IdleDeck

Privacy policy

Translation provided for convenience; if there is any discrepancy, the Portuguese version prevails.

Applies to the IdleDeck app for Windows (site installer and Microsoft Store version) and to this site. Last updated: October 4, 2026.

In one sentence

The games run on your computer and what's yours stays there. Our server only knows the minimum for your account to exist and for us to count how many people use IdleDeck.

What stays only on your computer

None of this is ever sent to us:

  • game accounts, open sessions and each one's cookies;
  • the logins stored in the vault (email, password and notes), encrypted by Windows and, if you want, by a master password;
  • the event history, each game account's uptime, Ping's name and the games you play with him, watched texts, settings and screen thumbnails;
  • the Discord webhook address and your Telegram bot token, if you set them up: alerts go from your computer straight to Discord or Telegram, without passing through our server;
  • your TopIdle sign-in, if you vote through the app: it stays in the browser of the game account where you signed in, like in any browser.

In the Microsoft Store version, Windows deletes this data when you uninstall the app. With the site installer, it stays in the data folder until you delete it.

What the app sends to our server

  • An anonymous computer code, calculated from a Windows identifier and scrambled (hashed): it's used to recognize the same machine without knowing whose it is.
  • The app version.
  • The link code that ties the computer to your account. The site password is never typed into the app: you confirm the link yourself, signed in, in the browser.

This check happens when the app opens and from time to time while it's open. The app only gets back your masked email (for example, ma•••@exemplo.com), to show which account is linked, and the list of your account's Ping achievements (see below).

Ping's achievements: with a linked computer, that same check sends the list of Ping's achievements (the name of each one and the date it was earned), so Ping's level follows your account to another computer. That's all: no hours of use, counts, Ping's name, games or accounts. Without a linked computer, none of this is sent.

"App open" signal: while the app is open, every 5 minutes it tells our server that it's on, and tells it again when you close it or the computer goes to sleep. Only the anonymous computer code and the app version are sent. That's how we know how many people are using IdleDeck right now and how long each account uses the app. Who is online stays only in the server's memory, for a few minutes; what we keep is the count — how many accounts and how many computers had the app open in each 5-minute slot, totals only — and, in the account the computer is linked to, the total time the app has been open: a single number, added up from these signals (we don't keep when each period happened). This signal also counts as "used the app today" and updates when the computer was last seen.

Problem reports and suggestions are only sent when you click send. The diagnostics that go with them are anonymized (accounts by number, no names, emails, passwords, full addresses or watched texts) and you see the whole content before confirming. With the computer linked, the form comes with the Reply to my account's email option checked: when checked, the app sends the computer's link code along, and our server uses that code only to tie the report to your account so we can reply to your email (the code is not stored with the report). When unchecked, the report arrives with nothing that identifies you — neither the computer nor the account. In no case is the sender's IP address stored with it: it's only used to limit abuse. You can also leave another contact in the report itself. Conversation: along with the report, the app creates a random code just for it, and our server stores only a fingerprint (hash) of that code. With it, the app checks for our replies from time to time while the report is open and sends yours, the "resolved" mark and the rating you give — without the computer code or the account.

When uninstalling (site installer), the app opens a farewell screen with an optional field: "why are you leaving?". Only if you write something and click Send and uninstall do the text and the app version go — without the account, without the computer code, and the sender's IP address is not stored (it's only used to limit abuse). If you don't write anything, nothing is sent. In the Microsoft Store version this screen doesn't exist.

Your feedback: every 10 days (the first time, 10 days after you start using it), the app asks how your experience is going, with an optional field. Only if you write something and click Send do the text and the app version go — without the account, without the computer code, and the sender's IP address is not stored (it's only used to limit abuse). With no internet, the answer waits on your computer until it can be sent (for at most 7 days). Closing or clicking "Not now" sends nothing, and "Don't ask again" turns the question off.

Recommended games: the add-account screen and the banner at the top of the app (marked as an ad) show a list of games we recommend, downloaded from our server along with each game's icon and banner. That request carries only the app version, and the list is the same for everyone; the images also come from our server, as soon as the list changes — not when they appear on screen —, and no image is loaded from other sites. The only exception is the video some games have on the page the banner opens: it comes from YouTube (Google) and only loads when you click to watch it — then YouTube receives your IP address and whatever its player records, under Google's privacy policy; the player uses YouTube's privacy-enhanced mode (youtube-nocookie.com). We don't find out who watched. Some links are referral (affiliate) links, and the app says so next to them, in the banner and before creating the account. If you pick one, the game's page opens on your computer, like any site: when you open a recommended game's page, click its video, close the page without playing, close the banner or confirm creating an account through a recommended game, the app tells our server only which game it was, what happened and whether it came from the banner or the list — without the computer code, without your account and with nothing that identifies you; the server adds it to a daily counter and doesn't store the IP address of that request. That's how we know how each recommendation is doing. We don't find out who did each of these things, and whoever learns that you arrived through a referral (and whether you finished signing up) is the game itself, under its own policy.

Voting on TopIdle: on accounts of games listed on TopIdle (an idle games ranking site), the app shows a button to vote for the game without leaving the app. For that, the app itself — not our server — checks TopIdle: the public list of games, with nothing that identifies you, and, only on accounts where you signed in to TopIdle, whether that account's vote is open, using its sign-in. You cast the vote yourself, on the TopIdle page, and what you enter there follows TopIdle's privacy policy. None of this goes through our server, and accounts of games that are not on TopIdle make no requests at all.

What the site keeps

  • Account: your email and password, stored only as a hash (not even we can read it).
  • Site sessions: when you sign in, we keep the date, the IP address and the browser identification, to protect the account. Sessions expire on their own and you can end them by signing out or changing your password.
  • Linked computers: the machine's anonymous code, the app version and when it was first and last seen.
  • Time with the app open: in your account, how long, in total, the app has been open on the computers linked to it (two open at the same time count once), based on the "app open" signal. It's a single number — we don't keep when each period happened — and it stays while the account exists.
  • Usage counts: how many distinct accounts and computers used the app each day, and how many had the app open in each 5-minute slot — totals only, without saying who.
  • Download counts: how many times each day someone downloaded IdleDeck from the site — through the Microsoft Store, with the site's installer or by clicking "Download" outside Windows — totals only. We don't keep the IP address, the browser or anything that says who downloaded: the IP stays in the server's memory for only 30 minutes, so the same download isn't counted twice.
  • Support messages: the email and text you send through the support page, so we can reply.
  • App reports: title, text, contact (if you fill it in), app version, the anonymized diagnostics and, if you leave "Reply to my account's email" checked, which account the report belongs to — from the problem reports and suggestions you send. Along with them we keep the conversation (our replies and yours), whether you marked it as resolved and the rating you give. A resolved report is deleted automatically 180 days later; to delete one before that, ask through support (if it was anonymous, tell us the title and the day you sent it).
  • Farewells: the text you write on the farewell screen when uninstalling the app and the app version — no account, computer code or IP. They are deleted automatically 1 year later; since they don't say whose they are, to delete one before that, ask through support telling us the text and the day.
  • Feedback: the text you write in the "How's IdleDeck working out for you?" popup and the app version — no account, computer code or IP. It's deleted automatically 1 year later; since it doesn't say whose it is, to delete one before that, ask through support telling us the text and the day.
  • Ping's achievements: the list of your account's Ping achievements (the name of each one and the date), sent by your linked computers. We keep it while the account exists.
  • Past donations: for donations made through the per-account deposit addresses until September 25, 2026, the amount, date and ID of each transaction (which are already public on the blockchain) are kept for our accounting.

The server also keeps, for a short time, technical access logs (which may include the IP address) for security and to limit abusive login attempts.

What we use it for

To keep your account working, know how many people use IdleDeck and how much they use it, protect the service against abuse and handle support requests. We don't use your data for ads and we don't create behavior profiles.

Who we share it with

We don't sell or hand over personal data. It stays on a server rented from a hosting provider in Brazil, which processes it only to keep the service running. If you installed from the Microsoft Store, Microsoft handles the installation data under its own policy; we only receive aggregate numbers.

Cookies

The site uses only two cookies: your session cookie, needed to keep you signed in, and your chosen-language cookie. There are no tracking, advertising or third-party cookies.

If you choose a language on the site (PT, EN or ES) — or arrive through an English or Spanish address —, the idioma cookie stores only that choice, for 1 year. It doesn't measure anything or identify you.

For how long

Account data is kept while the account exists. Daily usage and download counts are deleted after about 13 months, and farewells and feedback 1 year after they arrive. When you delete the account, we delete the data linked to it, except what the law requires us to keep.

Your rights

Under Brazil's General Data Protection Law (LGPD), you can ask to see, correct, take or delete your data, and ask questions about how it's handled. Just contact us through the support page. You can also unlink a computer at any time in My account or in the app itself.

Minors

IdleDeck is not aimed at children. People under 18 should use the service with the permission of a parent or guardian.

Changes to this policy

If something important changes, we'll announce it on the site and update the date at the top of this page.