General provisions
Skinly (“we”, “service”) respects your privacy and is committed to protecting your personal information. This Policy explains what information we collect, how we use it, and how we protect it when you use the Skinly platform.
By using Skinly, you acknowledge that you have read this Policy and agree to its terms. The service provides rental services for digital items (CS2 skins) through the Steam platform.
Personal data is processed in accordance with:
- the EU General Data Protection Regulation (GDPR)
- applicable data protection laws
What data we collect
We collect only the data needed for the service to work. They are split into 6 categories:
- Steam ID
- nickname and avatar
- trade link
- public profile information
- inventory information
- IP address
- approximate location (country, city)
- device and browser data
- language and settings
- rental history
- skin selection
- payments
- interaction with the interface
- support requests
- bank cards — with payment providers
- cryptocurrency transactions — on the blockchain
- email (optional)
- Telegram or another contact
- first and last name
- an identity document
How we use data
We use the collected data for the following purposes:
- providing the service skin rentals
- payment processing
- sending and returning trades through Steam
- fraud prevention
- user support
- improving the service
- analytics and personalization
Legal bases for processing:
- performance of a contract (the User Agreement)
- the user's consent
- legitimate interests (security and development of the service)
Sharing data with third parties
We share a limited amount of data with the following categories of recipients:
Cookies and analytics
We use cookies (small files saved in your browser) to:
- the site working correctly
- saving settings (language, currency, dark theme)
- behavior analytics to improve the service
You can disable cookies in your browser settings. Note that some site features may not work correctly afterwards.
Data storage
We store your data:
- while you use the service
- until contractual obligations are fulfilled
- within the requirements of applicable law
After the account is deleted the data is deleted or anonymized within a reasonable period — usually up to 30 days. Some data (for example, financial transactions) is kept longer in accordance with tax law requirements.
Your rights
In accordance with GDPR, you have the following rights regarding your data. Click "Request" — we'll open a chat with support and automatically fill in your request:
Data security
To protect your data, we apply security measures on several levels:
- encryption in transit (TLS/HTTPS) and at rest
- access restriction — only staff who need it
- protection against unauthorized access (monitoring, audit logs, 2FA)
- regular backups
However, no system can guarantee 100% safe. If you notice suspicious activity on your account, contact support immediately.
Transfer of data outside the country
Your data may be processed on servers in other countries (for example, the EU, the US). We ensure data protection using standard mechanisms recognized under international law:
- SCC — EU Standard Contractual Clauses
- provider certifications (SOC 2, ISO 27001)
- signing Data Processing Agreements (DPAs) with contractors
Children
If you are a parent or guardian and discover that a minor has provided us with data, contact support — we'll promptly delete that information.
Policy changes
We may update the Privacy Policy from time to time. Changes are published on the site with the new update date shown at the top of the page.
We'll notify you separately of significant changes (for example, by email or a banner on the site). Continued use of the service after the updates are published means you agree to them.
Contacts
For questions regarding the processing of personal data and exercising your rights, you can contact Skinly support:
- 💬 Support chat — the purple icon in the bottom-right corner of the site (we reply 24/7)
We aim to respond to all requests within 30 days, as GDPR requires.
Questions about privacy?
Want to find out what data we store specifically about you, or request its deletion? Message us — an agent will help you exercise any of your rights under GDPR.