Privacy Policy

Introduction

CSBoard ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

TL;DR: We collect only what's necessary for the platform to work, including financial data for buy/sell transactions. We don't sell your data. Ever.

1. Information We Collect

1.1 Steam Account Information

When you log in via Steam OpenID, we collect publicly available information:

• Steam ID — Your unique Steam identifier
• Username — Your Steam display name
• Avatar — Your Steam profile picture

This is publicly available on Steam. We store it to provide our Service.

1.2 Trade URL

You may provide your Steam Trade URL to enable trading and buy/sell functionality. It is optional for browsing, required for transactions. You can update or remove it at any time.

1.3 Inventory Data

When you provide a Trade URL, we fetch your CS2 inventory from Steam's public API:

• Item names, descriptions, and images
• Item condition (float values, wear level)
• Stickers, patterns, and other item attributes

We do not have custody of your items. We display information from Steam's API to facilitate trades and price quotes.

1.4 Financial & Transaction Data

When you use the buy/sell, balance, or payout features, we collect and store:

• Account balance — Current balance, balance history, and all changes
• Sale records — Items sold to the Platform, prices received, timestamps, Steam trade offer IDs
• Purchase records — Items bought from the Platform, prices paid, timestamps, Steam trade offer IDs
• Deposit records — Amounts deposited, cryptocurrency type, payment provider transaction IDs, blockchain confirmations
• Withdrawal records — Payout amounts, destination wallet addresses (partially masked in storage), processing status, completion timestamps
• Frozen balance records — Freeze amounts, reasons, investigation status

1.5 User Activity Data

• Trade offers created and received
• Comments and messages posted
• Items listed and watchlisted
• Last seen timestamp (for online status)
• Referral activity

1.6 Technical Data

• Cookies — JWT token for authentication (keeps you logged in)
• IP Address — Logged for security and fraud prevention
• Browser information — User agent, language preferences
• Analytics — Anonymous usage statistics via Google Analytics (if enabled)

1.7 Communication Data

If you contact our support team, we store your messages, attachments, and our responses for quality assurance and dispute resolution.

2. How We Use Your Information

• Service Delivery — Displaying your profile, listings, trade offers, and inventory
• Authentication — Keeping you logged in securely
• Processing Transactions — Executing buy/sell operations, crediting balance, processing payouts
• Fraud Prevention & AML — Monitoring transactions for suspicious activity, preventing money laundering, detecting abuse patterns
• Price Calculation — Using market data and item attributes to generate accurate price quotes
• Communication — Support responses, transaction notifications, important service updates
• Dispute Resolution — Investigating reported issues using transaction logs and trade history
• Service Improvement — Understanding usage patterns to improve the platform
• Legal Compliance — Meeting regulatory obligations for financial record-keeping

We do NOT:

• Sell your data to third parties
• Use your data for advertising
• Share your financial data with advertisers or marketing companies
• Track you across other websites

3. Financial Data Processing

Due to the financial nature of our buy/sell and balance features, we maintain detailed transaction records:

3.1 Payment Processors

Cryptocurrency deposits and withdrawals are processed through third-party payment providers (currently NowPayments). When you make a deposit or withdrawal, the following data is shared with the payment processor:

• Transaction amount and currency
• Destination wallet address (for withdrawals)
• Order/transaction reference ID

We do not share your Steam profile, inventory data, or activity data with payment processors.

3.2 Fraud Detection

We monitor transactions for patterns indicating fraud, abuse, or money laundering. This includes:

• Unusual transaction volumes or frequencies
• Rapid buy/sell cycles at manipulated prices
• Multiple accounts from the same IP or device
• Transactions associated with known fraudulent activity

If suspicious activity is detected, we may freeze your balance and request additional verification.

3.3 Auditing & Record-Keeping

All financial transactions are logged with timestamps, amounts, item details, and user identifiers for auditing purposes. These records are maintained in compliance with applicable financial regulations.

4. Data Storage & Security

Your data is stored securely on our servers. We implement:

• Encrypted connections (HTTPS/TLS)
• Encrypted database storage for sensitive financial data
• Wallet addresses partially masked in storage and display
• Access controls with role-based permissions
• Regular security monitoring and updates
• Authentication via Steam OpenID (no passwords stored)

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing & Third Parties

5.1 Steam (Valve Corporation)

We use Steam OpenID for authentication and Steam's API for inventory data. See Steam's Privacy Policy for details on their data handling.

5.2 Payment Processors

Cryptocurrency transactions are processed through NowPayments. Only transaction-specific data (amount, currency, wallet address) is shared — not your profile or activity data. See NowPayments' Privacy Policy.

5.3 Other Users

Information you share publicly on the platform (listings, trade offers, comments, profile) is visible to other users. Your Trade URL is visible only to authenticated users. Your financial data (balance, transactions) is private and never shared with other users.

5.4 Analytics Providers

We may use Google Analytics for anonymous usage statistics. No personally identifiable information or financial data is shared with analytics providers.

5.5 Legal Requirements

We may disclose your information, including financial transaction records, if required by law, court order, or governmental authority, or to prevent fraud and protect the rights of CSBoard and its users.

6. Your Rights (GDPR & Privacy)

You have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you, including transaction history
• Rectification — Update or correct your information via profile settings
• Erasure ("Right to be Forgotten") — Request deletion of your account and associated data
• Data Portability — Request your data in a machine-readable format
• Withdraw Consent — Stop using the Service at any time

To exercise these rights, contact us at privacy@csboard.trade

7. Cookies

• Authentication (Essential) — JWT token to keep you logged in. Required for the Service to function.
• Preferences — Currency and language settings.
• Analytics (Optional) — Google Analytics for anonymous usage statistics. Can be disabled in browser settings.

8. Children's Privacy

Our Service is not directed to children under 13. Financial features (buy/sell, balance, deposits, withdrawals) are restricted to users aged 18 and above. We do not knowingly collect personal or financial data from minors. If you are a parent or guardian and believe your child has used our financial features, contact us immediately.

9. Data Retention

We retain different types of data for different periods:

• Account data — Retained while your account is active. Deleted upon account deletion request.
• Trade offers & listings — Removed upon account deletion.
• Financial transaction records — Minimum 5 years after the transaction date, regardless of account status. Required for regulatory compliance and fraud prevention.
• Deposit & withdrawal records — Minimum 5 years. Includes amounts, dates, and anonymized wallet information.
• IP address logs — 90 days, then automatically purged.
• Support conversations — 2 years after last interaction.
• Anonymized analytics — Retained indefinitely for service improvement.

10. International Data Transfers

Your data may be processed and stored on servers located outside your country of residence. By using the Service, you consent to the transfer of your data to other jurisdictions. We ensure that appropriate safeguards are in place for international transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via a prominent notice on the Platform or by email. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Third-Party Links

Our Service may contain links to third-party websites (Steam Community, payment provider pages, external guides). We are not responsible for their privacy practices. Review their privacy policies before providing personal information.

13. Contact Us

For questions, concerns, or data requests: