Privacy Policy

The TL;DR

Last updated: September 25, 2026.

SteamDetective is a browser userscript that runs entirely inside your browser. It does not require an account and makes no shadow profiles.

• When you visit a Steam profile, the script reads the Steam ID64 from the page and queries the enabled third-party services. The sections below describe exactly what is sent where, and what is stored locally.
• When you use modules that route through the SteamDetective API/proxy, your IP address and the viewed profile's Steam ID64 are logged for up to 7 days for debugging purposes.
• When requesting data from modules that don't go through the SteamDetective API/proxy, you must assume that the sites can determine your identity based on the account used to request the API key (if used) and log the profiles you visit indefinitely.

Data stored in your browser

API keys and credentials

• Backpack.tf API key
  Used to request data through the "full" Backpack.tf API. Optional; without it, the script uses a public endpoint that returns limited data.
• Mannco.store API key and login token
  Used for requests to the Mannco.store API if the data source is set to Direct. The temporary login token obtained with the key is cached until it expires. Optional.
• Marketplace.tf API key
  Used for requests to the Marketplace.tf API if the data source is set to Direct. Optional.
• STN.Trading API key
  Used for requests to the STN.Trading API if the SteamDetective proxy is disabled. Optional.
• SteamID.uk API key
  Used for requests to the SteamID.uk API, is required to fetch data if enabled.
• SteamID.uk ID64
  Required by SteamID.uk to authenticate requests.
• Steam Web API key
  Used by the friend audit to show when each friend was added. Optional.

Settings and preferences

• Which modules are enabled or disabled
• Display preferences (e.g. whether to show inactive bans, auto-expand details on page load)
• Custom links you have added
• Per-module API source and timeout settings

Outbound requests

When you visit a Steam profile with SteamDetective active, the viewed profile's Steam ID (and an API key, if applicable) is sent to the services listed below if their associated modules are enabled.

Some services are subject to their own privacy policies, which you can find here:

• Backpack.tf
• Mannco.store
• Marketplace.tf
• SteamHistory.net
• SteamID.uk
• SteamTrades.com
• Wayback Machine

SteamRep (Archive)

• Sends the viewed profile's Steam ID64 to the SteamDetective API, which returns archived SteamRep data stored on the backend.
• Example request:https://api.steamdetective.com/archive/steamrep?id64=76561198000000000

Backpack.tf

• Sends the viewed profile's Steam ID64 directly to Backpack.tf.
• If you have configured a Backpack.tf API key, it is included in the request.
• Example request (only one is sent, based on whether an API key is configured):
  • Without API key:https://backpack.tf/api/IGetUsers/v3?steamid=76561198000000000
  • With API key:https://api.backpack.tf/api/users/info/v1?steamids=76561198000000000&key=YOUR_KEY

Mannco.store

• The API source is configurable in settings. By default, sends the viewed profile's Steam ID64 to the SteamDetective Proxy, which queries Mannco.store on your behalf.
• In direct mode with an API key configured, your API key is first sent to Mannco.store to obtain a temporary login token (cached locally until it expires), which is then sent along with the viewed profile's Steam ID64.
• Example requests (proxy mode sends only the first; direct mode sends the login request only when no valid cached token exists, followed by the ban check):
  • SteamDetective proxy:https://api.steamdetective.com/proxy/mannco?id64=76561198000000000
  • Direct, login (with API key set):https://api.mannco.store/user/login
  • Direct, ban check:https://api.mannco.store/user/ban/76561198000000000

Marketplace.tf

• The API source is configurable in settings. By default, sends the viewed profile's Steam ID64 to the SteamDetective Proxy, which queries Marketplace.tf on your behalf.
• In TF2Autobot mode, sends the Steam ID64 directly to the TF2Autobot reputation API instead.
• In direct mode with an API key configured, sends the Steam ID64 and your API key directly to Marketplace.tf.
• Example request (only one is sent, based on the API source set in settings):
  • SteamDetective proxy:https://api.steamdetective.com/proxy/marketplacetf?id64=76561198000000000
  • TF2Autobot:https://rep.autobot.tf/json/76561198000000000
  • Direct (with API key set):https://marketplace.tf/api/Bans/GetUserBan/v2?key=YOUR_KEY&steamid=76561198000000000

STN.Trading

• By default, sends the viewed profile's Steam ID64 to the SteamDetective Proxy, which queries STN.Trading on your behalf.
• If you switch to direct API mode in settings and configure an STN.Trading API key, requests go directly to STN.Trading instead.
• Example request (only one is sent, based on the API source set in settings):
  • SteamDetective proxy:https://api.steamdetective.com/proxy/stn?id64=76561198000000000
  • Direct (with API key set):https://api.stntrading.eu/GetUserDetails/v1?steamid=76561198000000000&apikey=YOUR_KEY

Skial

• Sends the viewed profile's Steam ID3 to the Skial stats and panel API. The stats API receives the numeric account number extracted from the ID3; the panel (bans) API receives the full ID3.
• Example requests (sent in this order):
  • 1. Player info (uses account number extracted from ID3):https://stats.skial.com/api/web/v1/player/12345678/init
  • 2. Ban list, triggered by #1:https://www.skial.com/panel/api/bans?steam_id=[U:1:12345678]&active_only=false&page_size=100

MvM Lobby

• Sends the viewed profile's Steam ID64 directly to MvM Lobby.
• Example request:https://mvmlobby.tf/profile/76561198000000000

SteamHistory.net

• Sends the viewed profile's Steam ID64 directly to SteamHistory.net.
• Example request:https://steamhistory.net/id/76561198000000000/__data.json?x-sveltekit-invalidated=011

SteamID.uk

• Sends the viewed profile's Steam ID64, your own Steam ID64, and your SteamID.uk API key directly to SteamID.uk.
• Requires a SteamID.uk API key - this module will not make any requests until configured.
• Example request:https://steamidapi.uk/v2/steamid.php?myid=76561198111111111&apikey=YOUR_KEY&input=76561198000000000

SteamTrades.com

• Sends the viewed profile's Steam ID64 to the SteamDetective Proxy, which queries the SteamTrades API on your behalf.
• Example request:https://api.steamdetective.com/proxy/steamtrades?id64=76561198000000000

FirePowered Gaming

• Fetches the viewed profile's ban list page directly from FirePowered's SourceBans using their Steam ID2.
• Example request:https://firepoweredgaming.com/sourcebans/index.php?p=banlist&hideinactive=false&advSearch=STEAM_0:0:0000000&advType=steamid

Wayback Machine (archive.org)

• Sends the viewed profile's Steam URLs to the Wayback Machine CDX API to search for archived snapshots.
• Example requests (up to 3, sent in parallel - one per Steam URL format):
  • ID3:https://web.archive.org/cdx/search/cdx?url=https%3A%2F%2Fsteamcommunity.com%2Fprofiles%2F%5BU%3A1%3A12345678%5D&output=json&fl=timestamp,original,statuscode&collapse=digest&filter=statuscode:(200|302)&matchType=prefix
  • ID64:https://web.archive.org/cdx/search/cdx?url=https%3A%2F%2Fsteamcommunity.com%2Fprofiles%2F76561198000000000&output=json&fl=timestamp,original,statuscode&collapse=digest&filter=statuscode:(200|302)&matchType=prefix
  • Custom URL (if set):https://web.archive.org/cdx/search/cdx?url=https%3A%2F%2Fsteamcommunity.com%2Fid%2Fcustomurl&output=json&fl=timestamp,original,statuscode&collapse=digest&filter=statuscode:(200|302)&matchType=prefix

Archive.today

• Sends the viewed profile's Steam URLs to Archive.today to search for archived snapshots.
• Example requests (up to 3, sent in parallel - one per Steam URL format):
  • ID3:https://archive.today/timemap/https%3A%2F%2Fsteamcommunity.com%2Fprofiles%2F%5BU%3A1%3A12345678%5D
  • ID64:https://archive.today/timemap/https%3A%2F%2Fsteamcommunity.com%2Fprofiles%2F76561198000000000
  • Custom URL (if set):https://archive.today/timemap/https%3A%2F%2Fsteamcommunity.com%2Fid%2Fcustomurl

Toolbox

Unlike the modules above, the toolbox tools only send requests when you open them.

Friend audit

• Fetches the viewed profile's friends list from Steam Community, then sends the friends' Steam ID64s directly to Backpack.tf in batches of up to 100.
• If you have configured a Steam Web API key, sends the viewed profile's Steam ID64 and your key to the Steam Web API to get the friend-since dates.
• Example requests:
  • Friends list:https://steamcommunity.com/profiles/76561198000000000/friends?ajax=1
  • Backpack.tf trust and bans:https://backpack.tf/api/IGetUsers/v3?steamids=76561198000000001,76561198000000002,...
  • Friend-since dates (with API key set):https://api.steampowered.com/ISteamUser/GetFriendList/v1/?key=YOUR_KEY&steamid=76561198000000000

Group audit

• Fetches the viewed profile's group list from Steam Community.
• Example request:https://steamcommunity.com/profiles/76561198000000000/groups/?ajax=1

Sourcebans checker

• Sends the viewed profile's Steam ID2 directly to the ban list of each site below.
• Example requests (one per site, sent in parallel):

Site	Request
Blackwonder	https://bans.blackwonder.tf/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
DarkPyro's Servers	https://bans.darkpyro.gg/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
DISC-FF	https://disc-ff.site.nfoservers.com/sourcebanstf2/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Flux.TF	https://bans.flux.tf/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Jump Academy	https://bans.jumpacademy.tf/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Karma Gaming	https://karma-gaming.net/sourcebans/index.php?p=banlist&advSearch=STEAM_1:0:0000000&advType=steamid
Leaders Of the Old School (LOOS)	https://sb.looscommunity.com/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Nide.gg	https://bans.nide.gg/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Otaku Gaming	https://bans.otaku.tf/bans?dosearch=1&steamid=STEAM_0:0:0000000
Panda Community	https://bans.panda-community.com/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Phoenix Gaming	https://bans.phoenix-gaming.gg/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
PUBS.TF	https://bans.pubs.tf/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Sappho.io	https://sappho.io/bans/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Scrap.tf	https://bans.scrap.tf/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Second Generation	https://sg-gaming.net/bans/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
The Global Paradise	https://bans.theglobalparadise.org/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
TheVille	https://www.theville.org/sourcebans/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
Tiny Kitty's Girl Pound (TKGP)	https://sourcebans.fluffycat.gay/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
UGC Gaming	https://sb.ugc-gaming.net/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid
UNLOZE	https://bans.unloze.com/index.php?p=banlist&advSearch=STEAM_0:0:0000000&advType=steamid

SteamDetective API / Proxy

To avoid the need to set up an API key, some modules route requests through a proxy API rather than contacting third-party APIs directly.

The API receives at most:

• Your IP address
• The Steam ID of the profile you are viewing

Nothing more. Logs are retained for up to 7 days for debugging purposes, then deleted.

This website (steamdetective.com)

The steamdetective.com website itself sets no cookies, collects no analytics, and does no tracking.