Post by Hooband in Hero's Hour comments

Viewing post in Hero's Hour comments

Dude.

I'm not going to log in to my steam account via itch.io. That is just way to sketchy. If you want to live up to your promise you should make the key available from my itch.io account page. Didn't expect much to be honest, but his is kind of dissapointing.

Note that the steam log in page states that "Note that thingonitsown.itch.io is not affiliated with Steam or Valve". Not saying that this is intentional, but I for one wont jepoardise my steam login to redeem an 18 dollar game.

ThingOnItsOwn2 years ago(+1)

I haven't heard anyone else with this kind of concern. The way I'm distributing the keys is the way that itch io allows. I don't know how I'd be able to make the key available from your itch Io account page, as you describe

Hooband2 years ago(+1)(-3)

Neither do I. I am not a game developer and as such cannot be expected to know these things.

I am just informing you that I ,as a consumer, do not trust a .io website with the log in details to my steam library containing x amount of dollars worth of games to unlock a purchase of 18 dollars. Especially when I am expressly warned by the steam log in that itch.io is not affiliated with steam. Steam log-ins were leaked some ten years ago because third party sites sold user data to hackers. Humble bundle and other sites are affiliated with steam and as such I trust them more than itch.io.

An example of how to do it would I suppose be to do what the creators of the game "Torchlight" did a long time ago. Users were able to redeem steam codes once the game had made it on to steam by emailing the game developers through a specific email. The customer had to supply a copy of the receipt from the original transaction and were then emailed a steam code in return.

I imagine requesting these codes from steam would entail a similar process to the one game developers go through when they send review copies out to memebers of the press.

Adorable_Kiwi1 year ago

Hello,I don't seem to have gotten a key.

Is there somewhere I can send you proof of purchase to get my key?

Thanks

yese0402 years ago(+1)(-1)

what are you talking about "dude"? you can redeem your key from inside your itch acc,..go to my library-> "download"->claim the key...then use that key to activate the game on your steam....you don't need to log in steam via itch.io lmao

Hooband2 years ago(-2)

So tell me friend: How do I redeem said key via my itch.io library whitout signing in to steam? Since the prompt I get when I press "claim steam key" is to log in to my steam account... via itch.io?

Are there different viersions of the client? Do I have to download some sort of itch.io app?

Or did you just not comprehend my original message?"lmao"

tanmerican2 years ago

I know it's late, but if you click on the sign in through steam button, Steam explains how this sign in works;

Your Steam login credentials will not be shared.
A unique numeric identifier will be shared with thingonitsown.itch.io. Through this, thingonitsown.itch.io will be able to identify your Steam community profile and access information about your Steam account according to your Profile Privacy Settings.
Any information on your Steam Profile page that is set to be publicly viewable may be accessed by thingonitsown.itch.io.

That should help alleviate any fears of your info getting compromised. Also I enabled 2FA several years ago. The only way to log into my account is through the app on my personal cell phone. That all but eliminates risk of unauthorized logins.

leafoAdmin2 years ago

itch.io will never see your password or have access to anything on your account other than what your Steam username is and any other public information on your Steam account. It use’s Steam’s oAauth login which is secure way of verifying your Steam identity to other platforms.

Hope that helps

js10credible2 years ago

Don't want to do this either. Every other Steam redeem is given via a code sent to the email associated with the purchase. This is normal, what's going on here is abnormal and should not be a requirement.

This just seems like an attempt to get more metadata on users or something else sketchy and is extremely disappointing and possibly constitutes fraud.