Privacy Policy

Last updated: 9 July 2026

This Privacy Policy explains how SkinSpot ("SkinSpot", "we", "us") collects, uses, and protects your information when you use skinspot.gg, our related services, and the SkinSpot browser extension (together, the "Service"). By using the Service you agree to this Policy. SkinSpot is a marketplace for Counter-Strike 2 (CS2) in-game items and is not affiliated with, endorsed by, or sponsored by Valve Corporation or Steam.

1. Who we are

SkinSpot operates the marketplace at skinspot.gg. For any privacy question or request, contact us at contact@skinspot.gg.

2. Information we collect

Category	What	Source
Steam account	Your public SteamID, profile name, avatar, and trade URL	Steam sign-in (OpenID)
Contact	Email address (required, verified)	You
Identity / KYC	Identity documents and a selfie/liveness check, and the resulting verification status	You, processed by our KYC provider (Sumsub)
Payments	Crypto wallet addresses, deposit/withdrawal transaction references. We do not store card numbers.	You and our payment providers (NOWPayments, MoonPay)
Marketplace	Listings, orders, offers, balances, dispute/support messages	Your use of the Service
Extension	Access to your Steam session/cookies to read your trade offers and send trades you initiate; trade-offer IDs; local settings	SkinSpot browser extension (with your permission)
Technical	IP address, device/browser info, and server logs	Automatically

3. How we use your information

To operate the marketplace: authenticate you, list and sell items, process orders, and deliver items via Steam trades.
To process deposits and withdrawals and maintain your balance.
To verify your identity and meet anti-money-laundering (AML) and other legal obligations.
To detect, prevent, and investigate fraud, wash-trading, and abuse.
To provide support and resolve disputes.
To send transactional emails (verification codes, security notices).

4. Service providers we share data with

We share the minimum data needed with providers who process it on our behalf:

Valve / Steam — sign-in and public profile.
Sumsub — identity verification (KYC/AML). Your documents are submitted to and processed by Sumsub; we receive the verification result.
NOWPayments, MoonPay — crypto deposits, card-to-crypto on-ramp, and payouts. These providers perform their own identity/AML checks.
Resend — transactional email delivery.
Supabase (database/hosting), Railway and a dedicated server host (application/bot infrastructure), and Cloudflare (content delivery/security).

We do not sell your personal data, and we do not use it for third-party advertising.

5. The SkinSpot browser extension

The extension is optional and used only to automate CS2 trade delivery. With your permission it reads your Steam session on steamcommunity.com to detect incoming trade offers and to send the trades you initiate from SkinSpot. This data is used solely to keep your marketplace orders in sync; it is stored locally in your browser and transmitted only to SkinSpot. It is never sold or shared for advertising, and the extension does not access sites other than Steam and SkinSpot.

6. Cookies

We use a single signed session cookie to keep you logged in. We do not use third-party advertising or analytics tracking cookies.

7. Retention

We keep your data for as long as your account is active and as required to comply with legal, tax, and AML obligations, and to resolve disputes and enforce our agreements. Transaction and audit records are retained as required by law.

8. Security

We protect your data with encryption in transit, hashed/signed credentials, access controls, and audit logging. No method of transmission or storage is 100% secure, but we work to protect your information.

9. Your rights

Depending on your location (including under the EU/UK GDPR), you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise these rights, contact contact@skinspot.gg. Some data must be retained to meet legal/AML obligations even after an account is closed.

10. International transfers

Your data may be processed in countries other than yours (including by the providers listed above). Where required, we rely on appropriate safeguards for such transfers.

11. Children

The Service is only for users aged 18 or older. We do not knowingly collect data from anyone under 18.

12. Changes

We may update this Policy from time to time. Material changes will be posted here with a new "last updated" date.

13. Contact

Questions or requests: contact@skinspot.gg.