Privacy Policy

This policy explains how CS2RICH ("we") handles personal data when you use cs2rich.com, cs2rich.market and our services. CS2RICH is responsible for your personal data and can be reached at the contact email at the end of this policy.

This policy covers the information we collect about you, how we use it, who we share it with, and the choices and rights you have. It applies to everyone who visits or uses the site, whether or not they sign in.

From Steam. When you sign in with Steam, we receive your Steam ID, your Steam display name and avatar, and your Steam profile URL. You sign in on Steam's own page, so we never receive or store your Steam password. If you save a Steam Trade URL, we keep it to deliver your skins.

When you sign in. The version of the Terms of Service you agreed to in the 18+ check, and when.

Email address. Before your first skin order or withdrawal (and, for new accounts, before you play), you verify one email address by entering a code we send to it. We keep the address, when it was verified, and the IP address it was verified from. We also keep a record of each verification code we sent and each account email we sent (to whom, when, and whether it was delivered), but never the code itself or the content of the message.

Bank deposits. Before your first bank deposit, you register one bank account: the bank, the account number and the account holder's name. For each deposit we also keep the amount, the time, the reference numbers, and the payer name and last digits of the paying account as reported by our payment partner.

Crypto deposits. We keep the deposit address issued for your payment, the coin and network, the amounts, our crypto payment processor's payment reference and the blockchain transaction ID.

Skin deposits. We keep your Steam ID, the trade offer, the items and their values, and information our skin-deposit partner sends us about your deposits with them.

Skin orders and withdrawals. We keep the item, the price, the order status and the Trade URL the skin was sent to. Before delivery, our marketplace supplier may check whether your Steam account can receive trades.

Support. We keep your support tickets: the subject, your messages and ours, and any pictures you attach, such as transfer slips or documents we ask for during an account review. For a missing-deposit claim we also keep the details of the account you paid from (bank, account number, name, amount and time). If you email us, we keep your email address and message.

Your use of the site. Your balance and transaction history, your game history, your level, giveaway entries, favourite cases, settings and chat messages. If you apply to our creator program, we keep the details you send: your channel, audience size, contact details and Steam profile.

Technical data. We record your IP address and browser details when you sign in, while you stay signed in, and when you make a deposit or an order. When your account is created we also record the country our network provider reports for your connection. If the site hits an error in your browser, we receive an error report: the error, the page address (without its query), your browser details, and your account ID if you are signed in.

How you found us. If you arrive through a creator's referral link or a campaign link, your browser remembers the referral code, the campaign tags, the first page you opened and the website that sent you, for up to 30 days. These details are sent to us when you sign in and are kept with your account when you first register. The referral code is also filled in for you when you deposit. When someone opens a creator's referral link, we record the visitor's IP address so we can count unique visits.

We use your information to:

• provide the service and run your account;
• process deposits, orders and withdrawals;
• operate the games you play, record their results and run giveaways;
• prevent fraud and abuse, including automated checks on payments, orders and account activity, which can pause an order or an account until a person reviews it;
• see which referral links and campaigns bring new players, and pay creators the commission they earn;
• show your public profile and results to other signed-in users (see Public information);
• keep records of transactions and of the Terms you agreed to;
• moderate chat;
• measure visits and site speed in aggregate;
• find and fix errors;
• respond to your support requests;
• comply with legal requests.

We share personal data only with the parties that help us run the service, and only what each one needs:

• Steam (Valve): your Steam ID, for sign-in and to load your Steam name and avatar;
• our payment partner, for bank deposits: your player number on our site, the bank, account number and holder name you registered, and the deposit amount. If you make a missing-deposit claim, we may send your transfer slip and the deposit reference to our payment partner through a messaging app so they can confirm the payment;
• our crypto payment processor, for crypto deposits: the order reference and amount;
• our skin-deposit partner, for skin deposits: your Steam ID, your trade link details and the items you deposit;
• our marketplace suppliers, for skins you buy or withdraw: your Trade URL and the item. They deliver the skin to you on Steam and may check that your account can receive trades;
• network and security services that receive your IP address and browser details to help deliver and protect the site;
• hosting and backup storage services that store our data;
• our email delivery provider, based in the United States: the address you verify and the content of the verification codes and account notices we send to it, and if you email us, your address and message;
• Steam and our suppliers, which receive your IP address when your browser loads item pictures and avatars from them;
• the creator whose referral link or code you used: they see the first letters of your display name and the amounts their commission is based on;
• authorities, when we are legally required to do so.

We never sell personal data.

We use essential cookies to sign you in and keep your account connected:

• Short-lived sign-in cookies confirm that you are signed in. They expire after a few minutes and are renewed while you use the site.
• A longer-lived sign-in cookie keeps you signed in for up to 30 days at a time. This period is renewed when the cookie is used, and the cookie is cleared when you sign out.
• Temporary cookies protect Steam sign-in, return you to the page you were viewing, carry referral or campaign details, and record the Terms version you agreed to. They expire after 10 minutes or are cleared when sign-in finishes.

We do not use advertising cookies or advertising scripts. Our network and security provider may set its own security cookies when it needs to check traffic; its analytics script (see Analytics) sets no cookies.

Where optional analytics are offered, a visitor identifier cookie is set only after you allow them. It lasts for up to 30 days and is limited to the site that set it. Rejecting optional analytics replaces it with a preference shared by visitors who made the same choice. Signing in uses separate essential cookies.

We also use your browser's own storage. Most of it never leaves your device: interface settings (such as fast mode, auto-sell, sound, chat and list settings), which notices and pop-ups you have closed, an unsent chat message, a copy of your favourites, and short-lived records that keep your sign-in and a game round consistent across tabs.

Two items are sent to us: a referral code from a creator's link, and how you found us (campaign tags, the first page you opened and the website that sent you). Each is kept for up to 30 days and sent when you sign in, and the referral code is also used when you deposit. You can clear this storage at any time in your browser settings.

If you have refused usage analytics on this device, that refusal is stored on the device so collection stays paused after a reload. This preference contains no visitor identifier and remains until you clear browser storage.

Our network and security provider adds a small analytics script to our pages. It measures visits and page speed without cookies or browser storage, and receives the page address, the page that linked to it, your browser type and loading times, together with your IP address as it carries the request. We use it only for overall statistics about visits and site performance.

We also measure which referral links and campaigns bring new players (see How you found us), and errors that happen on the site. We do not use advertising tools.

We also run first-party usage analytics on cs2rich.com and cs2rich.market. They are on by default and record selected page views, search length and filter choices, item selections, checkout steps, response categories and performance timings. They do not record text you type, chat messages, payment credentials, email addresses or verification codes, and do not record a replay of your screen.

When you are signed in, these usage measurements can be associated with your account across cs2rich.com and cs2rich.market. Anonymous visitor history is kept separate.

To stop usage analytics for your account or have these records deleted, contact support. Usage records expire after 30 days and are removed by routine cleanup. Deletion requests stop collection and queue earlier usage records for removal. Minimal preference records may remain so we can honour your choice and prevent old submissions from restoring deleted data. Essential account, transaction and security records follow their separate retention rules.

We keep your account, balance, transaction, deposit, order and game records for as long as your account exists, because we need them to run your balance, settle disputes and keep proper records. Sign-in records (IP address and browser details), the record of the Terms you agreed to, and the record of how you found us are kept with your account.

Some records are deleted automatically sooner: error reports within about three months, support tickets and their attachments one year after the ticket is closed, and some security records after a short period. Chat messages removed by moderation are hidden but kept in our records. We also keep backups to help recover data if needed.

If you ask us to delete your account, we delete or anonymise your personal data, except what we must keep for an open dispute or review, to prevent fraud, or because the law requires it.

We use encrypted connections and limit access to personal data to help protect it against unauthorised access, loss or misuse.

You can ask us to access, correct or delete the personal data we hold about you, to object to or restrict how we use it, or to withdraw any consent you have given us. Send the request from a support ticket while signed in, or email the contact address. We reply within 30 days once we have confirmed the account is yours. Some data may be kept while a review or dispute is open, or where we must keep it by law.

Some things you can do yourself: make your profile private in Settings, change your sound and other preferences, and clear the data your browser stores for this site.

Other signed-in users can see some of your information. People who are not signed in cannot.

• Always visible: your display name, avatar, level, the date you joined, and a creator badge if you have one.
• Visible while your profile is public (the default): how many cases, upgrades and battles you have played, how many items you have won, your best drop, and your play history. You can make your profile private in Settings; your name, avatar, level and joining date stay visible.
• Your name and avatar also appear with your results in battles, in the live drop feed, and in giveaway entrant lists and winner announcements, together with the item and its value.

When chat is open, your messages are shown to other signed-in users in real time and are moderated. We store chat messages and reports. Messages removed by moderation are hidden but kept in our records. Do not share personal data in chat.

You do not need an email address to sign in with Steam. You verify one address once, before money or skins leave your account, and we then use it for account security notices, including confirmation when the address is verified or unbound. We do not send marketing emails, and we do not sell or rent your address. The address is locked to your account; to change it, ask Support, and we will attempt to notify the old address. If a message to your address permanently bounces or you mark it as spam, we stop sending to it and you may be asked to contact Support to verify another address.

Replies to support tickets appear in Support; if you contact us by email, we may reply by email.

You must be 18 or older to use the service, and we ask you to confirm this before you sign in. If we learn that an account belongs to someone under 18, we close it and delete its personal data, except records we must keep by law.

If a data breach affects you, we will tell you promptly through a notice on the site.

We may update this policy. Changes are posted on the site with an effective date.

For any privacy question or request, email us at contact@cs2rich.com.