Privacy Policy
This policy explains what personal data SkinPlata (SKINPLATA Limited, Office 2841, House of Francis, Ile du Port, Mahe, Seychelles) processes, why, and your rights.
1. Data we process
| Who | Data | Why |
|---|---|---|
| Merchants | Name, email, password hash, two-factor seed (encrypted), project details (name, website, turnover, country, Telegram/Discord handle), payout details (encrypted), sign-in IP addresses and browsers | To run your account, review projects, pay you out and keep the account secure (contract, legitimate interest) |
| Customers paying a Merchant | Steam ID and trade link, inventory items offered, IP address, payment amounts and status | To price the items, send and track the trade offer and prevent fraud (performing the Merchant's payment; legitimate interest) |
| Recipients of purchased Skins | Steam trade link and Steam ID | To deliver the item |
2. Processors
We use service providers who process data on our behalf: our hosting provider, Cloudflare (Turnstile bot protection), Mailgun (transactional email), Valve's Steam services (trades, item data), and market and liquidity partners who execute item trades. They receive only the data needed for their task.
3. Retention
Account and transaction records are kept for as long as your account exists and afterwards for as long as accounting and anti-money-laundering rules require (typically 5–10 years). API and sign-in logs are kept for 30 days to 12 months.
4. Security
Passwords are hashed; API secrets are stored as keyed hashes; webhook secrets, two-factor seeds and payout details are encrypted at rest. Access to the staff area requires two-factor authentication.
5. Your rights
You may ask for access to, correction or deletion of your data, restrict or object to processing, and receive your data in a portable format, subject to legal retention duties. Write to legal@skinplata.com. You may also complain to your data-protection authority.
6. Cookies
See the Cookie Policy.
Questions about this page: legal@skinplata.com.