NOXIDLESteam session control
← Back to Noxidle

LEGAL

Privacy Policy

Last updated: November 8, 2026

1. Who we are

Noxidle is operated by [Operator / Company Name], contactable at [contact email]. This policy explains what we collect when you use Noxidle, why, and what choices you have.

2. What we collect

We collect only what the Service needs to function:

  • Account data: your email address and password (managed by our authentication provider, Supabase — we never see or store your password in plain text), display name, and an optional profile photo or preset avatar.
  • Steam account data: your Steam ID and persona name, and an encrypted (AES-256-GCM) refresh token used to maintain your session. Your Steam password and any Steam Guard code are used only to authenticate the sign-in request and are never written to disk.
  • Subscription and payment data: your current plan and its status, and — if you use Bitcoin checkout — the order's plan, amount, the fixed address shown to you, its status, and timestamps. We do not collect card numbers or bank details; we have none to collect, since payment is peer-to-peer on the Bitcoin network.
  • Usage data: which games you've selected to idle and accumulated playtime, associated with your linked Steam account, used to show you your own session status.
  • Audit records: a log of account-affecting actions (such as an admin confirming a payment, or you creating or cancelling an order) kept for accountability and fraud prevention.
  • Technical data: standard web server logs and short-lived rate-limit counters keyed by IP address, used to keep the Service secure and prevent abuse. We do not use cookies, and we do not use any analytics or advertising trackers.

3. How we use it

We use your data to: operate your account and Steam session, enforce plan limits, process and manually confirm Bitcoin payments, secure the Service against abuse, and communicate with you about your account (for example, email confirmation) through our authentication provider.

4. Who we share it with

We do not sell your data. It is processed by the following service provider on our behalf:

  • Supabase — hosts our database, authentication, and (if you upload a custom avatar) file storage.

We also interact with Steam/Valve's own servers to operate your linked Steam session; Steam's handling of that interaction is governed by Valve's own privacy policy, not this one. We do not use any other third-party service, and we do not load resources (such as fonts or scripts) from any other external host.

5. How long we keep it

We keep your data for as long as your account exists. You can permanently delete your account, linked Steam account, and associated records at any time from Profile & security. Some records — such as completed payment orders and audit entries tied to admin actions — may be retained after account deletion where we have a legitimate accounting or fraud-prevention reason to do so.

6. Security

Steam refresh tokens are encrypted at rest. Passwords are never handled by our own servers in plain text — authentication is delegated to Supabase. We recommend accessing Noxidle only over HTTPS and using a unique password for your account.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, and to object to or restrict certain processing. You can access and correct most of your data directly from your account, and delete your account entirely at any time. For anything you can't do yourself, contact [contact email].

8. Children's privacy

Noxidle is not directed at children and is not intended for use by anyone below the age of majority in their jurisdiction without appropriate consent, as described in our Terms of Service.

9. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above when we do.

10. Contact

Questions about this policy, or requests regarding your data, can be sent to [contact email].