0 Sign in

Privacy Policy

Last updated · 3 July 2026

Last updated: May 23, 2026

This Privacy Policy describes how Battle Skin Trade (“we”, “us”, or “our”) collects, uses, and discloses your information when you use our website at battleskintrade.com (the “Service”) or interact with our marketplace for Counter-Strike 2 in-game items.

1. Data we collect

1.1 Information you provide

  • Account data: email address, password (hashed), display name.
  • Steam trade URL: required to deliver purchased items via Steam trade offer. We do not request or store your Steam password.
  • Order data: products purchased, amount, payment method, timestamps.
  • Communication data: support tickets, contact form submissions.

1.2 Information collected automatically

  • Technical data: IP address, browser type, operating system, referring URL, pages visited, session duration.
  • Cookies and similar technologies: see our Cookie Policy.

2. Legal basis (GDPR Art. 6)

  • Contract performance (Art. 6(1)(b)): account creation, order processing, item delivery via Steam.
  • Legitimate interest (Art. 6(1)(f)): fraud prevention, service security, analytics on aggregated traffic data.
  • Consent (Art. 6(1)(a)): marketing emails, non-essential cookies, optional features.
  • Legal obligation (Art. 6(1)(c)): tax records, anti-money-laundering compliance, regulatory requests.

3. How we use your data

  • Process orders and deliver items via Steam trade offers.
  • Provide customer support.
  • Detect and prevent fraud, money laundering, and abuse.
  • Comply with legal obligations (tax, AML, KYC where applicable).
  • Improve our service through aggregated analytics.
  • Send transactional emails (order confirmation, delivery notice).
  • Send marketing emails — only with your explicit opt-in consent.

4. Third-party processors

  • Steam (Valve Corporation): item delivery via Steam Web API and trade offer system.
  • Payment processors: Stripe, PayPal (subject to their respective privacy policies).
  • Hosting: RunCloud / DigitalOcean (EU data centers).
  • Email service providers: for transactional and marketing email delivery.
  • Analytics: aggregated, anonymized traffic data only.

5. Data retention

  • Account data: retained while account is active + 12 months after last activity.
  • Order records: retained 7 years (EU tax requirement).
  • Support tickets: retained 3 years.
  • Marketing consent records: retained 3 years after withdrawal.
  • Steam trade URLs: retained while account is active; deleted on account closure.

6. Your rights (GDPR Chapter III)

Under GDPR you have the right to:

  • Access your personal data (Art. 15).
  • Rectify inaccurate data (Art. 16).
  • Erasure — request deletion of your data (Art. 17), subject to legal retention obligations.
  • Restrict processing (Art. 18).
  • Data portability — receive your data in machine-readable format (Art. 20).
  • Object to processing based on legitimate interest (Art. 21).
  • Withdraw consent at any time without affecting prior lawful processing (Art. 7(3)).
  • Lodge a complaint with your supervisory authority.

To exercise these rights, contact us via our Contact page. We respond within 30 days.

7. Security

We use industry-standard security measures: TLS/SSL encryption in transit, hashed passwords (bcrypt), encrypted backups, restricted database access, regular security audits. No system is 100% secure; we cannot guarantee absolute security but we apply commercially reasonable safeguards.

8. International transfers

Your data is primarily stored in EU data centers. Steam (Valve Corporation) is a US-based processor; transfers occur under EU Standard Contractual Clauses. Stripe and PayPal operate under their respective EU/US adequacy frameworks.

9. Children

Our Service is not directed at persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us for immediate removal.

10. Changes to this policy

We may update this policy. Material changes will be announced via email or prominent notice on the site at least 30 days before taking effect.

11. Contact

Battle Skin Trade
For privacy or data protection inquiries, please contact us via our Contact page.

12. Data Controller

The data controller for the purposes of this Privacy Policy is TRANZY LIMITED, trading as Battle Skin Trade, a company registered in England & Wales (Company No. 15583345). Registered office: 7 Bell Yard, London, WC2A 2JR, United Kingdom.

For any questions, contact us via our Contact page.

AI Support Assistant

Battle Skin Trade provides an AI-powered support assistant (the “BST Concierge”). When you use it:

  • The messages you send are transmitted to our AI provider, OpenAI, which processes them to generate a response (OpenAI acts as a sub-processor for this feature). We send only the content of your chat messages and the relevant help and policy content needed to answer — we do not send your account details, payment information, or order history.
  • We do not store your chat conversations. Messages exist only for as long as needed to generate a reply and are not retained on our servers afterwards.
  • Please do not enter sensitive personal information (passwords, payment card numbers, government identifiers) into the chat. For account- or order-specific matters, contact our support team via the Contact page.
  • The assistant is provided for general guidance and may occasionally produce inaccurate or incomplete information. Our published policies and our human support team are the authoritative source.