Privacy Policy
Last Updated: 3 March 2025
This policy explains what personal data we collect when you use cs.deals, why we collect it, who we share it with, and how long we keep it.
What we collect and where it comes from
From your sign in provider. You can sign in with Steam or other 3rd party accounts we support. The provider may share with us account information. We never see your password.
From you. Email address if you signup with it or provide it at a later date, payment method details, the items you sell and buy, support messages, and anything you type into the site. If you go through identity verification, this also includes your legal name, date of birth, address, nationality, ID document, and a selfie.
From your device. IP address, browser and OS, device identifiers, language, timezone, browser information, referring URL, pages visited, and timestamps. Standard server-log data plus what our fraud and analytical tools collect.
Why we use it
What We Do
Data Involved
Run your account, execute trades, and process payments
Sign-in data, email, transaction and payment data, inventory
Verify identity and comply with AML and other laws
KYC data, ID documents
Detect and prevent fraud, abuse, and multi accounting which keeps the site secure
Device data, IP, behavior, payment and sign in data
Support and account emails
Email, account data, and what you send us.
Marketing emails and analytics
Email, usage data
Who we share it with
We share your data, usually, in non identifiable formats when we need it to run and improve our services. The list below may not include every service but covers the main.
Payment processors
Identity verification services
Infrastructure, tooling, support, and analytical partners
Fraud-prevention networks
Valve / Steam
Professional advisers, legal counsel, and accountants
Authorities where legally required by local court order in country of our company formation
Future acquisitions or corporate restructuring
How long we keep it
Data
Kept For
Why
Transaction records, payment data, KYC data
5 years
Anti Money Laundering Laws
Fraud and dispute records
5 years
To defend claims and prevent repeat abuse
Account profile, usage and activity data
24 months
To handle reactivation requests and understand how the service is used
Anything else not listed above
24 months
-
Data we no longer need is deleted or anonymised. Anonymised data may be kept indefinitely for statistics.
Your rights
You can ask us to:
Correct it if it’s wrong
Delete it, except what we’re legally required to keep (section 4).
Cookies
Covered in our Cookie Policy.
Change
When we change this policy, we update the date at the top. It is your responsibility to check our policies.