Privacy Policy

Last updated July 30, 2026

What we store

Your email address and password hash (held by our authentication provider, Supabase), your subscription state, and the Steam accounts you add: their labels, game lists, settings, accumulated playtime, and worker logs. If you add an account with a password, that password is encrypted with AES-256-GCM before it is stored. If you use QR sign-in, we never receive your password at all — only a Steam-issued session token, also stored encrypted. The security page walks through what HourFarming does and never does inside a Steam account, in plain words.

What we do with it

One thing: run your fleet. Steam credentials are used exclusively to sign into Steam and are never sent to any third party — including our own authentication provider. We don’t sell data, we don’t share it with advertisers, and we don’t use it to train anything.

Who else touches data

Supabase (authentication and billing state), Stripe for card payments (sees your email and card details — we never see your card number), Paddle for card payments (acts as merchant of record — sees your email, card details, and billing country; we never see your card number), PayPal for PayPal subscriptions (sees your PayPal account and the payment — nothing else about your fleet), NOWPayments for crypto payments (sees the cryptocurrency and wallet address you pay from — used only if you choose to pay with crypto), Cloudflare Turnstile (a bot-check shown on sign-up, sign-in, and password reset — it sees your IP address and device signals to prove you’re not a bot; it never sees your password or anything in your Steam accounts), and Google Analytics (anonymous usage statistics: pages visited, browser type, rough location — never your email, Steam accounts, or anything from your fleet) are the only third parties involved. Each sees only what its job requires, and each payment processor is involved only if you pick that payment method. Analytics loads only after you accept it in the cookie notice; declining changes nothing about how the service works.

Deletion

Deleting a Steam account from the panel removes its credentials and logs from our systems immediately; its farming statistics (Steam login, profile id, hours per game) are retained so they can be restored if you add the same account again, and are removed with your HourFarming account. Deleting your HourFarming account removes everything, including your email, within 30 days.

Questions

Email us and a human answers: support@hourfarming.com.