Overview

HoursIn ("we," "our," or "us") operates the HoursIn platform, a verified video game review service. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have over your data. We collect the minimum data necessary to operate the platform. We do not sell your data to third parties. We do not run advertising. Our business model does not depend on monetizing your personal information. This policy applies to all users of the HoursIn website and services. By using HoursIn, you agree to the collection and use of information as described in this policy.

Data We Collect

Account Data

When you sign in via Manus OAuth, we receive and store: • Your display name • Your account identifier (used to identify you across sessions) • Your account creation timestamp We do not receive or store your password. Authentication is handled entirely by the OAuth provider.

Gaming Account Data

When you connect a Steam or PlayStation Network account, we store: • Your Steam ID (64-bit numeric identifier) or PSN Account ID • Your Steam display name or PSN Online ID • Your playtime for specific games (queried at review submission time, not continuously synced) • Your trophy/achievement completion status for specific games (queried at review submission time) We do NOT store: your friends list, your full game library, your messages, your payment information, your real name, your email address, or any other data from your gaming accounts beyond what is listed above.

Review Data

When you submit a review, we store: • The review text • Your numeric score (1–10) • The game identifier • Your verified playtime at the time of submission • Your review type (Initial Thoughts or Full Review) • Tags you added • Spoiler flag status • Submission timestamp Reviews are public by default. Your display name is shown alongside your reviews.

Usage Data

We collect standard server logs including: • IP addresses (retained for up to 30 days for security purposes) • Browser type and version • Pages visited and timestamps • Referring URLs We use this data for security monitoring, debugging, and aggregate analytics. We do not use it to build individual user profiles.

Cookies

We use a single session cookie to keep you logged in. This cookie: • Is HTTP-only (not accessible to JavaScript) • Is signed with a server-side secret • Expires after 30 days of inactivity • Is required for the platform to function We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

How We Use Your Data

We use the data we collect exclusively to: • Operate the platform (authenticate you, display your reviews, verify your playtime) • Prevent abuse (detect coordinated review bombing, enforce account age requirements) • Improve the platform (aggregate analytics on which features are used) • Respond to support requests • Comply with legal obligations We do not use your data for advertising, profiling, or sale to third parties.

Third-Party Services

Steam (Valve Corporation)

We use the Steam Web API to verify playtime and achievement data. When you connect your Steam account, we query the Steam API using your Steam ID. Valve's privacy policy applies to data held by Steam. We do not share your data with Valve beyond what is necessary to make API requests.

PlayStation Network (Sony Interactive Entertainment)

We use the PSN API to verify trophy data. When you connect your PSN account, we query the PSN API using your NPSSO token. Sony's privacy policy applies to data held by PSN. We do not share your data with Sony beyond what is necessary to make API requests.

RAWG Video Games Database

We use the RAWG API to provide game metadata (titles, descriptions, images, genres). We do not share any user data with RAWG. RAWG receives only game search queries, not user identifiers.

Infrastructure

Our platform is hosted on cloud infrastructure. Server logs and database backups may be stored on these services. All data is encrypted at rest and in transit.

Your Rights

You have the following rights regarding your data: **Access:** You can view all reviews you've submitted from your profile page. **Correction:** You can edit your review text and score at any time from your profile. **Deletion:** You can delete individual reviews from your profile. To delete your account and all associated data, contact us at [email protected]. We will process deletion requests within 30 days. **Disconnection:** You can disconnect your Steam or PSN account from your profile settings at any time. This removes our stored gaming account identifiers. Note that previously submitted reviews will retain their verified playtime data. **Data Export:** To request a copy of all data we hold about you, contact [email protected]. We will provide a machine-readable export within 30 days.

Data Retention

We retain your data for as long as your account is active. Specifically: • Account data: retained until account deletion • Reviews: retained until you delete them or request account deletion • Gaming account identifiers: retained until you disconnect the account or delete your account • Server logs: retained for 30 days • Session cookies: expire after 30 days of inactivity When you delete your account, we permanently delete all associated data within 30 days. Aggregate, anonymized analytics data may be retained indefinitely.

Security

We take reasonable measures to protect your data: • All data is transmitted over HTTPS • Session cookies are HTTP-only and signed • Database access is restricted to application servers • We do not store passwords (authentication is handled by OAuth) • Gaming account tokens are encrypted at rest No system is perfectly secure. If you discover a security vulnerability, please report it to [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the bottom of this page. Continued use of the platform after changes constitutes acceptance of the updated policy. For significant changes affecting your rights, we will attempt to notify you via the platform.

Contact

For privacy-related questions, data deletion requests, or data export requests: Email: [email protected] General: [email protected] We respond to all privacy requests within 30 days.