Privacy Policy

1. WHO WE ARE

This Privacy Policy explains how SeekSkins ("we", "us", "our", or the "Company") collects, uses, shares and protects your personal data when you visit our website at https://seekskins.com (the "Website") or use our services (the "Services").

"Company" means S Space International Limited, a company incorporated in Hong Kong, which owns and operates the Website. We are the data controller responsible for your personal data.

We are committed to protecting your privacy. This Policy explains the legal basis on which we collect and process your personal data, the categories of data we collect, how we use and store it, who we share it with, how long we keep it, and your rights as a data subject.

We may update this Privacy Policy from time to time and will post all updates on the Website with an updated "Last Updated" date. Where a change is material we will give you reasonable advance notice, in accordance with Section 12.

2. DEFINITIONS AND INTERPRETATIONS

In this Privacy Policy the following terms shall have the following meanings:

"Company" means S Space International Limited, a company incorporated under the laws of Hong Kong, which owns and operates the Website.

"Cookie" means a small text file placed on Your computer or device by Our Website when You visit certain parts of the Website. Details of the cookies we use are set out in our Cookie Policy.

"GDPR" means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data.

"PDPO" means the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong, as amended from time to time.

"Privacy Policy" means this Privacy Policy as updated from time to time and made public on Our Website.

"Personal Data" means any information which relates to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Website" means the website https://seekskins.com.

"You, Your" means You, as User, a natural person who is at least 18 years old and agrees to follow this Privacy Policy. Where the Services are used by a person under 18 with the consent of a parent or guardian, references to "You" include that parent or guardian.

"We, us, our" refers to the Company.

3. DATA WE COLLECT

We collect the following categories of personal data:

• Account data: your Steam ID, Steam display name, avatar and profile URL, received when you log in via Steam OpenID, together with your account creation and last login timestamps and your interface language. We do not receive or store your Steam password.
• Contact and verification data: the email address you add to your account, the one-time verification codes issued to it, whether the address has been verified, and your notification preferences.
• Linked inventory accounts: for each Steam account you link in order to value your holdings, the Steam ID, display name, avatar and trade URL you supply for that account.
• Inventory and portfolio data: the item contents of each Steam inventory you link, as retrieved from Steam, and the valuations, daily snapshots and net-worth history we derive from it. This data reveals which in-game items are held by the linked accounts.
• Trade URL: the Steam trade URL you provide on your profile, stored so it can be displayed back to you and used for item-related workflows you initiate.
• Notification channel data: if you connect Discord, your Discord user ID, username, avatar and any email address returned by Discord during authorisation, and the webhook URL if you provide one; if you connect Telegram, your Telegram chat ID and the profile fields returned by Telegram during authorisation.
• Service configuration data: the collections, purchase request (wantlist) entries, price alerts, smart alert rules, account and plan preferences you create, and whether notifications have been triggered.
• Subscription data: your plan, tier, billing interval, subscription status, renewal date, cancellation status, and past-due status and dates.
• Payment data: order numbers, payment status, and the customer and subscription identifiers issued to us by our payment provider. Card and payment-instrument details are submitted directly to the payment provider; we do not receive or store your full card number or cardholder data.
• Usage data: pages visited, features used, items viewed, searches performed, and similar service-usage information.
• Guest usage identifier: if you use certain limited-access features without logging in, we record a pseudonymous identifier derived from a one-way hash of your IP address and browser user-agent, together with a daily usage counter, in order to apply the free usage allowance. This identifier does not contain your IP address in readable form and cannot be reversed to recover it, but it may still be considered personal data because it relates to your device.
• Technical data: IP address, browser type and version, operating system and device information, request timestamps and server logs, processed by us and by our hosting and network security providers.
• Communication data: the content of messages you send us when contacting support, and our replies.

We do not collect special category data (such as health, biometric or political data), and we do not use cookies for advertising or analytics — see our Cookie Policy for details of the single cookie we set.

4. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

• To create, authenticate and operate your account and keep it secure
• To provide the Services you request, including collections, alerts, purchase requests, inventory valuation, portfolio history, market reports, arbitrage scanning and smart alert rules
• To retrieve and value the inventories of the accounts you link, and to generate the reports, alerts and notifications you have enabled
• To deliver notifications through the channels you configure, including email, Discord and Telegram
• To process your subscription, renewal, cancellation and billing enquiries
• To apply plan allowances and free-usage limits, including the guest usage allowance described in Section 3
• To send you service-related notices, such as price alert notifications you have configured, and subscription status or renewal changes
• To respond to your enquiries and provide customer support
• To detect, prevent and address fraud, abuse, misuse of plan limits and security or technical issues
• To monitor, maintain and improve the performance, reliability and security of the Services
• To comply with legal obligations and to enforce our Terms of Service

We do not use your personal data for automated decision-making that produces legal or similarly significant effects, and we do not use your personal data to train machine-learning models.

5. LEGAL BASIS FOR PROCESSING

We process personal data on the following legal bases under the GDPR and PDPO:

• Performance of a contract: to provide the Services you subscribe to and manage your account
• Legitimate interests: to secure our platform, prevent fraud and abuse, apply usage limits, and improve our Services
• Consent: where you have chosen to receive certain communications or configured certain features — in particular linking an inventory account, connecting a Discord or Telegram channel, and enabling notifications on it
• Legal compliance: where we are required to process data by applicable law

Where processing is based on consent, you may withdraw that consent at any time by disabling the relevant channel or feature, or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. DATA SHARING AND DISCLOSURE

We do not sell, rent or trade your personal data. We share personal data only with:

• Steam (Valve Corporation): to authenticate your login via Steam OpenID and to retrieve the public inventory and profile data of the accounts you link
• Payment providers: to process payments, renewals, refunds and billing enquiries. The provider currently used is Stripe; we may add, replace or use additional providers (including, without limitation, Antom) in different markets or currencies
• Discord Inc.: if you connect Discord, to authenticate your identity and to deliver the notifications you enable
• Telegram: if you connect Telegram, to authenticate your identity and to deliver the notifications you enable
• Email delivery provider (Zoho ZeptoMail): to transmit verification emails and the email notifications you enable
• Hosting, CDN and network security providers (including Cloudflare): to serve the Website, terminate secure connections and protect the Services against attack
• Service providers: infrastructure, monitoring, error-logging and support providers that support the operation of the Website, bound by confidentiality obligations
• Authorities: where required by law, regulation or legal process, or to protect our rights and the safety of users

Important: notifications may leave our platform. If you enable notifications through Discord or Telegram, the content of those messages — which can include the names of items in your linked inventories, their values and your portfolio totals — is transmitted to and stored by Discord Inc. or Telegram respectively, under their own terms and privacy policies. That content is then subject to those providers' controls rather than ours. If you do not want your inventory or portfolio information to be transferred to a third-party platform in this way, do not connect those channels; email notifications and on-site features remain available.

About marketplace data sources. To compile price information we retrieve publicly available data from third-party CS2 marketplaces. These sources are read-only and receive no personal data about you — the retrieval is not driven by your identity or account.

Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your personal data becomes subject to a different privacy policy.

7. INTERNATIONAL DATA TRANSFERS

We operate from Hong Kong, and the providers listed in Section 6 are located in, or process data in, a number of jurisdictions including the United States, the European Union, the United Kingdom and Singapore. Your personal data may therefore be transferred to, stored in, and processed outside your country of residence.

Where we transfer personal data out of the European Economic Area, the United Kingdom or another jurisdiction that restricts exports, we take steps to ensure an adequate level of protection, using appropriate safeguards such as standard contractual clauses or transfers to jurisdictions recognised as providing an adequate level of protection. You may contact us for further information about the safeguards applied.

8. DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including:

• Account, subscription and billing records are retained while your account is active and for a reasonable period thereafter to enable account recovery, meet our accounting and tax obligations, and resolve disputes
• Inventory snapshots, valuation history, alert and request records are retained while your account is active, and are deleted or anonymised on account deletion
• Transaction, billing and security or risk-control logs are retained for at least 180 days, and longer where required by law
• Verification codes expire after a short period and are stored only in hashed form
• Guest usage counters are retained only for the period needed to operate the daily allowance
• Server and technical logs are retained for a limited operational period

Where you request deletion of your account, we will delete or anonymise your personal data, subject to legal retention obligations and to any records we must keep for tax, accounting, fraud-prevention or legal purposes.

9. YOUR RIGHTS

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data (subject to legal retention obligations)
• The right to request restriction of, or object to, certain processing
• The right to data portability, where processing is based on consent or contract and is carried out by automated means
• The right to withdraw consent where processing is based on consent
• The right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects
• The right to lodge a complaint with the relevant supervisory authority

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before acting on a request. We will respond within the timeframe required by applicable law.

You can also edit or delete much of your data directly: collections, purchase requests, alerts and linked accounts can be removed from the relevant page, and notification channels can be disconnected from your account settings.

10. SECURITY

We apply technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encrypted transport (HTTPS) across the Website, signed and HTTP-only authentication cookies, hashed storage of verification codes, and access controls that limit who within our organisation can access personal data.

No method of transmission or storage is completely secure. You are responsible for keeping your Steam account credentials confidential, and should treat any Steam trade URL you provide as sensitive credential material.

11. CHILDREN

The Services are not intended for persons under 18 years of age, and we do not knowingly collect personal data from them. A person under 18 may only use the Services where applicable local law permits it and a parent or guardian has given consent, and any purchase must be made or authorised by that adult. If we become aware that we have collected personal data from a person under 18 without the required consent, we will delete that data and terminate the associated account. If you believe a person under 18 has provided us with personal data, please contact [email protected].

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. We will post the updated Policy on this page with a new "Last updated" date. Where a change materially affects how we process your personal data, or the scope of your rights, we will give you reasonable advance notice by email or through the Website before it takes effect.

13. CONTACT US

If you have any questions about this Privacy Policy or our data practices, or wish to exercise any of your rights, please contact us at:

S Space International Limited

Email: [email protected]