Legal
Privacy Policy
Last updated: February 10, 2026
1. Introduction and Overview
Welcome to Depo Tool ("we," "our," "us," or the "Application"). This Privacy Policy is designed to inform you, the user ("you" or "your"), about the types of information we may collect, how we use and protect that information, and the choices you have regarding your personal data. This Privacy Policy applies to the Depo Tool desktop application, our website, and any related services, tools, or features we offer (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the practices described herein, you should not use the Services. We are committed to protecting your privacy and handling any personal information we obtain from you with care and respect. Our approach to privacy compliance is rooted in the principles of transparency, data minimization, and user empowerment. We believe that you should always know what data we collect and how we use it, and that you should have meaningful control over both. This Privacy Policy may be updated from time to time, and we encourage you to review it periodically. Any changes will be reflected by an updated "Last Updated" date at the top of this document.
2. Information We Collect
Depo Tool is designed with a privacy-first philosophy. We do not collect, store, transmit, or process any personally identifiable information ("PII") from our users. The Application operates entirely on your local machine and does not require account creation, user registration, or any form of authentication that would necessitate the collection of personal data such as your name, email address, phone number, physical address, or financial information. The Application does not embed analytics trackers, advertising SDKs, telemetry modules, or any third-party data collection mechanisms. We do not use cookies, web beacons, pixel tags, or similar tracking technologies within the desktop application. When you use Depo Tool, the Application may interact with your local Steam installation directory to read configuration files and write manifest and Lua script files. These operations are performed entirely on your local filesystem and no data from these operations is transmitted to any external server, endpoint, or third party. The Application communicates with two servers — one hosted on Cloudflare and one on GitHub — solely to download publicly available game manifest files and Lua scripts. These download requests may be logged by Cloudflare and GitHub in accordance with their respective privacy policies, which are outside the scope of our control and responsibility. We strongly encourage you to review Cloudflare's Privacy Policy at cloudflare.com/privacypolicy and GitHub's Privacy Statement at docs.github.com for further information regarding how those platforms handle server access logs and related data.
3. How We Use Information
As stated above, Depo Tool does not collect personal information. However, for the sake of completeness and legal transparency, we outline herein the categories of information processing that occur within the scope of the Application's functionality. The Application processes local filesystem data to manage your Steam library. This includes reading your Steam installation path from standard registry entries or default installation directories, writing depot manifest files and Lua configuration scripts to your Steam directory, and modifying local application configuration files necessary for game registration. All of these operations are performed locally on your device and are initiated solely by your explicit actions within the Application. No automated, background, or scheduled data processing occurs without your direct interaction. The Application retrieves game data files from our servers via standard HTTPS requests. These requests contain only the minimum information necessary to establish a network connection and retrieve the requested files, such as your IP address (which is inherent to any internet communication), the requested file path, and standard HTTP headers. We do not log, store, or retain any of this information on our servers. Our Cloudflare-hosted infrastructure may temporarily cache requests for performance optimization, but any such caching is governed entirely by Cloudflare's policies and data handling practices. We do not use any collected or processed data for marketing, advertising, profiling, automated decision-making, or any purpose other than the direct provision of the Application's core functionality as described in this Policy.
4. Data Storage and Security
Because Depo Tool does not collect or transmit personal data, there are no centralized databases, data warehouses, or cloud storage repositories containing user information. All data generated or modified by the Application resides exclusively on your local device within your Steam installation directory. The security of this data is therefore subject to the security measures you have implemented on your own device, including but not limited to operating system-level protections, antivirus software, firewall configurations, and physical access controls. We strongly recommend that you maintain up-to-date security software and follow best practices for device security. With respect to the integrity of the files delivered by the Application, all downloads from our servers are conducted over HTTPS (TLS-encrypted connections), which provides encryption in transit and helps prevent man-in-the-middle attacks and data tampering. Our Cloudflare infrastructure benefits from enterprise-grade DDoS protection, Web Application Firewall capabilities, and global CDN distribution. Our GitHub-hosted backup server benefits from GitHub's robust security infrastructure. The Application itself is built using Tauri, a security-focused framework that leverages Rust's memory safety guarantees and provides a significantly smaller attack surface compared to traditional Electron-based desktop applications. The Application does not request or require elevated system privileges beyond those necessary for writing files to your Steam directory. We conduct regular code reviews and welcome security audits from the open-source community, as our entire codebase is publicly available for inspection on GitHub.
5. Third-Party Services and Integrations
Depo Tool interacts with a limited number of third-party services in the course of providing its functionality. It is important that you understand the nature of these interactions and the privacy implications associated with them. Steam (Valve Corporation): Depo Tool interacts with your local Steam installation to manage your game library. The Application reads from and writes to your Steam directory on your local filesystem. Depo Tool does not communicate with Valve's servers, does not access your Steam account credentials, and does not transmit any data to Valve Corporation. However, after Depo Tool registers a game in your local Steam library, the Steam client itself may communicate with Valve's servers when you next launch Steam. Valve Corporation's privacy practices are governed by their own privacy policy, available at store.steampowered.com/privacy_agreement. Cloudflare: Our primary file distribution server is hosted behind Cloudflare's content delivery network. When you download game files through Depo Tool, your requests pass through Cloudflare's infrastructure. Cloudflare may collect and process certain technical data as described in their privacy policy. GitHub: Our backup file distribution server is hosted on GitHub. Download requests to this server are subject to GitHub's privacy practices. Additionally, our source code repository is hosted on GitHub, and any interactions with our GitHub repository (such as submitting issues or pull requests) are governed by GitHub's privacy statement. We have no control over and assume no responsibility for the privacy practices of these third-party services. We encourage you to review their respective privacy policies independently.
6. Open Source Transparency and Auditability
Depo Tool is released as open-source software under the MIT License. This means that the entire source code of the Application is publicly available for review, audit, and verification by any individual, organization, or security researcher. We believe that open-source development is one of the strongest guarantees of privacy and security, as it eliminates the need to trust opaque, proprietary code with your data and system access. You can verify every claim made in this Privacy Policy by examining the source code directly. The Application contains no hidden telemetry, no obfuscated data collection routines, and no undocumented network communications. Every network request, file operation, and system interaction performed by the Application is documented in the source code and can be independently verified. Our commitment to transparency extends beyond the codebase itself. Our build process is reproducible, meaning that you can compile the Application from source and verify that the resulting binary matches the distributed release. We welcome and encourage community participation in security audits, code reviews, and privacy assessments. If you discover any privacy concern, security vulnerability, or discrepancy between this Privacy Policy and the Application's actual behavior, we urge you to report it immediately through our GitHub repository's issue tracker or through responsible disclosure channels. We take all such reports seriously and are committed to addressing them promptly and transparently.
7. Children's Privacy
Depo Tool is not directed at individuals under the age of thirteen (13), and we do not knowingly collect, solicit, or maintain personal information from children under thirteen years of age. Since the Application does not collect any personal information from any user regardless of age, there is no mechanism through which children's data could be inadvertently gathered or stored. However, in compliance with the Children's Online Privacy Protection Act ("COPPA"), the General Data Protection Regulation ("GDPR"), and other applicable child protection laws and regulations, we state unequivocally that the Application is not designed for, marketed to, or intended for use by children under the age of thirteen. If you are a parent or legal guardian and you believe that your child has interacted with the Application in a way that has resulted in the collection of personal information, please contact us immediately through our GitHub repository, and we will take all reasonable steps to investigate and remedy the situation. We are committed to complying with all applicable laws and regulations regarding the protection of children's privacy and will cooperate fully with regulatory authorities in any investigation related to children's data protection.
8. International Data Considerations
Depo Tool is available for download and use globally. While the Application itself does not collect or transfer personal data, the file download servers operated by Cloudflare and GitHub are distributed across multiple geographic regions and jurisdictions. When you download game files through the Application, your request may be routed through servers located in a country different from your country of residence. This routing is performed automatically by Cloudflare's and GitHub's global infrastructure for performance optimization and is not within our direct control. To the extent that any technical data (such as IP addresses) is processed by these third-party services in connection with file downloads, such processing may constitute an international data transfer under certain jurisdictions' privacy laws, including the European Union's General Data Protection Regulation ("GDPR"), the United Kingdom's Data Protection Act 2018, Brazil's Lei Geral de Proteção de Dados ("LGPD"), and other applicable data protection legislation. Both Cloudflare and GitHub maintain comprehensive data protection frameworks and have implemented appropriate safeguards for international data transfers, including Standard Contractual Clauses and other mechanisms approved by relevant regulatory authorities. We encourage users in the European Economic Area, the United Kingdom, Switzerland, and other jurisdictions with data transfer restrictions to review the relevant third-party privacy policies to understand how their data may be processed in connection with these services.
9. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding personal data, including the right to access, correct, delete, restrict, or port your personal information, as well as the right to object to certain processing activities and the right to withdraw consent. Since Depo Tool does not collect, store, or process any personal data, these rights are effectively moot in the context of our Application. There is no personal data to access, correct, delete, restrict, or port, and there is no processing to object to or consent to withdraw from. Nevertheless, we respect and support your data protection rights in principle and in practice. If you have interacted with any of the third-party services referenced in this Privacy Policy (such as Cloudflare, GitHub, or Valve Corporation), you may exercise your data rights directly with those entities in accordance with their respective privacy policies and applicable law. With respect to the Application itself, you have the following choices and controls at all times: you may uninstall the Application at any time, which will remove the Application from your device but will not affect any files previously written to your Steam directory; you may manually delete any files created by the Application in your Steam directory; you may review the source code to verify the Application's data handling practices; you may use network monitoring tools to verify that the Application does not transmit personal data; and you may choose to build the Application from source rather than using pre-built binaries, thereby ensuring complete control over the code running on your device.
10. Changes to This Privacy Policy
We reserve the right to modify, amend, or update this Privacy Policy at any time at our sole discretion. Any changes to this Privacy Policy will be effective immediately upon posting the revised version on our website and within the Application's documentation. We will indicate the date of the most recent revision at the top of this Privacy Policy by updating the "Last Updated" date. It is your responsibility to review this Privacy Policy periodically to stay informed about our privacy practices. Your continued use of the Application following the posting of any changes to this Privacy Policy constitutes your acceptance of those changes. If we make any material changes to this Privacy Policy that significantly affect your rights or our obligations, we will make reasonable efforts to notify you through prominent notice on our website, through our GitHub repository, or through other appropriate communication channels. We encourage you to watch our GitHub repository for notifications of significant changes to this document. For the avoidance of doubt, no change to this Privacy Policy shall have retroactive effect, and any material change that expands the scope of data collection or introduces new categories of personal data processing will require your affirmative consent before taking effect.
11. Disclaimer and Legal Notices
Depo Tool is an independent, open-source project and is not affiliated with, endorsed by, sponsored by, or in any way officially connected to Valve Corporation, Steam, or any of their subsidiaries or affiliates. The Steam name, Steam logo, and all related marks are registered trademarks of Valve Corporation. All game names, logos, and trademarks referenced within the Application or this Privacy Policy are the property of their respective owners and are used solely for identification and descriptive purposes. The use of these names, logos, and trademarks does not imply any endorsement, affiliation, or sponsorship relationship. This Privacy Policy is provided for informational purposes and constitutes a binding agreement between you and the developers of Depo Tool regarding the handling of information in connection with the Application. This Privacy Policy does not create any attorney-client relationship, fiduciary duty, or professional obligation beyond the commitments expressly stated herein. To the maximum extent permitted by applicable law, the developers of Depo Tool disclaim all liability arising from or related to the privacy practices of third-party services referenced in this Privacy Policy.
12. Contact Information
If you have any questions, concerns, comments, or requests regarding this Privacy Policy or the Application's privacy practices, please contact us through our official GitHub repository by opening an issue or submitting a discussion post. We will make every reasonable effort to respond to your inquiry in a timely and comprehensive manner. For security-related concerns, including potential vulnerabilities or privacy incidents, please use responsible disclosure practices and contact us privately through GitHub's security advisory feature before making any public disclosure. We are committed to working collaboratively with the security research community and will acknowledge and credit responsible disclosures in accordance with industry best practices.