Last updated: June 2025
SkinSlinger ("we", "us", "our") operates the SkinSlinger platform at skinslinger.com. We are the data controller for personal data collected through the Platform. Our registered address is: Cobham House, 9 Warwick Court, Midtown, WC1R 5DJ, United Kingdom. Contact: support@skinslinger.com.
We collect: email address and username (at registration); password (stored as a bcrypt hash — we never store your plaintext password); Steam ID and Steam trade URL (when you link your Steam account); transaction history including deposits, withdrawals, purchases, and sales; IP address and basic usage data for security and fraud prevention; and two-factor authentication codes (temporarily, for login verification only).
We use your data to: operate your account and process transactions; verify your Steam trade eligibility; send transactional emails (purchase notifications, 2FA codes, password resets) via Resend; prevent fraud and abuse; and comply with our legal obligations.
We process your data under the following lawful bases: Contract — processing necessary to provide the service you signed up for; Legitimate Interests — fraud prevention, security, and platform integrity; Legal Obligation — where required by applicable law.
We do not sell your personal data. We share data only with: Resend (transactional email delivery); Vercel (hosting and analytics); and Steam/Valve (solely to verify your inventory and trade eligibility via the Steam Web API). We do not share data with advertisers or third-party marketing services.
We retain your account data for as long as your account is active. Transaction records are retained for 7 years for financial compliance purposes. You may request deletion of your account and associated data at any time by contacting support@skinslinger.com, subject to retention obligations.
Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data ("right to be forgotten"); restrict or object to processing; and data portability. To exercise any of these rights, contact support@skinslinger.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We use only strictly necessary cookies for session management and authentication. We do not use tracking or advertising cookies.
We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and JWT-based authentication. No system is completely secure — please use a strong, unique password and keep your account credentials confidential.
We may update this Privacy Policy from time to time. We will notify users of material changes via email or a notice on the Platform. Continued use after changes constitutes acceptance of the updated policy.