Privacy Policy

This Privacy Policy describes how SkinsCashout collects, uses, stores, shares and protects personal information when you visit https://skinscashout.io, create an account, apply to sell, load an inventory, complete sales, request withdrawals or communicate with us.

It does not govern third-party platforms you use independently, including Steam, blockchain networks, wallet applications or external websites linked from the Service.

Your account belongs to an account system shared with other services from the same operator: the same sign-in may also work there, and the information below about your account is held in that shared system.

Information you provide. We may collect:

• your email address and, if you set one, your password (stored as a one-way hash, never in readable form);
• your seller application, such as a Telegram handle, links to where you trade and your expected monthly volume;
• your Steam trade URL and, if you sign in with Steam or choose to link a Steam account, your Steam account ID;
• two-factor authentication setup data and related security settings;
• withdrawal details, including requested amounts and destination wallet addresses; and
• support requests, emails, dispute communications or compliance responses.

Information generated by your use of the Service. We keep the records needed to run the Service: sessions and sign-in events; prices requested, inventories priced, items selected and sale records; your balance ledger, holds and reversals; withdrawal status history, review notes, transaction hashes and paid amounts; and the internal identifiers, settings and timestamps linked to that activity.

Information from Steam. When you sign in with Steam, Steam tells us your SteamID64. We do not receive your password, display name or avatar.

Technical and security information. We may receive your IP address and similar request data (used for security, abuse prevention and rate limiting), browser and device context from requests and standard web logs, session cookie identifiers, and diagnostic records used to troubleshoot uptime, security and product issues.

Information from partners. To price and complete trades and withdrawals, we receive data from our trading and settlement partners, such as inventory details, trade identifiers and status, trading-bot profiles, pricing references and blockchain settlement metadata.

We use personal information to:

• create and secure accounts, review seller applications and authenticate sessions;
• price inventories and process sales and Steam trade offers;
• maintain balances, holds, ledger records and withdrawals;
• provide support, respond to disputes and send account emails such as password resets;
• detect, prevent, investigate and remediate fraud, abuse, security incidents, sanctions risk and policy violations;
• comply with legal obligations, respond to lawful requests and enforce our Terms of Service;
• improve the reliability, performance and usability of the Service; and
• keep records required for accounting, auditing, dispute resolution and business continuity.

Where data protection law requires a legal basis, we generally rely on one or more of the following:

• Contract: to provide the Service you request, such as your account, sales, balance and withdrawals.
• Legitimate interests: to secure the Service, prevent fraud, improve reliability, keep logs and operate responsibly.
• Legal obligation: to comply with applicable law, lawful requests, sanctions controls, accounting obligations or dispute-resolution duties.
• Consent: where we specifically ask for it and the law requires it.

We may share personal information with:

• infrastructure, hosting, security, email and other service providers that help us operate the Service;
• trading, pricing and settlement partners involved in your sale or withdrawal;
• the shared account system described in Scope, and other services from the same operator where you use the same account;
• advisers, auditors, insurers and professional service providers who need the information for legitimate business purposes;
• courts, regulators, law enforcement or other authorities when required by law or reasonably necessary to protect rights, safety or the integrity of the Service; and
• parties involved in a merger, acquisition, financing, reorganization or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information, and we do not use third-party advertising cookies on the Service.

We use first-party cookies only to run the Service: a short-lived access cookie and a refresh cookie that keep you signed in; two temporary Steam cookies, one that ties a Steam round trip (sign-in, turning on Steam sign-in or linking a Steam account) to the browser that started it, and one that holds a sign-in waiting for your two-factor code or your email at sign-up, each lasting at most 10 minutes; and a Steam cookie that holds a random identifier for this browser, used only to limit how often Steam sign-in can be started, which lasts 180 days. They are HttpOnly, so scripts on the page cannot read them. We do not use tracking, analytics or advertising cookies.

Your browser also keeps a small amount of data on your device: so a lost connection does not send anything twice, an in-progress withdrawal (its reference, amount and address, never your 2FA code) and, in the current tab while you sell, the sale you are preparing; and, in the current tab during a Steam sign-in or confirmation, where to return and which change to finish (never a code or password).

The Service may be operated, hosted or supported from more than one country, so your information may be transferred to and processed in jurisdictions other than the one where you live. When we transfer personal information across borders, we take steps designed to ensure an appropriate level of protection for it.

We keep personal information only as long as reasonably necessary for the purposes in this policy, including to provide the Service, keep account history, process withdrawals, resolve disputes, comply with law, enforce our agreements and protect the Service from fraud or abuse.

Retention varies by record: session and security records are kept for shorter operational periods; account, sale, balance and withdrawal records for longer periods needed for audit, compliance, tax, accounting and disputes; support and investigation files as long as needed for the matter and related legal obligations.

When information is no longer needed, we delete it, de-identify it or securely isolate it as permitted by applicable law.

We use administrative, technical and organizational measures designed to protect personal information, including access controls, authentication protections, secure transport, session controls and monitoring for abuse.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You also play an important role: use a strong password, keep two-factor authentication on, and check withdrawal addresses carefully.

Depending on where you live, you may have rights to request access to, correction of, deletion of, portability of or restriction of certain personal information, to object to certain processing, or to withdraw consent where processing is based on consent.

You may also update your account and security settings in the Service where available, contact us to request review, correction or deletion of certain information, and complain to your local data protection or privacy regulator if you believe your rights have been violated.

We may need to verify your identity before acting on a request, and may deny or limit a request where permitted by law, including when we must retain information for security, fraud prevention, legal compliance, accounting or dispute resolution.

Because there is no universally accepted standard for responding to “Do Not Track” signals, the Service does not change its behavior solely in response to one. If applicable law requires us to recognize a browser-based privacy preference signal, we will process qualifying requests in accordance with that law.

The Service links to external websites such as Steam and blockchain explorers. We are not responsible for the privacy practices of those third parties.

The Service is for adults and is not intended for anyone under 18. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child in violation of applicable law, we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes to the Service, legal requirements or our practices. When we do, we will post the updated version on this page and revise the date above.

Questions, privacy requests or complaints can be sent to [email protected].