Privacy Policy

1. Introduction

zer0hour.net (“we”, “our”, or “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our Steam hour boost service at zer0hour.net (the “Service”).

2. Information We Collect

2.1 Information from Discord

When you authenticate via Discord OAuth, we receive and store the following data from Discord:

• Discord User ID (unique identifier)
• Discord username and discriminator
• Email address (if granted by you)
• Profile avatar URL

We only request the identify and email scopes from Discord. We do not access your Discord servers, messages, or friends list.

2.2 Information You Provide

• Steam account username (used to log in and run boost sessions on our servers)
• Steam account password, stored safely and never exposed in plain text. It is used solely to log in and run your boost sessions.
• Steam ID (optional 17-digit identifier, used for profile display only)
• Display username for the platform

2.3 Automatically Collected Data

• IP address (used for rate limiting and fraud prevention)
• Browser type and version
• Pages visited and timestamps
• Order and transaction records
• Boost session logs (start/end times, hours accumulated)

3. How We Use Your Information

We use the collected information for the following purposes:

• To create and manage your account on zer0hour.net
• To process your orders and deliver the boost service
• To communicate with you about your account or orders
• To detect and prevent fraud, abuse, and security incidents
• To improve the Service through aggregated analytics
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored securely in our self-hosted MySQL database. We implement the following security measures:

• Steam passwords are stored safely. Never saved in plain text and never shared
• All data in transit is encrypted using TLS 1.2+
• Session tokens are stored in httpOnly, Secure, SameSite cookies
• Database access is restricted to authenticated internal services only
• Admin access requires role-based authentication

While we use commercially reasonable safeguards, no system is completely secure. We cannot guarantee absolute security of your data.

5. Cookies and Session Data

We use a minimal set of cookies:

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Third-Party Services

We use the following third-party services that may process your data:

• Discord, for authentication (OAuth 2.0). Subject to Discord's Privacy Policy.
• Supabase, for database hosting. Subject to Supabase's Privacy Policy.
• Stripe / PayPal, for payment processing (when applicable). We do not store card numbers. Payments are handled entirely by the payment processor.

7. Data Retention

We retain your data as follows:

• Account data: retained while your account is active
• Order records: retained for 5 years (tax and legal compliance)
• Security logs: retained for 90 days
• Deleted accounts: all personal data removed within 30 days of deletion request

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate data in your profile settings.
• Erasure: Request deletion of your account and associated data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.

To exercise any of these rights, contact us at privacy@zer0hour.net. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out: