Earning Widget for Steam Developers · GameEarn

Privacy Policy

Effective November 9, 2026

LEEDLAB (“we”, “the developer”) provides Earning Widget for Steam Developers (store name “Earning Widget for Steam Devs”, Home Screen name “GameEarn”, “the app”). This policy explains what information the app handles and how. The app has no sign-up, and we do not collect your name, email address or phone number.

Key on your deviceKept in the Keychain or encrypted with the Android Keystore.

No developer serverSales come from Steam straight to your phone.

No accountWe never ask for your name, email or Steam login.

Diagnostics you controlUsage statistics and error reports can be turned off.

1. The short version

Your Steamworks Financial Web API key and your sales data are stored only on your device and are sent nowhere except Steam’s Financial Web API (partner.steam-api.com), operated by Valve Corporation. The developer cannot see your key, revenue, units, wishlists or game list.

There is no sign-up or login. The app never asks for your name, email address, phone number, or Steam account name and password.
The only server the developer runs is this website (steamearning.leed.at), which receives the anonymous operational events in section 5 if you allow them.
Some device and app information is sent to the providers in sections 4 and 6 for ads, error reports and performance measurement. It never includes your API key or sales data.

2. Information processed only on your device

The following information is used only on your device to provide the app’s features and is never sent to the developer.

Information	Details	Purpose	Where it is stored
Steamworks Financial Web API key	The 32-character key from your Financial API Group	Calling Steam’s Financial Web API on your behalf	iOS: Keychain (an App Group item shared by the app and its widgets) · Android: encrypted with an Android Keystore AES-256-GCM key in the app’s private storage
Sales data	Per day and per game: gross sales, refunds, sales tax/VAT, net sales (USD), units sold and returned; game AppIDs and names	Dashboard, widgets, daily summary notification	A file in the app’s private storage (iOS: the App Group container shared with widgets)
Wishlist and player data	Per day and per game: wishlist adds, deletes, purchases and gifts; the latest concurrent player count	Wishlist balance and players in the dashboard and widgets	The same on-device file
Widget summary	Totals for today, the last 7 days, this month, last month and lifetime, the last 14 days, and the top three games	Drawing Home Screen and Lock Screen widgets	iOS App Group shared storage · Android app-private SharedPreferences
App settings	Theme, revenue basis (net or gross), hidden and manually added games, hide amounts, ad personalization, usage statistics & error reports, daily summary, which tips you have seen, whether you bought ad removal	Making the app behave the way you choose	App-private storage
Notification record	The last date a daily summary was sent	Avoiding duplicate notifications	Storage shared by the app and widgets

The app does not access your contacts, photos, precise location, payment methods or any other personal information.

3. Information sent to Steam (Valve)

To show your own results, the app and its widgets send HTTPS requests directly to Steam. Your key travels in a request header (x-webapi-key), never in a URL.

Host	What is requested	What is sent
`partner.steam-api.com`	Changed dates, detailed sales for a date, wishlist reporting for a game and date	Your API key, the date and AppID requested
`api.steampowered.com`	The public current-player count of a game	The AppID only (no key)
`store.steampowered.com`	A game’s public name when you add it by AppID	The AppID only (no key)

When: checking a key you paste, opening or refreshing the app, background refreshes, and widget refreshes (about once an hour).
Valve receives these requests together with information such as your IP address and handles them under its own privacy policy and the Steam Web API Terms of Use. This is you using Steam’s service directly; the developer does not provide your information to Valve.

4. Advertising and purchases

The app is free and shows banner, native and launch interstitial ads served by Google AdMob (Google LLC). Widgets never contain ads. If you buy ad removal, no ads are requested.

Information processed: advertising identifiers (on iOS, the IDFA only if you allow tracking; the Android advertising ID), IP address, device and app information (model, OS version, app version, language), ad impressions and clicks, and your consent status.
Purpose: serving and measuring ads, preventing fraud and, with your consent, personalized ads.
Consent: where the law requires it (for example the EEA, the UK and Switzerland) the app asks for consent with Google’s UMP message, and you can change it any time in Settings → Privacy options. On iOS the IDFA is used only if you allow App Tracking Transparency.
Your choices: turning off ad personalization in Settings requests non-personalized ads only. On Android you can reset or delete your advertising ID in system settings.
Remove ads: payment is handled by the App Store or Google Play. The app only learns whether you own the purchase.
Your API key and sales data are never used for advertising or given to Google.

Google handles information under the Google Privacy Policy and How Google uses information from sites or apps that use its services.

5. Anonymous operational events

While Usage statistics & error reports is on in Settings, the app sends the events below to the developer’s website (steamearning.leed.at/api/events) so we can see how many people use the app and respond to key errors.

	Details
Events	Install check (new install or first launch after an update), app launch (cold start or return from background), Steam API key added, key check failed with its error kind (`auth`, `permission`, `quota`, `server`, `network`, `unknown`, `storage`), start of the sample-data tour, and the kind of result of the first sales import after a key is added (success, key error, error)
Sent with each event	Platform (iOS or Android), OS version, device model, app version and build number, device language and region setting (for example en-US), key state (added, not added, sample data), number of installed widgets, days since the app was last opened
Never sent	Your API key, any revenue, unit, refund, wishlist or player figure, game names or AppIDs, your name or email address, advertising identifiers, device identifiers
How it is handled	Received by Cloudflare, forwarded as an alert to the developer’s Slack workspace, and stored only as daily totals per platform (for example, how many devices opened the app that day or how many run each app version). Nothing that identifies an individual device or person is stored. Your IP address is used only to block excessive requests and is not stored.
Turning it off	Turn off Settings → Usage statistics & error reports and nothing more is sent.

6. Error reports and performance

Sentry (Functional Software, Inc.): when an error occurs, the error and stack trace, a trail of screen changes and actions just before it, device model, OS version, app version, and sampled performance measurements such as screen load times. The SDK is configured not to send IP addresses or other default personal information, and reports never include your API key or sales data.
EAS Observe (650 Industries, Inc., Expo): performance metrics such as app start and screen display times, and a trail of screen changes (without URL parameters).
Both stop when you turn off Settings → Usage statistics & error reports.
App updates: when the app checks for or downloads an update, the app version, runtime version, platform and IP address are sent to Expo’s servers. This is needed to provide the app.

7. Service providers and international transfers

The providers below process information for the app, which means it may be transferred to and stored in other countries. Transfers happen over HTTPS when the related feature runs.

Provider	Country	Information	Purpose	Retention
Google LLC (AdMob)	United States and other countries with Google data centers	Advertising identifiers, IP address, device and app information, ad interactions, consent status	Serving and measuring ads	Per Google’s policies
Functional Software, Inc. (Sentry)	United States	Error details, actions before the error, device and app information, performance measurements	Diagnosing errors, improving stability	Up to 90 days
650 Industries, Inc. (Expo)	United States	Performance metrics, screen trail, device and app information, IP address	Performance measurement, app updates	Per Expo’s policies
Cloudflare, Inc.	United States and other countries with Cloudflare data centers	The events in section 5; IP address (not stored)	Running this website, receiving events, storing daily totals	Daily totals for 366 days
Slack Technologies, LLC	United States	The events in section 5	Operational alerts for the developer	Up to 1 year

Your API key and sales data are never transferred to any of them. To limit these transfers, turn off usage statistics and ad personalization in Settings and, on iOS, do not allow tracking. The minimum information needed to show ads is part of how a free, ad-supported app works; if you do not want it sent, you can buy ad removal or stop using and delete the app.

8. Retention and deletion

On your device: kept until you remove the key or delete the app. Removing the key in Settings deletes the key, the sales file and widget data together, and widgets switch to “Add your API key”.
Deleting the app: data stored by the app and its widgets is deleted with it. On iOS, Keychain items can survive an app deletion, so we recommend removing the key in Settings first.
Revoking the key: you can revoke the key or delete the Financial API Group in Steamworks at any time. The app then stops receiving new data and asks you to check your key.
Error reports (Sentry): deleted after up to 90 days.
Operational events: Slack alerts are deleted after up to one year, and daily totals after 366 days.
Support email: kept only as long as needed to answer and follow up.
Information past its retention period is deleted promptly in a way that cannot be recovered.

9. Your rights

You can ask to access, correct, delete or stop the processing of your information at any time. Almost everything the app handles exists only on your device, so you can review it in the app and remove it by removing the key or deleting the app. Ad personalization, privacy options, usage statistics & error reports and the daily summary can be changed in Settings at any time.

For any other request, email me@leed.at and we will reply within 10 days. Because operational events are stored only as daily totals, we may be unable to find records about a specific person.

10. Children

The app is a business tool for game developers and is not directed to children under 13 (under 14 in Korea, or the age set by local law). We do not knowingly collect personal information from children, and ads in the app are limited to content suitable for general audiences. If you learn that a child’s information has been processed, contact me@leed.at and we will act promptly.

11. Security

All communication is encrypted with HTTPS (TLS).
The API key is stored with the operating system’s Keychain or Keystore encryption and is sent only to Steam, in a request header.
Only the minimum data needed for widgets is stored, and none of it leaves your device.
The page that shows the anonymous daily totals is protected by a password and login-attempt limits.

12. Contact

Privacy contact: LEEDLAB
Email: me@leed.at
Website: https://steamearning.leed.at

Residents of the Republic of Korea can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).

13. Changes to this policy

This policy takes effect on November 9, 2026. If we change it, we will announce the change on this page and in the app at least 7 days before it takes effect (30 days for changes unfavorable to you).