logs do not record what you entered, your SteamID, or request bodies. IP addresses are used to process requests and for short-term rate limiting. These settings do not turn off the connection information that Cloudflare, Valve, and image hosts handle to operate their own services securely.

Workers Logs saved by development versions before this change may still contain URLs that include identifiers. Cloudflare's standard retention period is 3 or 7 days depending on the plan. Turning off log storage does not immediately delete past logs; they expire when the retention period ends.

Cloudflare and Valve are both based in the United States. Information may be processed in multiple countries and regions, including Japan and the United States. For Cloudflare's processing locations, see its list of network locations. Support email is received through Gmail.

We do not sell personal information, use it for advertising, or track you across apps. No advertising SDK is included. The app does not collect location, contacts, camera, microphone, or advertising identifiers. Screen and interaction recording works as described below, and you can stop it at any time.

Screen Recording

To fix what is hard to use, the app records its screens and your interactions. It is on by default. The first-time setup screen tells you about this recording, and it starts only after you agree.

You can stop it at any time with "Screen Recording" on the Profile screen. When you turn it off, recording and sending stop immediately, and the recording SDK is not initialized on later launches. The app works the same with it off.

This explanation is version 2. If you agreed to version 1 or earlier, the app shows the explanation again and asks for your agreement before recording starts.

Recording uses Microsoft Clarity. Clarity provides session recordings (screen replays) and heatmaps, and while it is on, the app's screens themselves are recorded. In addition to screen layout, screen transitions, and the position and time of taps and scrolls, the content shown on screen at that moment is included in the recording.

What is masked and what remains in recordings:

Content
MaskedSteam display name, avatar image, SteamID, the contents of input fields (notes, the profile URL you enter), and numbers shown on screen (playtime, completion rates, counts, dates and times)
RecordedGame names, achievement names and unlock requirements, game images, achievement icons, screen layout, and interactions

This means that while recording is on, recordings show which games you own and which achievements you are pursuing. Your display name, avatar, and SteamID are masked, so recordings contain no clues for identifying your Steam account. The text of your notes is also masked as input field content.

However, the combination of games you own is itself recorded, so recordings are not completely anonymous.

This setting can be changed so that all text and images are masked, but a change can take up to an hour to take effect and does not apply to earlier recordings.

In addition, the app sends the following interactions as its own events.

What is sentDetails
LaunchThat you opened the app
Starting the sample, specifying a profileHow far you got in first-time setup
Sync resultsThe type (success, partial, failure, etc.), whether it was automatic or manual, and the approximate number of achievements unlocked and tasks completed (0, 1, 2–5, or 6 or more)
Creating tasks, changing statusStatus names such as Planned and In Progress
Detecting the game being playedThat the game you are playing could be retrieved
Screen nameWhich of Home, Tasks, Library, Game, Achievement, or Profile

These events do not include your SteamID, display name, profile URL, game names, achievement names, notes, or error text. The strings sent are limited to combinations of words predefined in the app, and there is no path for sending free-form text. The app does not sign in, and it does not pass your SteamID or any value that identifies you to Clarity. Only the ID that Clarity generates automatically for each device is used for identification.

As described above, your display name, avatar, and SteamID are masked in recordings, so recordings are not linked to your Steam account.

Clarity is initialized with consent for advertising storage declined. Clarity estimates your country or region from your IP address and records your device model, OS, and screen size. Microsoft Corporation is based in the United States.

In-App Purchases

Apple's App Store and RevenueCat, Inc. are used to purchase and restore Unlocka+ and to check your entitlement. RevenueCat receives an anonymous in-app ID generated by its SDK, purchase history, product and transaction information, the app version, and the device and connection information needed to check your purchase status. This is used to verify purchases, provide features, restore purchases, and understand sales. Payment information such as credit card details is handled by Apple; neither the app operator nor RevenueCat receives it.

The app does not pass your SteamID, display name, owned games, achievements, or notes to RevenueCat, and it does not link your Steam account to the anonymous purchase ID. Purchase status checks are separate from the "Screen Recording" setting; you can purchase and restore even with recording turned off. Builds without RevenueCat configured do not initialize it or communicate with it.

The result of the entitlement check is also stored on your device so you can keep using the app offline. Your choice of managed games is stored on your device per SteamID and is not sent to RevenueCat or to our server. Restoring purchases does not restore tasks or notes.

RevenueCat is based in the United States, and purchase information may be processed outside Japan. Deleting the app does not delete transaction records held by Apple or RevenueCat. For questions about keeping or deleting purchase information, please contact us. Transaction records are also subject to each company's policies.

Retention and Deletion

DataRetention and how to delete
Tasks and notesStored on your device until you delete them. "Delete All Tasks" on the Profile screen deletes them for the current account
Achievement cacheStored on your device. "Delete and Reload Saved Data" on the Profile screen deletes it for the current account and loads it again
Data for other accountsKept after switching. Switch to that account to delete it
Consent, auto sync, and account settings, and all data on the device including old dataRemoved from the app's storage when you delete the app. OS backups are managed by the OS
Shared server cacheExpires after 24 hours. Contains no personal unlock status or notes
Screen recordingsNothing more is recorded after you turn the setting off. By Clarity's defaults, recorded screen replays are deleted after 30 days, and heatmaps and favorited sessions after 9 months
Support emailKept as long as needed to respond, and deleted about one year after the matter is resolved, unless needed for legal compliance or dispute resolution

Even with auto sync off, the app still communicates for the first load, the initial display of games you open, manual refreshes, and showing the game you are playing in the app. To stop all information retrieval, you can stop using the app. Changing your Steam privacy settings does not automatically delete caches already stored on your device.

Information held by third-party services in their operations is also subject to their policies. For requests to access or delete personal information or to withdraw consent, please contact us using the details below.

Children

The app is intended for people who meet Steam's terms of use. We do not knowingly collect personal information from children under 13.

Changes and Contact

When we make important changes to how data is used, the app shows the explanation again as needed.

Contact for the operator and privacy matters: batcan3216@gmail.com

Help & Contact / Terms of Use

Home Screen Widget

If you add the widget, it shows the image of the game (or the game name if there is no image), the achievement name, and the unlock requirements for In Progress tasks on your Home Screen. The data for display is stored in a storage area on your device shared by the app and the widget, and is not sent to a server. The app downloads game images from Steam's image hosts and copies them into this area, and images for games no longer shown are deleted at the next update. Notes, SteamID, display name, and avatar are not included in this area. The app updates what is shown, and when it appears depends on iOS. To stop showing the widget, touch and hold it on your Home Screen and remove it.