Legal
Privacy Policy
Last updated: 6 November 2026
This policy explains what personal data trade-crates.tf collects and how it is used. The site is operated from Romania and follows the EU General Data Protection Regulation (GDPR). We collect as little as we need to run the trades.
1. Data we collect
- Steam account data when you sign in: your SteamID64, display name and avatar, as provided by Steam. We never receive your Steam password or Steam Guard codes.
- Trade URL, if you save it in your profile.
- Trade records: the items in each trade, prices, status, verification code and timestamps.
- Sign-in sessions: a hashed session token and its expiry date.
- Visit statistics, only if you accept the statistics cookie: a random visitor ID stored in a cookie and the number of pages viewed per day. If you are signed in, it is linked to your account.
- IP address: used briefly to protect the site against abuse (rate limits). Our web server can keep it in security logs for a short time.
2. Inventory value calculator
When you check an inventory on the value page, we read that public Steam inventory from Steam. It is cached in memory for up to 10 minutes to avoid repeated requests and is not saved in our database.
3. Why we use it
- To sign you in and run your trades (needed to provide the service you asked for).
- To prevent fraud, abuse and impersonation, and to keep the site secure (our legitimate interest).
- To count visits and improve the site (only with your consent to the statistics cookie).
- To keep records we are required to keep by law, when that applies.
4. Who we share it with
- Valve / Steam, to send and track trade offers and to read inventories.
- Our hosting provider, which stores the site's servers and database.
5. We don't sell your data
We don't sell personal data and we don't use advertising or third-party tracking. Sponsored banners on the site are plain links and don't track you. Item images are loaded from Steam's servers.
6. How long we keep it
- Account data and trade records: while your account exists, and afterwards as long as needed for disputes, fraud prevention or legal duties.
- Sign-in sessions: 30 days.
- Visitor ID cookie: 1 year. Visit statistics are used only as daily totals.
7. Your rights
Under the GDPR you can ask to access, correct or delete your data, restrict or object to its use, and get a copy of it. You can also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro). To make a request, message us through the owner's Steam profile.
8. Children
The site is not intended for children under 16.
9. Cookies
See the Cookie Policy for the cookies we use.
10. Changes
We may update this policy. The date at the top shows the latest version.