Privacy Policy

The short, plain-English version of how we handle your data. We collect only what we need to run the service, and we never sell it or use it for ads.

What we collect

• Your account - username, an email if you add one, and a hashed password (never the password itself).
• Steam login material you add so we can idle games for you (see below).
• Usage - which games you idle and the hours you accrue.
• Optional extras you choose to add - a profile picture, a review, or a linked Discord/Google account.

Your Steam credentials

To idle for you, our servers sign into Steam as your account. If you sign in with Steam or a QR code, we never see a password at all. If you use a password, it's encrypted at rest and never stored or shown in plain text - it's only decrypted in memory for a moment to log in. We never touch your Steam payment details, and we never sell or share your credentials.

How it's protected

The whole site is HTTPS-only. Steam credentials, tokens and Steam Guard secrets are encrypted at rest, with the key kept separate from the database. Our servers are in the European Union (Germany).

Keeping & deleting your data

You're in control. Remove a Steam account to delete its stored credentials instantly, or delete your whole HourIdler account from the dashboard to remove your personal data. We keep only what we're legally required to for billing records.

Leaderboard & reviews

The public leaderboard shows your username and total idle hours - you can hide yourself any time under Profile → Account settings. Reviews you post show your username and can be deleted by you whenever you like.

Cookies

One first-party cookie to keep you logged in. No advertising or cross-site tracking cookies.

Children

You must be 16 or older (or the minimum age in your country) to use HourIdler.

Contact

Questions, or want your data deleted? Reach us through our support center or on Discord.