Privacy Policy

SteamBoost is an independent, hosted Steam-idling service. We are not affiliated with, endorsed by, or sponsored by Valve Corporation. "Steam" and the Steam logo are trademarks of Valve Corporation, used here only to describe what our service works with.

What we collect

• Account details: the username, email, and password you register with (your password is hashed with bcrypt - we never store it in readable form).
• Steam login material that you choose to add so we can idle games on your behalf - see the section below.
• Usage data: which games you idle, hours accrued, and basic logs needed to keep accounts online.
• Optional links: a Discord or Google identity if you use "Sign in with" or link your Discord.

Your Steam credentials - how they are protected

To idle games for you, our servers log into Steam as your account. You can do this three ways, in order of how little we ever touch:

• Sign in through Steam (recommended): uses Steam's official OpenID - you authenticate on Steam's own site and we never receive your password.
• QR code: you approve the login in your Steam mobile app; we store only the resulting refresh token, never a password.
• Password: if you choose this, the password is encrypted at rest with Fernet (AES) and is never stored, logged, or displayed in plaintext. It is decrypted only in memory, momentarily, to log into Steam.

Steam-Guard secrets and session tokens are encrypted the same way. We never ask for, want, or store your Steam payment details. We do not sell, rent, or share your Steam credentials with anyone.

Third parties we use

• Stripe - payment processing. Card details go directly to Stripe; we never see or store them.
• Discord / Google - only if you choose to sign in with or link them; we receive a verified email and an account id.
• Resend - sends transactional email (welcome, password reset).
• Cloudflare - CDN and DDoS protection in front of the site.

How we use your data

Strictly to run the service: keep your Steam accounts idling, show your dashboard, process billing, send account email, and provide support. We do not sell your data or use it for advertising.

Retention & deletion

You can remove a Steam account at any time from your dashboard - this immediately deletes its stored credentials and session files. Deleting your SteamBoost account removes your personal data. You can also request deletion by email.

Cookies

We use a single first-party session cookie to keep you logged in. No third-party advertising or tracking cookies.

Contact

Questions or a deletion request? Reach us on Discord or by email at the address on our site.