Privacy Policy

Who runs this site

This website is an unofficial fan guide to Probably Stolen. It is not Questing Goose Studio and not tinyBuild. The person who deploys it controls the hosting account, the domain, and the environment variables named below. If a contact email is configured, that address is the privacy contact. Until it is configured, the contact page explains that no inbox is published.

What the site itself collects

The guide does not ask you to create an account. It does not have a comment box, a payment form, or a user database. Pages are static articles and tables. A search box sends a query string to a page on this same site so the filter can run. That query is part of the URL. Do not put secrets in the search box.

The contact form, when an email is set, opens your own mail program. The message goes from you to that inbox. The website does not receive the form post and does not keep a server log of the message body, because the form never hits a server handler.

Hosting logs

The site is built to be deployed on Vercel. Like any host, Vercel may process IP addresses and request data to deliver the page and to defend the network. That processing is the host's, under their own policy. This guide does not add a separate logging product. A preview URL on vercel.app is the same site with a different domain. Canonical links use NEXT_PUBLIC_SITE_URL when that variable is set, and otherwise default to the planned public domain. Following a canonical link does not send extra personal data.

Analytics

Analytics is off unless the operator sets NEXT_PUBLIC_GA_ID to a Google Analytics 4 measurement id of the form G- followed by letters and digits. When that variable is unset or does not match, no analytics script is included in the page. When it is set, the site loads Google's tag and configures it with IP anonymization requested. Google may set cookies and process the visit under Google's terms. You can block that script with your browser. The operator should not set the variable until this paragraph is still accurate.

Advertising

Advertising is off by default. NEXT_PUBLIC_ADS_ENABLED must be the exact string true before any ad slot is rendered. Even then, the slot is an empty box with a fixed height and the word Advertisement. This version of the site does not load an ad network script and does not include a live seller line in ads.txt. Before a real network is added, this policy has to name the network, the cookies it sets, and how to opt out. An empty placeholder is not consent to a future network.

A theme choice is stored in localStorage on your device under the key theme, as the values dark or light. That value is not sent to the server. It exists so the next visit can match the switch you clicked. Clearing site data removes it. The default, if you have not clicked, is dark.

Links to other sites

Articles link to Steam, including the store, news posts, and the Workshop, and to the Discord invite the developer publishes. Those sites have their own accounts, cookies, and policies. A purchase on Steam is between you and Valve and the publisher. This guide never asks for a Steam password, a payment card, or a backup code.

Children

The guide is written for people looking up a game that Steam's own descriptors say includes drugs, alcohol, and crime in a fictional shop. It is not directed at children, it does not ask for age, and it does not knowingly collect personal information from children. Regional age ratings for the game itself are on the release page and come from the store data, not from this policy.

Search queries are not a profile. The search page is marked noindex so a query string does not become a public landing page full of one word. The server still has to receive the query to filter the guide. Do not search for your own email address, a friend's name, or a password. The filter only knows items, achievements, and the articles. It will not find a person, and the URL can still sit in a host log or a browser history.

Your choices

Because the site does not keep an account, there is usually no profile to access, correct, or delete. You can choose not to email, not to search for personal names, and to block optional scripts. If you did email a correction, ask the contact address to delete that email. Hosting logs, if the host keeps them, are requested through the host. This policy will be updated on this page with a new date if ads, accounts, or extra trackers are added. The date at the top is the one that counts.