1. Data we collect
- Account data — your email, Steam ID, trade URL, and display name.
- Transaction data — orders, balance movements, and payout records.
- Verification data — identity documents you submit for KYC, where required.
- Technical data — IP address, device, and usage logs for security and analytics.
2. Why we process it (legal bases)
We process your data to operate the marketplace and deliver your orders (performance of a contract), to meet anti-money-laundering and tax obligations (legal obligation), and to keep the platform secure and improve it (legitimate interests). Optional analytics and marketing rely on your consent, which you can withdraw at any time.
3. Sharing & transfers
We share data only with the partners needed to run skin1 — payment processors, KYC and fraud-prevention providers, and infrastructure hosts — each bound by data-processing agreements. Where data is transferred outside the EU/EEA, we rely on adequacy decisions or EU Standard Contractual Clauses.
We never sell your personal data.
4. Retention
We keep account and transaction records for as long as your account is active and for the periods required by financial and tax law afterwards (typically up to 10 years for AML/accounting records). Data no longer needed is deleted or anonymized.
5. Your GDPR rights
You have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent and lodge a complaint with a supervisory authority.
To exercise any of these rights, contact our Data Protection contact at privacy@skin1.gg. You also have the right to complain to the data-protection authority in your EU member state.