Privacy Policy

Last updated: September 29, 2026

1. Who We Are

Imbaboost.com has been running since 2013 and is operated from Poland by IMBA Wojciech Perzyński, a sole trader registered in the Polish CEIDG under tax identification number (NIP) 5882182884 and statistical number (REGON) 362629714. The registered address is given in section 1 of our Terms of Service. Data protection questions reach the person responsible at privacy@imbaboost.com.

2. Information We Collect

Account information: name, email address, and password (stored hashed, never in plain text).
Order information: the services you purchase, the public Steam link the order points at, and order communication.
Payment information: handled entirely by our payment provider and the card networks behind it. We never see or store full card numbers.
Order evidence: the IP address the order was placed from, the country our edge network reports for it, the billing country you tell us, the country that issued the card (from the card number's issuer range — never the number itself), the payment method used, and the moment you accepted our Terms together with the version you accepted.
Free game alert sign-ups: your email address and the dates you signed up, confirmed and unsubscribed — only if you ask for the alerts (section 5).
Usage data: the pages visited, where a visit came from (for example a search engine or a link shared in a chat app), the IP address and browser the visit came from, the country our edge network reports and whether the device is a phone or a computer. This is counted without cookies — a visitor is recognised only within one day, by a code that changes every day — and is used to keep the site secure, to prevent payment fraud and to understand how people find us. The IP address and browser are removed from these records after 180 days.
Account activity: while you are signed in, the IP addresses you visit from with the country our edge network reports for them, when you were last seen and how many visits you made. Each address is deleted 183 days (about six months) after your last visit from it.
Sign-in record: every sign-in and every failed attempt to sign in to an account — the time, the IP address, the country our edge network reports for it and the browser used. Kept for 365 days.

3. How We Use Your Information, and On What Basis

We process personal data only where we have a legal basis to do so:

To deliver the service you ordered and to run your account — performance of a contract.
To communicate order status, scheduling and support responses — performance of a contract.
To process payments, prevent fraud and keep accounting records — a legal obligation and our legitimate interest.
To establish, exercise and defend legal claims — in particular to answer a chargeback or a payment dispute, where the order evidence, the usage data and the sign-in record described above are what can show that the order was placed by the account holder and delivered. This rests on our legitimate interest under Article 6(1)(f) GDPR.
To send free game alerts to an address that asked for them and confirmed it — your consent under Article 6(1)(a) GDPR (section 5).
To keep the site secure and to improve our services and support — our legitimate interest.
To protect accounts against takeover, sharing and misuse, and to recognise your account when you contact support — the account activity and sign-in record described above, on our legitimate interest under Article 6(1)(f) GDPR.

4. The Steam Profile Checker

Our free Steam Profile Checker reads information that Steam already publishes about a profile — the account age, the games and playtime that are set to public, the public friend list, public ban records and similar signals. It reads nothing that is private, and it never asks for a Steam password.

A scan can be run against a profile that does not belong to the person running it, because the information is public either way. We rely on our legitimate interest in providing the tool and in studying public Steam data. Scans run without an account are kept for 90 days and then deleted; scans tied to an account live as long as that account does. If a profile is yours and you do not want it scored by the tool, write to privacy@imbaboost.com and we will remove it and block further scans of it.

5. Free Game Alerts

If you ask for free game alerts on our Free Steam Games Radar, we keep your email address, the version of the sign-up text you saw, and the dates you signed up, confirmed and — if you leave — unsubscribed. The address is used for one thing: an email when a game becomes free to keep on Steam. Nothing is sent until you confirm the address from the message we send you, and a request nobody confirms is deleted after 7 days.

This rests on your consent under Article 6(1)(a) GDPR. You can withdraw it at any time with the unsubscribe link in every alert — it works in one click, without signing in — and withdrawing does not affect alerts already sent. After you unsubscribe we keep the address marked as unsubscribed, so that no alert reaches it again; write to privacy@imbaboost.com and we will delete it completely. Holders of a pass also receive these alerts while the pass runs, unless they have unsubscribed.

6. Who We Share Data With

We do not sell personal data. We share it only with the providers we need to run the service, each under a contract that limits them to our instructions: our payment providers — Mollie B.V. (Amsterdam, the Netherlands), which processes card and wallet payments, and PayU S.A. (Poznań, Poland), which receives the data needed to process a payment made through PayU — our hosting and infrastructure providers, and the provider that sends our email, including order messages and free game alerts. Where any of them processes data outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses.

7. Cookies

We use cookies to keep you signed in, remember cart contents, and understand aggregate site usage. You can control cookies through your browser settings.

8. Data Retention

We retain account and order data for as long as your account is active. After that, records tied to a payment are kept for as long as accounting and tax law requires, and anything not covered by that obligation is deleted. Anonymous profile scans are deleted after 90 days, as described above. Free game alert sign-ups follow section 5. IP addresses recorded for signed-in visits are deleted 183 days after the last visit from that address. The IP address and browser in page-visit records are removed after 180 days and the page-visit records themselves after 400 days. The sign-in record is deleted after 365 days.

The order evidence listed in section 2 is kept for at least the period in which a card payment can still be reversed — six months from the payment — and, where the order is part of our accounting records, for as long as tax law requires us to keep those records. We keep it for no other purpose.

9. Your Rights

You have the right to access, correct, export, restrict or delete your personal data, and to object to processing we base on legitimate interest. Contact us at privacy@imbaboost.com to make a request; we answer within one month. If you are in the European Economic Area and you think we have handled your data wrongly, you can also complain to your national data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).

One limit is worth stating plainly: where data is needed to establish, exercise or defend a legal claim — an open payment dispute being the usual case — the right to erasure does not apply to it, under Article 17(3)(e) GDPR. We will say so, tell you which records are affected and why, and delete them once the matter is closed and no retention obligation covers them any more. Everything outside that set is deleted on request as normal.

10. Children's Privacy

Our services are not directed to individuals under 18, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected by updating the "Last updated" date at the top of this page.

12. Contact

Privacy questions can be sent to privacy@imbaboost.com or via our Contact page.