Privacy Policy

Elio · elio.farm · updated 27 July 2026

Elio operates this panel as a hosted service. We run the servers, and the data described below lives in our database. This page says exactly what we keep, why, and who else can see it.

What we store

• Your account — your username and a bcrypt hash of your password. We cannot read your password, and we do not ask for an email address. If you connect Discord, we also store your Discord id and username.
• Sessions and security — a session identifier, the IP address and browser you signed in from, and an audit log of actions taken in the panel with their IP addresses.
• Billing — wallet top-ups, subscription charges, API keys and their status. We never see your card or wallet details.
• Your fleet — the machines you link (name, hostname, hardware ID, IP address, screen previews), the Steam accounts you add (username, level, XP, ban status, game results, drops), jobs and their history.

Credentials you give the panel

Running a farm means the panel holds real secrets: Steam passwords, Steam shared and identity secrets, SSH passwords for your VMs and Steam Web API Keys. These are encrypted at rest and are used only to operate the fleet you asked us to operate. Your panel password is hashed, not encrypted — nobody, including us, can recover it.

Who else sees it

• Our hosting provider — the servers this panel and its database run on.
• Cloudflare — sits in front of elio.farm and processes connection data, including your IP address.
• Steam — when the panel checks a bot's bans, level or profile, that account's Steam ID goes to the Steam Web API.
• Our payment provider — when automated crypto checkout is enabled, it processes the transaction. It receives payment data, not your fleet data.

We do not sell your data, run advertising trackers, or send analytics to third parties. Anonymous machine usage stats are opt-in per machine in that machine's settings.

How long we keep it

Account, billing and fleet records are kept while your account exists. Deleting a machine or bot removes its record and its stored credentials. Ask us to close your account and we delete it, keeping only what we must for accounting.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account. Write to us through the support channel published in the panel.