Privacy Policy

How SkinCap collects, uses, and protects your personal data. SkinCap is a read-only CS2 price aggregator: we never access your Steam password and never trade your items.

Last updated : June 16, 2026

This Privacy Policy explains what personal data we process when you use SkinCap.gg (the "Service"), why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR). By using the Service you acknowledge the practices described here.

1. Data controller

The data controller is Adrien Tranchant, sole trader (entrepreneur individuel) registered in France under SIREN 104 421 110, with a registered office at 4 rue du Château, 51480 Cuchery, France. For any privacy request, contact us at [email protected].

2. Data we collect

Steam account

  • Your SteamID64 (a public identifier) to link and identify your account.
  • Your public Steam inventory, read-only, to value and track your items. We never modify your inventory or trade on your behalf.
  • We never receive or store your Steam password, session token, or Steam cookies. Authentication happens entirely on Steam.

Preferences

  • Display currency, language, and time zone.
  • Theme and interface settings.

Functional data

  • Watchlist: the skins you choose to follow.
  • Alerts: price and listing alerts you create, including target prices, advanced filters, and notification preferences (email / Discord).
  • AI Copilot: your chat conversations and a long-term memory summary used to personalize answers.
  • Discord link: your Discord account identifier when you connect Discord for notifications.

Technical data

  • Aggregated, privacy-friendly usage analytics (page views, performance) collected without cookies via Vercel Web Analytics.
  • Server logs and security data (IP address, request metadata) used for rate limiting, fraud prevention, and debugging.

3. Purposes and legal bases

  • Provide the Service (account, price aggregation, watchlist, alerts, inventory, AI Copilot). Legal basis: performance of a contract.
  • Send the notifications you configured (price alerts, listing alerts). Legal basis: performance of a contract.
  • Secure the Service, prevent abuse, and enforce rate limits. Legal basis: legitimate interest.
  • Measure aggregate usage and improve the product. Legal basis: legitimate interest.

4. Service providers and third parties

We rely on the following processors and third parties, who only process data as needed to operate the Service:

  • Valve / Steam: authentication and public inventory data.
  • Vercel: web hosting and cookieless analytics.
  • Railway: hosting of our API, background workers, PostgreSQL database, and Redis cache.
  • Better Stack: monitoring, logs, and uptime.
  • Resend: transactional and notification emails.
  • Discord: delivery of notifications via our bot.
  • Google (Gemini): the AI model powering the AI Copilot.
  • Marketplace APIs: price and listing data sources (no personal data shared).

5. International data transfers

Some of our providers (such as Vercel and Google) may process data outside the European Union, including in the United States. Where this is the case, transfers are governed by appropriate safeguards such as the EU Standard Contractual Clauses.

6. Data retention

  • Account and functional data are kept for as long as your account is active.
  • When you delete your account, your personal data is deleted (cascade) without undue delay, except data we must retain to meet legal obligations.
  • Security logs are kept for a limited period proportionate to security needs.

7. Security

We apply technical and organizational measures appropriate to the risk, including encrypted connections (TLS), access controls, rate limiting, and the principle of least privilege. No system is perfectly secure, but we work to protect your data against unauthorized access, alteration, or loss.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, and port your data, and to restrict or object to its processing.

  • You can delete your account and associated data at any time from your account settings (this cascades deletion across our systems).
  • For any other request, contact [email protected].
  • You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).

9. Minors

The Service is not intended for children under the age required to hold a Steam account in their country. We do not knowingly collect data from such children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be communicated through the Service.

11. Contact

For any question about this policy or your personal data, contact us at [email protected].