Privacy Policy

1. Who is responsible

The controller of your data is the operator of SteamCards.Trade. Contact: contact@steamcards.trade.

2. Data we collect

Steam account data: your SteamID64, display name and avatar, received when you sign in with Steam (OpenID). We never receive your Steam password or Steam Guard codes.

Trade details: the Steam Trade URL you save (it contains a trade token), used only to send you trade offers.

Inventory data: a copy of your public Steam inventory items (trading cards, emoticons, backgrounds, TF2 keys) from your last sync, used to show what you can sell and to prepare orders.

Orders and credits: the items, prices, status and dates of your orders and your credit balance.

Technical data: a session cookie, and the usual technical information in server logs (IP address, browser, requested pages, time) for security and troubleshooting.

Price data you may contribute: if you use the optional price-logger userscript, item names and displayed prices read from your own browser. It does not read personal data.

3. Why we use it and on what basis

To provide the service you asked for: sign-in, showing your inventory, creating and delivering orders and keeping your balance (contract).

To protect the service: preventing fraud, abuse and scams, enforcing our terms, fixing errors and keeping records of trades (legitimate interests).

To comply with the law, for example tax, accounting or requests from authorities (legal obligation).

To remember your preferences in your browser, only if you allow it (consent). See the Cookie Policy.

We do not use your data for advertising, profiling or analytics, and we do not sell it.

4. Who we share it with

Steam / Valve Corporation: sign-in, inventory data and trade offers go through Steam, under Valve’s own privacy policy.

Hosting and infrastructure providers that run the site for us, bound by data processing terms.

Authorities when the law requires it.

Images of games and items are loaded directly from Steam’s content delivery networks, which therefore receive your IP address when your browser fetches them.

5. International transfers

Our providers and Steam may process data outside your country, including outside the European Economic Area. Where required we rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep data

Your inventory copy is replaced each time you sync and removed when you ask us to delete your account. Orders and the credit ledger are kept while your account is active and afterwards for as long as needed for accounting, fraud prevention and legal claims. Server logs are kept for a short period for security. Your cookie choice is kept for up to 12 months.

7. Your rights

Depending on where you live (for example under the GDPR) you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Where we rely on consent you can withdraw it at any time through “Cookie settings” in the footer. Email us to exercise a right; we answer within one month.

You can also complain to your local data protection authority.

8. Children

The service is for adults. It is not directed to anyone under 18 and we do not knowingly collect their data. If you believe a minor has used the service, contact us and we will delete the data.

9. Security

We use measures such as signed session cookies, HTTPS, access controls and least-privilege handling of tokens. No online service can be perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.

10. Changes

We will change this policy when our practices change and update the date at the top. Material changes will be highlighted on the site.

11. Contact

Privacy questions and requests: contact@steamcards.trade.