Privacy Policy
Last updated: 3 October 2026
This policy explains what personal data we process when you use this website, why, and what rights you have. It applies to this website and all related services.
1. Controller
CS2skinmarket, Presidentinpuistokatu 18, Pori, Finland is the controller of your personal data. Contact for privacy matters: [email protected].
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Steam identity | SteamID64, public profile name, avatar, profile URL | Steam OpenID and Steam Web API |
| Trading data | Steam trade URL, Items offered and received, trade history, Item values | You and Steam |
| Technical data | IP address, browser and device type, timestamps, security logs | Your browser |
| Support data | Email address and messages you send us | You |
| Verification data (only if requested) | Name, date of birth, ID document, proof of address | You, via our verification provider |
| Marketing measurement (only with consent) | Ad click identifiers, conversion events, cookie IDs | Google Ads / Google Analytics cookies |
We never receive or store your Steam password, Steam Guard codes, or your Steam email address.
3. Why we use your data and our legal basis
- To provide the Service — sign-in, showing your inventory, creating and completing trades (performance of a contract, Art. 6(1)(b) GDPR).
- To keep the Service secure — preventing fraud, abuse and account takeover (legitimate interests, Art. 6(1)(f)).
- To meet legal obligations — anti-money-laundering checks, sanctions screening, tax and accounting records (legal obligation, Art. 6(1)(c)).
- To answer support requests (contract / legitimate interests).
- To measure advertising and improve the site — only if you accept analytics/advertising cookies (consent, Art. 6(1)(a)). You can withdraw consent at any time via "Cookie settings" in the footer.
4. Sharing
We share data only where needed:
- Valve / Steam — trades run through Steam, which processes data under its own privacy policy.
- Hosting and infrastructure providers that operate our servers.
- Google (Google Ads, Google Analytics) — only if you consent to those cookies.
- Identity verification and payment providers — only if verification or payments apply to you.
- Authorities — where required by law or to protect our rights.
We do not sell your personal data.
5. International transfers
Some providers (such as Google or Valve) may process data outside the EEA/UK. Where this happens we rely on adequacy decisions (for example the EU–US Data Privacy Framework) or Standard Contractual Clauses.
6. How long we keep data
- Session cookie: up to 30 days, or until you log out.
- Account and trade records: for as long as your account is active and up to 5 years afterwards, to meet AML and accounting obligations.
- Security logs: up to 90 days.
- Support emails: up to 2 years after the request is closed.
7. Your rights
Depending on where you live you have the right to access, correct, delete, restrict or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time. To exercise them, email [email protected] from the address linked to your request, or contact us while signed in. We reply within one month.
You may also complain to your local data protection authority.
8. Children
The Service is for adults aged 18+. We do not knowingly collect data from minors and will delete it if we learn we have.
9. Security
We use HTTPS everywhere, signed session cookies, access controls and logging. No system is perfectly secure; if a breach affects you we will tell you as required by law.
10. Cookies
See our Cookie Policy for the full list.
11. Changes
We may update this policy and will change the date at the top. Material changes will be announced on the site.