Privacy Policy

1. Data We Collect

• Account identifiers such as user ID, email, and connected login provider metadata.
• Profile data from linked providers (for example Steam display name/avatar or Google profile details).
• Billing metadata related to subscriptions (for example Stripe customer/subscription IDs and status).
• Operational data needed to run the app, such as request logs, pricing source selections, and saved UI preferences.
• Analytics data such as page views, sessions, approximate device/browser details, traffic sources, scrolls, and outbound link clicks.
• Chrome extension pairing data, including the scoped extension token, paired Steam ID, sync timestamps, sync counts, and cooldown tier stored locally in Chrome.
• CS2 inventory sync data from Steam Community, including asset IDs, class IDs, instance IDs, market hash names, float values, paint seeds, tradability, marketability, trade-hold dates, inspect links, item tags, and extension version.

2. How We Use Data

• Authenticate users and protect account security.
• Provide trade-up calculations, plan gating, and subscription features.
• Sync signed-in Steam CS2 inventory data to show exact owned skins, float values, trade holds, inventory value, and inventory-based trade-up calculations.
• Match the browser Steam account to the SkinMerge account and enforce inventory refresh cooldowns to reduce Steam rate-limit risk.
• Process payments and manage billing lifecycle events.
• Operate, debug, and improve reliability and abuse prevention.

3. Data Sharing

We share data only with service providers necessary to run the Service, including:

• Supabase (authentication and data storage)
• Stripe (subscription and billing)
• Steam / Google (sign-in, account-linking, analytics, and advertising measurement flows)

We do not sell personal data, and we do not use Chrome extension data for unrelated advertising, creditworthiness, or lending purposes.

4. Cookies and Local Storage

The Service uses browser storage for session state, user preferences (for example filters and UI settings), analytics measurement, and advertising measurement.

The SkinMerge Inventory Sync extension uses Chrome local storage to keep the extension paired, show sync status, and enforce refresh cooldowns. The extension does not collect your Steam password, Steam Guard codes, Steam cookies, payment card data, personal communications, health data, or browsing history outside the declared SkinMerge and Steam Community origins.

Where required by applicable law, we will request consent before using non-essential tracking or storage.

5. Data Retention

We retain account and subscription records while accounts are active, and for limited periods thereafter where required for legal, security, and fraud-prevention purposes.

You can request account deletion from the dashboard settings flow.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing.

To make a request, contact: support@skinmerge.com.

7. Security

We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security.

8. Children

The Service is not directed to children and is not intended for users under the age required by applicable law in their jurisdiction.

9. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate (including AWS, Supabase, and Stripe). By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your own.

10. Policy Updates

We may update this Policy from time to time. Updated versions become effective when posted with a revised effective date.