CS TRADEUPS

Privacy notice / Datenschutz

Controller

Jeremy Saddei, Gustav-Strobel-Ring 5, 25421 Pinneberg, Germany. For privacy requests, contact cstradeups2@gmail.com or our contact form.

Visiting the site

Our hosting infrastructure processes connection information such as IP address, requested URL, time, browser information and errors to deliver and protect the service. Hosting is provided through Hostinger. Processing necessary for security and operation is based on our legitimate interests under Article 6(1)(f) GDPR.

First-party usage measurement

We count daily page views and daily unique visitors on our own server. The visitor marker is a hash derived from an IP address, the date and a server secret. It is pseudonymous, not anonymous. The application does not store the raw IP in the visitor-count table, does not set an analytics cookie and does not share these counts with an advertising network. Daily visitor markers older than 90 days are removed during the next daily page-view processing; aggregate page counts do not identify an individual. Our basis is our legitimate interest in understanding service usage (Article 6(1)(f) GDPR).

Steam sign-in and saved work

If you sign in through Steam, we receive a Steam identifier and can store your public display name and avatar, account creation date, preferences, saved contracts, watchlist and results you choose to sync. We use this information to provide the requested account features (Article 6(1)(b) GDPR). Steam handles its own authentication under its privacy policy; we do not receive your Steam password. Account information is retained while the account is used and until a deletion request is fulfilled, subject to applicable legal retention duties.

For saved contracts, we record estimated cost, expected value, profit and ROI using available price snapshots. These observations support your private history graphs and are retained for up to 90 days, with older observations removed during the next completed background refresh. Deleting a saved contract also deletes its observations. Reviewed-alert state is stored with your account so unchanged warnings do not repeatedly return.

Cookies and browser storage

A signed session cookie supports authentication and request security and can last up to 30 days. Local and session storage remember choices such as theme, language, currency, filters and dismissed notices, and hold imported inventory and locally saved results. These support the functions you request. You can delete them through your browser settings; this may remove unsynced work or sign you out. We do not currently load advertising pixels or third-party analytics. Non-essential tracking must not be enabled without the applicable consent.

Contact and feedback

Messages, optional contact details, the relevant page and submission time are stored on our server so we can handle the enquiry. Signed-in feedback can also be associated with your account. We rely on Article 6(1)(b) GDPR for requests concerning a service relationship and Article 6(1)(f) for other enquiries. Correspondence is kept only as needed to resolve the matter, handle follow-up or meet legal obligations. Email sent to our Gmail address is also processed by Google's email service.

External images, links and recipients

Skin artwork and avatars can load directly from Steam or other HTTPS image hosts; those hosts receive your connection information when the image loads. Our server requests market data from CS2Cap and other configured data services without forwarding your account details. External links take you to separately operated sites, which process data under their own policies. Providers such as Valve and Google may process data outside the EEA. Provider contracts and applicable transfer safeguards govern those services.

Your rights

Signed-in users can download their account data from Profile, including saved contracts and their recorded estimate history, synced documents, preferences and signed-in feedback. Browser-only data and anonymous messages are outside that account export; contact us for other access or erasure requests.

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests, and withdraw any consent for the future. Contact us using the details above; we may ask for information needed to verify that the request concerns your account. You may complain to a supervisory authority, including the Independent Centre for Data Protection Schleswig-Holstein (ULD).

Changes

This notice describes the current free website. We will update it before introducing payment processing, advertising or materially different data uses.

Last updated: 25 September 2026