Privacy Policy

When you use Cashout Skin, we collect the following information:

From Steam authentication: Your Steam ID, display name, and profile avatar. This is provided by Steam's OpenID service when you log in. We do not receive your Steam password.

Trade information: Your Steam Trade URL, which you provide voluntarily in your profile settings. This is used solely to send trade offers to your Steam account.

Transaction data: Records of sell and buy orders including skin names, prices, timestamps, and order status. For sell orders, we also store the cryptocurrency wallet address you provide for payout purposes.

Payment data: Card payments are processed entirely by Stripe. We do not receive or store your card number, CVV, or other payment credentials. We only receive a Stripe session ID and confirmation of payment.

Technical data: IP addresses, browser/device information, and usage logs collected automatically when you access the service. This data is used for security, fraud prevention, and operational purposes.

We use the collected information to:

• Authenticate your identity and maintain your session
• Process sell and buy orders, including sending trade offers via Steam
• Send cryptocurrency payouts to your provided wallet address
• Detect and prevent fraud, abuse, and unauthorized access
• Communicate with you about your orders and account
• Comply with applicable laws and regulations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

We share data with the following third-party services as necessary to operate the platform:

Steam / Valve Corporation: Authentication via Steam OpenID. Subject to Steam's Privacy Policy and Terms of Service.

Stripe: Payment processing for buy orders. Stripe receives payment details directly from your browser and is subject to Stripe's Privacy Policy.

Market & trade provider: We use a third-party skin market-data and trade-execution provider to obtain live pricing and to execute Steam trades. Trade data (skin name, Trade URL partner/token) is shared with this provider when initiating a trade.

steamwebapi.com: We query this service to fetch your Steam profile information (display name and avatar) after login. Only your Steam ID is transmitted to this service.

Networ/Hosting providers: Our infrastructure providers may process data as part of operating the platform, under confidentiality obligations.

We use a single session cookie to keep you logged in. This cookie is HTTP-only, not accessible by JavaScript, and expires after 7 days of inactivity or upon logout.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

Our session store is managed server-side in our database; the cookie contains only an opaque session identifier.

We retain your account data for as long as your account is active. Transaction records are retained for a minimum of 2 years for legal and accounting purposes.

You may request deletion of your account and associated data by contacting us. Note that transaction records required for legal compliance cannot be deleted.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and personal data (subject to legal retention requirements)
• Portability: Request your transaction data in a machine-readable format

To exercise any of these rights, please contact us via the Contact page.

We implement industry-standard security measures including HTTPS encryption, HTTP-only session cookies, parameterized database queries, and rate limiting on all API endpoints.

Despite these measures, no system is completely secure. We cannot guarantee absolute security of your data.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the service constitutes acceptance of the revised policy.

For privacy-related questions or requests, please contact us via the Contact page.