Privacy policy

1. General

1.1. The Service is operated by the SkinsHead administration (website https://skinshead.pro).

1.2. This policy applies to everyone who visits the site, signs in through Steam OpenID, creates a portfolio, installs the browser extension, or contacts support.

1.3. The Service is for tracking and analysing a Counter-Strike 2 skin portfolio and a Steam inventory, including related digital features.

2. Data we process

2.1. Depending on how you use the Service, we may process:

• your SteamID64, public name, avatar and profile URL, when you sign in through Steam OpenID;
• portfolio data: the item list, quantities, cost basis, activity and settings you save in the Service;
• data synced by the browser extension: the list of inventory and Storage Unit items, without your Steam password, Steam token or authenticator codes;
• technical data: the session cookie, IP address, browser type and request logs needed for security and operation;
• support messages: the contents of the Telegram conversation;

2.2. The Service never asks for or stores your Steam password, SDA seed or Steam Guard codes.

2.3. The browser extension signs in to Steam with a QR code on every sync. The Steam token it receives stays only in the tab’s memory while the reading is in progress. It is not written to disk, it is not sent to the Service, and it is revoked at Steam immediately afterwards. The Service receives the item list and a pairing token, and that token can only upload the list.

3. Why we process it

• to provide the portfolio and Storage Unit sync;
• to identify you and protect the session;
• to answer support requests;
• to keep the Service secure, prevent abuse and diagnose failures;
• to improve the Service using aggregated statistics.

4. Legal bases

4.1. We process data based on your consent, on performing the contract for digital services (the terms of use), and on the administration’s legitimate interest in keeping the Service secure.

5. Sharing with third parties

5.1. We do not sell personal data.

5.2. Data may be shared with:

• Valve / Steam, to the extent needed for OpenID sign-in and for public profile and inventory data;
• hosting and infrastructure providers that run the Service;
• competent public authorities, where the law requires it.

6. Storage and protection

6.1. Data is kept for as long as needed to provide the Service and meet our obligations, or until you ask us to delete it, unless the law requires longer.

6.2. We use reasonable organisational and technical safeguards. No transmission over the internet can be guaranteed completely secure.

7. Your rights

7.1. You can ask what data we process, ask us to correct inaccurate data, ask us to delete your portfolio or account data, and withdraw consent, by contacting support.

7.2. Withdrawing consent may limit some features of the Service.

8. Changes

8.1. We may update this policy. The current version is always at https://skinshead.pro/privacy.

8.2. Continuing to use the Service after a new version is published means you accept the updated terms.

9. Contact

For privacy and support questions: Telegram @GhostOfSecretum.

Website: https://skinshead.pro.