Sign in Create account

Privacy policy

Last updated 3 November 2026.

1. Who is responsible

Bogdan Laiet, 11Trubys Garden, Milton Keynes, MK6 5HA (“we”) runs SteamIdlerMachine and is the controller of your personal data. Contact us about anything in this policy at support@steamidlermachine.com.

2. What we collect and why

  • Your website account: your email address and password (stored only as a one-way hash, never readable), your optional two-factor secret, your referral code and who referred you, and any promo code you used. We need these to run your account and to apply rewards and discounts.
  • Your Steam account: your SteamID64 and your public Steam profile name and picture, your game library and playtime as Steam shares them (so you can pick games), the games you choose to idle, your “Playing now” choice, and your chat bot settings and commands. We need these to provide the service.
  • Your Steam sign-in session: when you sign in with the Steam app’s QR code, Steam gives us a session token so our servers can stay signed in. We never see your Steam password or Steam Guard codes. You can end the session at any time from your account page or in Steam.
  • Steam chat: if you turn on the chat bot, it reads messages your Steam friends send you so it can reply with your away message or commands. We don’t store those messages.
  • Service records: idle hours, connection status, sign-in and restart events, and a log of recent activity on your account (such as starting idling or changing games). We use these to show you your dashboard, keep the service running and handle support.
  • Payments: payments are handled by Stripe. We never see or store your card number. We keep your Stripe customer and subscription IDs, the package you bought, amounts, dates and invoice numbers, because we need them for your subscription and are required to keep billing records.
  • Technical data: your IP address is used briefly to limit repeated sign-in attempts and to show prices in your country’s currency (looked up on our own server with the DB-IP database, so it isn’t sent anywhere), and it appears in our server logs, which are kept for a short time and then overwritten. We use a single essential cookie that keeps you signed in for up to 14 days. We don’t use analytics, advertising or tracking cookies.

3. Our legal bases (UK and EU GDPR)

We process your data to perform our contract with you (running your account and the service), for our legitimate interests in keeping the service secure and preventing fraud and abuse, and to meet legal obligations such as keeping tax and billing records.

4. Who we share it with

  • Stripe, our payment processor, for checkout, subscriptions and invoices.
  • Valve (Steam), because the service connects to Steam on your behalf and reads your public profile and library through the Steam Web API.
  • Our hosting and backup providers, who store the service and its encrypted backups for us.
  • Our email provider, which delivers account emails such as password reset links.
  • Discord, where we receive private operator alerts. These can include your Steam profile name and account number, for example when your account needs a new Steam sign-in.

Some of these companies may process data outside the UK and EEA. Where they do, they use legally recognised safeguards such as standard contractual clauses. We don’t sell your data and we don’t share it for advertising.

5. How long we keep it

We keep your account data for as long as your account exists. When you remove a Steam account from your profile, its games, chat bot settings and saved Steam session are deleted. Our encrypted backups are kept for 14 days. Billing records are kept for as long as the law requires, normally 6 years in the UK.

6. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. To close your account and delete your data, email support@steamidlermachine.com. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

7. Security

Passwords are hashed, saved Steam sessions are stored with restricted access on our servers, backups are encrypted, and the site is served over HTTPS. You can protect your account further by turning on two-factor sign-in in Settings.

8. Age

You must be old enough to have your own Steam account and to agree to these terms. If you’re under 18, you need permission from a parent or guardian to buy a package.

9. Changes

If we change this policy in a way that matters, we’ll update the date above and tell you on the site before the change applies.