Privacy Policy

This policy explains what data about you the BuyCS2Skins.com website stores, why it is needed, to whom it is disclosed, how long it is kept and how you can manage it. We collect a minimum of data: an email address and a phone number are not needed for sign-in or for operations.

Capitalized words have the same meaning as in the Terms of Service (/terms).

1. Who Is Responsible for the Data

1.1. The data is processed by the Operator: Future Core LLC (ОсОО «Ядро Будущего»), Kyrgyz Republic. Its details are given in section 12.

1.2. The Policy applies to the Site and to the Service's Telegram bot @buycs2skins_bot.

1.3. The Policy does not apply to Telegram, Steam, the Payment Service or the Suppliers. They have their own data processing rules.

2. What Data We Process

2.1. Telegram sign-in data. The identifier of the Telegram account, the display name and the avatar. We receive them when you start the Telegram bot and request a sign-in code.

2.2. Steam sign-in data. The identifier of the Steam account (SteamID), the display name and the avatar. We receive them when you sign in through the Steam sign-in page.

2.3. Trade Link. The Steam trade URL that you specify in the profile.

2.4. Steam inventory. When you sell Items or use the inventory valuation tool, the Service receives the contents of the Counter-Strike 2 inventory of your Steam account in order to show prices.

2.5. History of operations and orders. Top-ups, orders, sales, withdrawal requests: amounts, dates, statuses, Items, identifiers of Steam trades, and the USDT wallet address that you specified for withdrawal.

2.6. Technical logs. IP address, information about the browser and the device, date and time of requests to the Site.

2.7. Cookies. See section 7 for details.

2.8. Support inquiries. The text of the inquiry and the address you wrote from. If you write from an email address, we receive that email address and use it only to reply and to handle the inquiry.

2.9. We do not request or store:

(a) an email address or a phone number for sign-in or for operations;

(b) the Steam password or the Steam API key;

(c) bank card details: they are entered on the Payment Service's page;

(d) identity documents.

3. Why We Process Data

3.1. To perform the Agreement:

(a) to recognize you at sign-in and maintain the Account;

(b) to maintain the Balance and the history of operations;

(c) to deliver purchased Items and accept sold Items by Steam trades;

(d) to accept top-ups and pay out Revenue;

(e) to send sign-in codes, confirmation codes and notifications about operations through the Telegram bot.

3.2. To protect Users and the Service: to detect fraud, unauthorized access to Accounts and breaches of the Agreement.

3.3. To reply to inquiries and handle disputed cases.

3.4. To comply with legal requirements, including keeping records of operations.

3.5. We do not use the data for advertising and do not sell it.

4. Grounds for Processing

4.1. We process data on the basis of:

(a) your consent, which you give at the first sign-in (/personal-data);

(b) the Agreement that you have concluded with the Operator;

(c) legal requirements that oblige the Operator to keep records of operations;

(d) the Operator's legitimate interest in protecting the Service from fraud.

5. To Whom We Disclose Data

5.1. For the Service to work, some data is received by the Operator's partners: payment services, suppliers, Telegram, Steam and the server provider. Each of them receives only what it needs for its part of the work: to accept a payment or make a payout, to send or accept an Item, to deliver a code or a notification to you, to store the Site's data.

5.2. Data is disclosed to state authorities only upon a lawful request and to the extent the law requires disclosure.

5.3. We do not sell data and do not disclose it for advertising. Other Users do not see your data.

5.4. The partners listed in clause 5.1 are located in different countries. The Site's servers are located in the European Union.

6. How Long We Keep Data

6.1. Account data (Telegram and Steam identifiers, display name, avatar, Trade Link) is kept for as long as the Account exists. After the Account is deleted, it is deleted or anonymized within 30 days.

6.2. The history of operations, orders and inquiries is kept for 5 years after the operation. It is needed for accounting, for handling disputes and for complying with legal requirements, and it is retained for that period even after the Account is deleted.

6.3. Technical logs are kept for 12 months.

6.4. Session cookies are valid until you sign out of the Account or until the session expires.

7. Cookies

7.1. The Site uses cookies and browser storage. They are needed for the Site to work:

(a) session cookies: to keep you signed in to the Account and to protect against request forgery;

(b) cookies with the chosen currency and with a note that you accepted the cookie notice;

(c) browser storage: it holds your cart until you sign in.

7.2. The Site does not use advertising cookies.

7.3. The Site has no visitor counters at present. If they appear, we will supplement this section.

7.4. On your first visit the Site shows a cookie notice. By pressing "Accept" you agree to the use of cookies.

7.5. You can block cookies in your browser settings. Without session cookies, sign-in and operations on the Site do not work.

8. How We Protect Data

8.1. The connection to the Site is protected by encryption.

8.2. Only those employees of the Operator who need the data for their work have access to it. Their actions with Users' data are recorded in a log.

8.3. A change of the Trade Link and the withdrawal address are confirmed with a code from the Telegram bot. This protects against the case where someone else has gained access to your session.

8.4. No method of protection gives a complete guarantee. If you suspect unauthorized access to your Account, write to support immediately.

9. Your Rights

9.1. You have the right to:

(a) find out what data about you we keep and receive a copy of it;

(b) correct inaccurate data. You change the Trade Link yourself in the profile. We take the name and the avatar from Telegram and Steam;

(c) ask for the Account and the data to be deleted;

(d) withdraw consent to data processing;

(e) lodge a complaint with the state authority for personal data protection.

9.2. To exercise your rights, write to support: support@buycs2skins.com. To make sure that the request was sent by you, we may ask you to confirm it with a code from the Telegram bot or by signing in to the Account.

9.3. We reply to a request within 30 days.

9.4. After consent is withdrawn or the Account is deleted, the Service can no longer be used. We continue to keep the data referred to in clause 6.2 for the period stated there, because this is required for the accounting of operations and by law.

10. Age

10.1. The Service is intended for persons aged 18 and over. We do not knowingly process the data of persons under 18. If we learn that an Account has been created by such a person, we will restrict it and delete the data that we are not obliged to keep by law.

11. Changes to the Policy

11.1. The Operator may change the Policy. A new version is published at /privacy with its date and takes effect from the moment of publication.

11.2. The Policy is drawn up in Russian and in English. In case of a discrepancy between the versions, the Russian version prevails.

12. Details and Contacts

Future Core LLC, Kyrgyz Republic, Bishkek, Logvinenko st. 55, apt. 32. Registration No. 33044-7301-OOO, TIN 02206202610000.

Questions about data and support: support@buycs2skins.com.