Privacy policy

Last updated: November 1, 2026

Too Many Hands is made by an independent developer in Alberta, Canada ("we" or "us"). This policy explains what data the app and our servers handle and why.

The short version

• Your game stream and your keyboard and mouse input are end-to-end encrypted. We can't see them.
• Our matchmaking server sees your Steam ID, your IP address, room codes and how long you host.
• Logs stay on your PC unless you choose to send them.
• No ads. No tracking. We never sell your data.

What our matchmaking server sees

A small server on Cloudflare connects hosts and friends. It never sees the stream. It handles:

• Your Steam ID. We use it to check whether you own Pro and to count free hosting minutes.
• A Steam login ticket. We pass it to Valve to confirm who you are. We don't keep it.
• Your IP address. Needed so the host and friends can find each other.
• Room codes. Used to put friends in the right session.
• Session timing and minute counts. When a session starts and ends and how many minutes you hosted that day. This is how the free 60-minute daily limit works.

What we can't see

The game stream and every key press and mouse move travel directly between the host and friends (peer to peer). They are end-to-end encrypted with a key set up from the room code. Our server never gets that key.

Sometimes a direct connection fails, often because of a strict router. Then a relay server passes the traffic along. The relay only handles encrypted data it can't read. It sees the IP addresses involved and how much data passes through.

Logs on your PC

The app writes logs to your own PC to help fix problems. They can include your Windows version, the name of the shared game window, connection steps and errors. They stay on your PC. We only get them if you choose to send them, for example with the "Send logs" button.

What we don't do

• We don't show ads.
• We don't use analytics or tracking tools.
• We don't sell or rent your data.
• We don't share your data with anyone except the service providers below.

Who handles data for us

• Cloudflare runs our website, the matchmaking server and a backup relay.
• Hetzner runs our main relay server.
• Valve runs Steam. Steam handles your account, Pro purchases and refunds under Valve's own privacy policy.

These providers may process data in the US, the EU and other countries.

How long we keep data

Legal basis (for users in the EU and UK)

• To provide the service you asked for: matching, connecting and checking Pro.
• Our legitimate interests: enforcing the free limit and stopping abuse of our servers.
• Your consent: logs you choose to send. You can withdraw consent at any time.

Your rights

You can ask us to:

• tell you what data we hold about you
• correct it
• delete it
• send you a copy
• stop using it for a purpose you object to

Email hello@toomanyhands.app from any address and include your Steam ID. We'll reply within 30 days. You can also complain to a privacy regulator: in Alberta the Office of the Information and Privacy Commissioner, elsewhere in Canada the Office of the Privacy Commissioner of Canada, and in the EU or UK your local data protection authority.

Children

Too Many Hands isn't meant for children under 13 and we don't knowingly collect data from them. If you think a child under 13 has given us data, email hello@toomanyhands.app and we will delete it.

Changes

If we change this policy we'll post the new version at https://toomanyhands.app and update the date at the top. For big changes we'll also show a notice in the app.

Contact

Email hello@toomanyhands.app. Too Many Hands is based in Alberta, Canada.