SKIN MARKET 24 LTD · UPDATED 10 OCTOBER 2026
Privacy Notice
Current sandbox-service policy. Company registration details and live-sale terms remain to be completed before commercial launch.
Controller and contact
Skin Market 24 LTD is responsible for personal information processed through skinmarket24. Contact support@skinmarket24.com for privacy questions or rights requests. Registration jurisdiction and registered-address details are awaiting confirmation.
Information processed
We process your Steam ID, hashed session tokens, sign-in security state, payment-session references, payment status, checkout email address, receipt status, and selected skin details saved with test checkouts. If you save account settings, we store your email, verified email, Steam trade link, and price-alert preference. We also store support tickets and replies, saved searches and target prices, cart and favorite snapshots, recently viewed skins, notification read status, and administrator verification-code hashes with short expiry times. We record coarse desktop/mobile session labels and creation times for your security center. Security changes can send alerts to your previously verified email. Genuine live purchasers may submit public reviews without their Steam ID or email being shown. Optional usage analytics are off by default and collect aggregate daily event counts only, without search text, item IDs or attribution identifiers; temporary hashed rate-limit keys expire automatically. Hosting and service providers may process IP addresses, request metadata, and security logs. Stripe collects payment details on its hosted checkout; card numbers are not collected or stored by our application.
Purposes and legal bases
We use information to authenticate users, display account-specific history, verify test payments, send requested transactional receipts, and protect the service. Where applicable data-protection law requires a legal basis, service administration relies on contractual necessity, security on legitimate interests, and mandatory records on legal obligations. Optional marketing or tracking would require a separate appropriate basis and, where required, consent. Optional price alerts are sent only after you enable them and verify your email. You can switch them off or delete saved searches in My account. We do not currently send general marketing campaigns.
Service providers and transfers
Cloudflare hosts the application and database. Steam authenticates identity. CSBoard supplies market data. Stripe processes sandbox checkout and associated customer details. Resend delivers receipts, email-verification messages, admin codes, and opted-in price alerts. These providers may process information in other countries. Transfer safeguards and regional arrangements must be confirmed before live commercial operation. We do not sell personal information.
Retention and security
Sign-in state expires after 10 minutes; session cookies expire after seven days. Checkout quotes expire after 90 seconds. Aggregate analytics are retained for 90 days. Expired authentication records are cleaned periodically. Purchase-history records are currently retained without an automated expiry schedule; a jurisdiction-appropriate retention schedule must be established before launch. Session tokens are hashed in storage, credentials are stored as server secrets, and account history is restricted to the signed-in Steam account.
Your choices and rights
Contact us to request access, correction, deletion, or other rights available under applicable law. We may need to verify your identity and may retain information where legally necessary. You can sign out and clear browser cookies. You may complain to the appropriate data-protection authority. We do not intentionally collect children’s information; contact us if a child’s information has been submitted.