Privacy Policy

We keep things simple: SkinMarketCap collects as little personal data as possible. This policy explains what we collect, why, who helps us process it and what you can ask of us. SkinMarketCap is responsible for this data, and you can reach us at the address at the end of this page.

What we collect

If you just browse. A few small cookies that remember your last selected game, layout and language, plus anonymous visit counts from Cloudflare Web Analytics, which sets no cookies and doesn’t identify you. Like every website, our servers and Cloudflare, which delivers and protects the site, process your IP address and browser details to serve pages and block abuse. We never ask for your name, email or payment details, and no marketplace purchase ever goes through us.

Error monitoring. We use Sentry to find and fix crashes. When something breaks, Sentry receives technical details of the request, including your IP address and browser. A small share of visits is also recorded as a session replay so we can see what led to an error; replays mask all text and block images. This data is stored in the EU and deleted automatically after 90 days.

Public Steam profiles you look up. When you value an inventory, we fetch that profile’s public Steam data (persona name, avatar, SteamID and item list) and keep it for up to a day so repeat views are fast. Profiles that rank among the top inventories or belong to the esports roster stay stored so the leaderboards can show them. The stats page shows public FACEIT and Leetify data the same way, cached briefly and never stored for good. If a profile you own is shown here and you want it removed, write to the address below.

If you sign in with Steam. We store what your public Steam profile gives us: your persona name, your avatar and your SteamID, plus a public @handle generated from that name. Steam never shares your password with us, and it gives us no email address, so we generate an internal placeholder that cannot receive mail. Each sign-in also records the session’s browser and IP address.

What you create while signed in stays with your account: your watchlist, the items you rate, your tier lists, your Skin Awards votes, and anything you post, like, save or vote on in the community. Deleting a post removes it. To have your account and everything on it deleted, write to the address below.

If you use the API. We store a hash of your API key, never the key itself, together with its first few characters so you can recognise it. We also keep when the key was last used, how many credits you used in each period and your extra usage settings. Our servers log basic details of each request, such as the time, the endpoint and the response status, to run the service and investigate abuse.

If you buy an API plan. Payments for paid API plans are processed by NOWPayments. To process a payment, NOWPayments receives the order id and the amount, and handles your wallet and transaction data under its own privacy policy. Transactions on a blockchain are public by nature. We receive the payment’s status and the amount paid, and keep your payments, your balance and your plan with your account. We never receive card details.

Why we use it

• To provide what you ask for: your account, the features you use, the API and your plan.
• For our legitimate interests: keeping the service secure and working, fixing errors, preventing abuse, counting visits, and showing public Steam profiles on the inventory leaderboards.
• To meet legal obligations, such as keeping payment records.

We don’t sell your personal data, and we don’t use it for advertising.

Who processes it

A few service providers process data for us: our hosting provider, Cloudflare (delivery, security, analytics and image storage), Sentry (error monitoring) and NOWPayments (payments). When you sign in or look up a profile we query Steam with the SteamID, and for player stats we query FACEIT and Leetify the same way. Some of these providers process data outside your country, under their own safeguards.

How long we keep it

• Your account and what you create: until you delete it, or until we delete your account at your request.
• Cached public Steam profiles: up to a day, unless the profile ranks on a leaderboard or is on the esports roster.
• Sentry error data: 90 days.
• Payment and balance records: for as long as your account exists, and longer where the law requires.
• Server logs: a short time, for operations and security.

Your rights

Depending on where you live, you can ask us for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, or receive it in a portable format. Write to the address below and we’ll answer within a month. You can also complain to your local data protection authority. Deleting your account removes your API key and forfeits any balance, as our Terms of Service explain, but we keep the payment records the law requires us to keep.

Children

SkinMarketCap isn’t meant for children under 13, and paid plans are for adults only. If you believe a child has given us personal data, write to us and we’ll delete it.

Cookies

We use functional cookies and no advertising or tracking cookies. See our Cookie Policy for details.

Links to other sites

When you click through to a marketplace or a prediction market provider, you leave SkinMarketCap. Those sites have their own privacy policies, which we don’t control. The GIF picker in the community is powered by Klipy, so a GIF search goes to Klipy directly under its own privacy policy.

Changes and contact

We may update this policy; the date above shows the latest version. Questions? Email [email protected].