Privacy Policy

1. Introduction

CS2Locker ("we", "our", or "us") operates cs2locker.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) and Dutch privacy laws (Algemene Verordening Gegevensbescherming - AVG).

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

When you use our services, we may collect:

• Steam Authentication Data: When you log in via Steam OAuth, we receive your Steam ID, username, and avatar
• Email Address: If you choose to enable price alerts, we store your email address to send you notifications when skin prices drop to your target price
• User-Generated Content: Loadouts, trade up calculations, wishlists, and community submissions you create
• Communication Data: Information you provide when contacting us via email or feedback forms

3.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the site
• Device Information: Browser type, operating system, IP address
• Cookies and Similar Technologies: See our Cookie Policy below

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on:

• Consent (Art. 6(1)(a)): When you log in via Steam
• Contract Performance (Art. 6(1)(b)): To provide our services to you
• Legitimate Interests (Art. 6(1)(f)): To improve our services, understand how the website is used (analytics), prevent fraud, and ensure security
• Legal Obligation (Art. 6(1)(c)): When required by law

5. How We Use Your Information

We use your information to:

• Provide and maintain our services (trade up calculator, loadout builder, etc.)
• Authenticate users via Steam OAuth
• Save and display your created loadouts and trade up calculations
• Send price alert notifications via email when skins on your wishlist reach your target price
• Send verification emails to confirm your email address
• Send periodic newsletters, product updates, and marketing communications (with your consent)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our services
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

6. Email Communications

6.1 Email Collection and Storage

If you choose to provide your email address for price alerts or other services, we will store your email address securely in our database. Your email is linked to your Steam account and used to provide personalized services.

6.2 Types of Email Communications

We may send you the following types of emails:

• Transactional Emails: Email verification, password resets, account notifications
• Price Alerts: Notifications when items on your wishlist reach your target price (instant, daily digest, or weekly digest based on your preference)
• Marketing Communications: Newsletters, product updates, new features, promotions, and special offers (only with your explicit consent)
• Service Updates: Important updates about changes to our services or terms

6.3 Marketing Consent

By providing your email address and enabling price alerts, you consent to receive marketing communications from CS2Locker. This may include information about new features, promotions, partner offers, and CS2-related content that we believe may interest you.

6.4 Opting Out

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Disabling email alerts in your account settings
• Contacting us at [email protected]

Note: Even if you opt out of marketing emails, we may still send you important transactional and service-related communications.

7. Data Sharing and Disclosure

7.1 Third-Party Services

We share data with the following third-party services:

• Steam (Valve Corporation): For authentication purposes via OAuth
• PriceEmpire API: For market pricing data
• Affiliate Partners: CS.Money, Buff163 (only anonymized referral data when you use affiliate links)
• Google Analytics (Google LLC): Aggregated, anonymized usage data to understand how the website is used. Advertising features and Google Signals are disabled. Data is processed under Google's EU Data Privacy Framework certification.

7.2 Data Transfers Outside the EU

Some third-party services we use (Steam, PriceEmpire API) may process data outside the European Economic Area (EEA). When using Steam OAuth for login, your data is processed according to Valve Corporation's privacy policy. We only receive minimal necessary information (Steam ID, username, avatar) from Steam.

7.3 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request.

8. Cookies and Local Storage

We use browser storage technologies for:

• Essential Storage: Required for authentication (Steam login sessions) and core functionality
• Preference Storage: Remember your settings (currency preference, theme, price source selection)
• Analytics: Google Analytics 4 sets a first-party cookie (_ga) to distinguish unique visitors and measure site usage. Advertising features and Google Signals are fully disabled. This is processed on the basis of legitimate interests (GDPR Art. 6(1)(f)) in accordance with the Dutch Data Protection Authority's interim guidance on GA4.

We do not use advertising cookies or tracking cookies for marketing purposes. You can opt out of Google Analytics tracking using the button below, or by installing the Google Analytics Opt-out Browser Add-on.

9. Your Rights Under GDPR

You have the following rights:

• Right to Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten"). Contact us to exercise this right.
• Right to Restriction (Art. 18): Limit how we process your data
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing)

To exercise these rights, contact us at [email protected]

10. Data Retention

We retain your data for as long as:

• You continue to use our services
• Necessary to provide our services
• Required by law (e.g., tax records, legal disputes)

If you wish to have your personal data deleted, you can exercise your right to erasure by contacting us. We will delete or anonymize your personal data within 30 days of your request, unless we have a legal obligation to retain it.

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data transmission
• Secure database storage with access controls
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis

While we strive to protect your data, no method of transmission over the internet is 100% secure.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

13. Right to Lodge a Complaint

If you believe we have not complied with data protection laws, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: