Skip to content

Privacy

This page covers the Steamfield websites: steamfield.io, rr.steamfield.io, decks.steamfield.io, statglass.steamfield.io and stacks.steamfield.io. It is about the websites only. The products have their own documentation.

What is sent to PostHog

The sites use PostHog, an analytics service, in one project shared by all five. For every visitor, without cookies until you accept, it receives:

  • a page view for each page, and a page leave when you go, with the time on the page and how far down you scrolled;
  • clicks, repeated rapid clicks, field changes and form submissions: which element you used and its text, never what you typed into a field;
  • how fast each page loads (web vitals);
  • a few named actions. On rr: copying the install command or the plugin, viewing a section, opening a command tab. On Decks: copying the install command, playing or stepping through the example deck, choosing an example, viewing the quickstart. On the StatGlass docs: download clicks, starting the demo, opening its dashboard. On Stacks: site searches, with the search text, so we can see what people look for. steamfield.io sends none.
  • $opt_in when you press Accept.

Each event carries the site it came from and PostHog's standard properties: the page URL (without anything after a #) and referrer, browser, operating system, device type, screen size, and an approximate location (country, region, city, postal code) looked up from your IP address before the address is discarded.

Every page also loads PostHog's settings script and its web vitals library from PostHog's servers. No feature flags are requested.

Not collected: text you type into a field (other than a Stacks site search), email addresses or tokens. The commands you type into the terminal demo on steamfield.io stay in your browser.

Before you choose, and after Decline

PostHog stores nothing on your device. Visits are counted without cookies: PostHog's servers tell visits apart with a hash whose salt changes every day, so a visit today can't be linked to a visit tomorrow. There are no heatmaps and no session replays. If you decline, the one thing stored is the sf-consent cookie set todenied, so the banner doesn't ask again.

After Accept

PostHog stores its identity and consent cookies on .steamfield.io, plus a copy of the identity in each site's own localStorage and sessionStorage, so repeat visits, and moving from one Steamfield site to another, count as the same visitor.

PostHog also records heatmaps (where you click and move the pointer) and a replay of your visit, including messages in the browser console. Replays mask every input field, and the text of the terminal demo here and of the search box and results on Stacks. They don't record the bodies or headers of network requests. To record, PostHog also loads its recorder script from PostHog's servers.

The sf-consent cookie

Your choice is kept in a cookie named sf-consent on .steamfield.io for one year, so one answer covers every Steamfield site and the banner doesn't ask again on each one. It holdsgranted or denied and nothing else.

Site settings

A few settings stay in your browser's localStorage and are never sent anywhere: the display and sound effect preferences on steamfield.io, and the light or dark theme on Decks and Stacks.

IP addresses

PostHog is set to discard IP addresses.

Changing your mind

Reset your choice and the banner asks again on the next page. Clearing cookies for steamfield.io does the same.

Questions: [email protected].