Last updated: March 8, 2025 Developer: Alzek Contact: alzekltd@gmail.com
This Privacy Policy explains how the HoleZ application ("App", "we", "us") handles your information. By using the App, you agree to the practices described here.
Steam credentials: Username, password, and Steam Guard codes. These are used exclusively to authenticate with Valve Corporation's Steam servers and are never transmitted to any server operated by us.
App settings: Farming preferences, blacklist, and UI configurations.
Steam session tokens: Refresh and access tokens received from Steam after successful login, stored locally in an encrypted Room database on your device.
Badge and game data: Card drop counts and playtime fetched from your Steam badge pages, stored in memory during the session and in a local database for farming history. Never sent to third-party servers.
We do not collect any analytics, crash reports, or usage statistics.
We do not use any advertising, tracking, or fingerprinting SDKs.
We do not have our own backend servers. The App communicates only with Valve Corporation's Steam servers (steamcommunity.com, store.steampowered.com).
Purpose Data Used
Authenticating with Steam
Username, password, Guard codes, session tokens
Farming trading cards
Session tokens, badge/game data
Restoring session after reboot
Encrypted refresh token (local only)
Displaying farming history
Local DB records (never uploaded)
All data is stored locally on your device only, in an encrypted SQLite database managed by Android Room.
Steam credentials (username/password) are used in memory during login only and are not persisted to disk after authentication.
Session tokens are stored in the encrypted local database and never transmitted to any server other than Valve's official Steam servers.
We do not have access to your data at any time.
The App communicates exclusively with:
Valve Corporation — Steam CM servers and steamcommunity.com (subject to Valve's own Privacy Policy: https://store.steampowered.com/privacy_agreement)
No other third-party service, SDK, or API is used.
During use: Session data is kept locally for seamless reconnection.
On logout: Session tokens are deleted from the local database.
On uninstall: All locally stored data — including account info, tokens, settings, and farming history — is automatically and permanently deleted by Android.
You may also clear all app data manually at any time via: Android Settings → Apps → HoleZ → Storage → Clear Data.
Since all data is stored locally on your own device and we have no backend servers, we have no access to your personal data. Therefore:
Right to access: All your data is already on your device. You can inspect the app database directly.
Right to deletion: Uninstalling the App or using "Clear Data" permanently deletes all associated data.
Right to portability: Not applicable — we hold no data on our end.
Right to object: You may stop using the App at any time.
For any privacy-related requests, contact us at alzekltd@gmail.com.
The App is not intended for users under the age of 13. We do not knowingly collect information from children under 13. Additionally, Valve Corporation's Steam platform itself requires users to be at least 13 years of age.
If you believe a child under 13 has used this App, please contact us and we will provide guidance on removing all local data.
We may update this Privacy Policy to reflect changes in the App or applicable law. Updates will be posted at the same URL with a revised "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.
Email: alzekltd@gmail.com App name: HoleZ Package ID: com.alzek.steamcard