Privacy Policy

Last updated: May 2026

Introduction

Cstrel, operated by test (company number test) ("we", "our", "us"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our website and services at cstrel.com (the "Service").

By using the Service, you consent to the practices described in this Privacy Policy.

Data Controller

test
Company No. test
Date of incorporation: test
Registered address: test, test, test, test
Contact: [email protected]

1) Information We Collect

We keep the product simple and collect only what is needed to run the Service.

1.1 Account Information.

• Your Steam ID and public Steam profile fields (nickname, avatar) returned by Steam OpenID.
• Your email address (collected during onboarding for order confirmations and support).
• Your Steam Trade URL (used solely to deliver purchased Skins).
• IP address and basic browser metadata for security and fraud prevention.

1.2 Payment Information. We do not store full credit card or payment details. Payments are processed securely by third-party providers. We may store limited transaction metadata, including:

• Payment amount and currency.
• Items purchased and order ID.
• Transaction status (success / failure / pending) and timestamps.

1.3 Support Communications. If you contact support, we collect:

• Your email address.
• The message content.
• Optional context you include (screenshots, order IDs, timestamps).

1.4 Cookies and Tracking Technologies. We use essential cookies required for platform functionality, authentication, and security. Optional analytics cookies are described in our Cookie Policy.

2) What We Do Not Collect

We do not ask you for or store profile details such as:

• Phone number (unless provided voluntarily).
• Country, city, or street address (collected only at checkout for billing purposes when required by the payment provider).

If such information is collected during payment checkout, it is handled by the payment provider and is not stored in our product database except what is strictly necessary to confirm payment and comply with legal obligations.

3) How We Use Your Data

We use your data to:

• Provide and operate the Service - authenticate users, fulfill orders, deliver Skins via Steam trade.
• Process payments and manage orders.
• Prevent security incidents and fraud.
• Respond to support requests.
• Improve reliability - debugging, performance monitoring, and service analytics.

We do not sell or rent personal data.

4) Legal Basis for Processing (GDPR)

• Contract - to provide the Service you requested (account, orders, delivery).
• Legitimate interests - security, preventing abuse, maintaining and improving the Service.
• Legal obligation - where we must retain certain records (e.g., accounting/tax requirements).
• Consent - where required (e.g., optional analytics cookies).

5) Data Sharing and Transfers

We share data only when necessary to run the Service:

• Steam / Valve - to authenticate the user and deliver purchased Skins.
• Payment processors - to process purchases and handle checkout.
• Hosting and infrastructure providers - to operate the Service and store essential data.
• Security and monitoring services - to keep the Service reliable and secure.
• Legal - if required by law, court orders, or to protect rights and safety.

Where data is transferred outside the EEA/UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.

6) Data Retention

We retain personal data only as long as necessary for the purposes described above:

• Account data - kept until you delete your account (and then removed or anonymized, unless we must retain something by law).
• Payment/transaction records - retained as required for accounting, tax, and legal compliance.
• Logs - kept for a limited period for security and debugging, then deleted or aggregated.

7) Your Rights (EEA/UK)

Depending on your location, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion.
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent where applicable.
• Lodge a complaint with a supervisory authority.

To exercise your rights, contact [email protected].

8) Data Security

We implement appropriate technical and organizational measures, including encrypted HTTPS connections (TLS), secure infrastructure and access controls, password hashing, monitoring and logging, and regular system reviews. No system can guarantee absolute security; you are responsible for keeping your Steam credentials confidential.

9) Children's Privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from minors.

10) Cookies

We use cookies and similar technologies for essential functionality and (optionally) analytics. Details are provided in our Cookie Policy and the cookie banner.

11) Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in technology, regulations, or our practices. We will post the updated version with a new "Last updated" date.

12) Contact

Questions or requests: [email protected].

test
Company No. test
Date of incorporation: test
Registered address: test, test, test, test
Contact: [email protected]