How it works

Say you just finished Cyberpunk 2077.

In it you level up a character and shoot in first person, so Next Up looks for games where you do those things too. One card from that list:

  • Cloudpunk

    • Story
    • Solo
    • Less played

    What carries over

    • Keeps: level up a character
    • Doesn’t keep: shoot in first person

    What changes

    New here: drive, a female lead

    Why you’d like it

    Cloudpunk shares Cyberpunk 2077’s neon cyberpunk city setting, but you spend one night as a delivery driver flying a hover car.

Privacy

To learn whether this works, the page records how it’s used. This is all of it.

What’s recorded

Searches

The text you type is never sent to Next Up. If it matches a game Next Up knows but has no list for, only that game’s number is recorded. If it matches nothing, only the fact that it matched nothing is recorded, with a rough length such as 4 to 6 characters.

Suggestions show a small image of each game, loaded straight from Steam’s image servers. So while you type, Steam sees which games’ images your browser asks for, though not the text itself.

The random ID

Your browser keeps a random ID for up to 6 months after your last visit, so repeat visits can be counted. It’s created when the first batch of this record goes out, which is your first action or the first time you leave or switch away from the page, whichever comes first. It’s stored in this browser, not in a cookie.

The ID is kept like this only in the US, Canada outside Quebec, Australia and New Zealand. Everywhere else, nothing is stored for it: the ID lasts only until you close or reload the tab, so a return visit counts as a new one. That’s decided from the location Cloudflare reports for your connection, so a VPN can change it. If it reports no country, or Canada with no region, nothing is stored either.

From your connection

The record keeps your country and region, device type, operating system and browser family, language, and the kind of site you came from. Your IP address, city and network aren’t stored, and this recording uses no cookies. Cloudflare may set a security cookie of its own.

Who else sees a visit

Cloudflare hosts the page and this data, and handles your connection like any web host. Store links and Steam searches go to Steam only if you click them, and Steam then sees that visit.

Game art loads straight from Steam’s image servers (shared.akamai.steamstatic.com and shared.fastly.steamstatic.com): on the first screen’s game tiles as soon as it opens, in search suggestions as you type, and on each list. So your browser contacts Steam for those images, and Steam sees that connection and which games’ images were asked for.

Google Analytics is blocked on this page by its security policy, but the rest of pmatta.design uses it.

AI-written lines

The “Why you’d like it” lines on cards were written by AI ahead of time and checked by a second AI pass. No AI runs while you browse.

How long it’s kept

Up to 13 months.

Turn counting off

Turning it off stops this browser sending anything and removes the ID. The choice is kept in this browser, so clearing site data turns counting back on, and so can a browser that clears such data by itself, as Safari can after 7 days without a visit. If your browser sends Global Privacy Control, counting is already off, and the ID is removed. What was sent before you turned it off is kept for up to 13 months, like the rest.

To ask about any of this, write to privacy@pmatta.design.