Last updated: October 9, 2026

Skins Dojo is a marketplace for CS2 items. To run it we need to know a few things about you — enough to identify your account, take a payment, and send an item to the right place. This policy sets out exactly what that is, who else sees it, and what you can ask us to do with it.

What we collect

From your Steam account. You sign in with Steam, so we never see or store your Steam password. Steam gives us your Steam ID, your display name, your avatar, and access to your public inventory. We use these to identify your account and to show you the items you own.

Your trade URL. We ask for this when you register, and we keep it for as long as your account exists. It is how any item reaches you — whether you buy one or withdraw one you already own. Without it your account cannot trade at all.

Your balance and your transactions. Every deposit and purchase is recorded, along with the amount, the method and the time. We are handling your money, so this record has to be complete and we keep it.

Basic technical information. Our servers log IP addresses, browser type and pages requested, as any web server does. We set one cookie of our own, sessionId, which keeps you signed in and expires after 7 days. If you accept on the cookie banner, Google Analytics sets cookies too — see Cookies and analytics below. Your answer to the banner is kept in your browser's own storage, not in a cookie, and is never sent to us.

What we do not collect

We do not handle payment credentials at all. When you deposit, you leave our site and complete the payment on the provider's own page — your details go to them and never pass through our servers.

If you pay by card or wallet, that provider is Stripe. They see your payment details; we are told only that a payment succeeded and for how much.

If you pay by crypto, that provider is 0xProcessing. They give you an address to send funds to, and tell us when the payment arrives. Your wallet stays yours throughout — nothing about it reaches us.

We also do not buy data about you from anyone else.

Why we hold it

To run your account and show you the right items. To take payments and credit your balance. To receive trades. To keep records we are required to keep, and to investigate a problem if you report one. To detect fraud and protect other users. And, only if you accept cookies, to see how the site is used and to measure our advertising.

That is the whole list. We do not use your information for anything else, and we do not sell it.

Who else sees it

Steam. Trades happen on Steam's platform, so trade information passes through them. Their privacy policy applies to what they hold.

Our payment providers. Stripe and 0xProcessing, as described above.

Our trading partners. When you buy an item we do not hold ourselves, we might arrange it through a partner, and your trade URL is passed on so the item can reach you. Nothing else about you goes with it.

Google. Only if you accept cookies — see Cookies and analytics below.

Cloudflare. The site is delivered through Cloudflare, so your connection, including your IP address, passes through them on the way to us.

Anyone we are legally required to tell. A court order or a lawful request from an authority, and only what is asked for.

Nobody else. We do not sell your information, and we do not share it with data brokers or anyone else who might want it.

Cookies and analytics

We use Google Analytics 4 to see how the site is used — which pages people visit, how they found us, and where they give up — so we know what to fix. It only runs if you press Accept on the cookie banner. Until you do, and if you press Decline, Google's code is never loaded: nothing is sent to Google and no Google cookies are set. The site works the same either way.

What Google receives. The pages you view, the page that sent you here, your type of device and browser, and a random number that tells one visitor apart from another. Anything in an address that could identify you, such as a Steam ID or a search you typed, is removed before it is sent. Google uses your IP address to work out roughly which country and city you are in, and does not store the address in Analytics. Google is not told your Steam ID, your name, your trade URL or your balance.

The cookies. Google Analytics sets two cookies on skinsdojo.com: one holds the random number, the other keeps track of your current visit. They last up to 2 years and are renewed each time you visit; some browsers keep them for less — Chrome, for example, for at most 400 days.

Advertising. We may also use Google Ads, and accepting the banner covers that too. We would use it to measure our ads — whether someone who clicked one of them went on to sign up, deposit or buy — and to show our ads to people who have visited Skins Dojo before, on other websites and apps (this is called remarketing). That adds one cookie on skinsdojo.com, _gcl_au, which lasts 90 days, and Google may also use cookies on its own domains, such as doubleclick.net. For advertising, Google uses this data for its own purposes as well as ours, so Google's own privacy policy applies to it.

Who Google is. Google Analytics and Google Ads are run by Google LLC, a company in the United States. For analytics, Google handles the data for us and only on our instructions. Either way, information about your visit goes to the US, where the law does not protect it in the same way as in the EU and UK. Google is certified under the EU–US Data Privacy Framework and its UK extension, which the EU and UK accept as protecting your data properly — but US authorities can still, in some cases, require Google to hand data over. If you are in the EU or UK, we only do any of this with your consent, and pressing Decline costs you nothing.

Changing your mind. Click Cookie settings at the bottom of any page. That turns Google Analytics off straight away and deletes its cookies from your browser, and the banner comes back so you can choose again. Clearing your browser's storage has the same effect. Withdrawing stops anything new being sent; analytics data Google already holds is deleted on the schedule in How long we keep it.

How long we keep it

Your account information stays while your account exists. Financial records are kept for as long as the law requires, which may be longer than your account lasts — we cannot delete a transaction history on request, and neither can anyone else who handles money.

Server logs are kept for a short period and then discarded.

Google deletes Google Analytics data 14 months after it is collected.

What you can ask for

You can ask what we hold about you, and we will tell you. You can ask us to correct anything wrong. You can ask us to delete your account, and we will remove what we are not required to keep. You can withdraw your consent to analytics and advertising cookies at any time, from Cookie settings at the bottom of any page.

Depending on where you live you may have further rights — to object to how we use your information, to receive a copy of it in a portable form, or to complain to a data protection authority. If you want to exercise any of these, write to us and we will deal with it.

Security

Access to our systems is restricted and audited. Payment credentials never reach our servers. We take reasonable measures to protect what we hold, though no service can promise perfect security, and anyone who tells you otherwise is overstating it.

If something happens that affects your information, we will tell you.

Children

Skins Dojo is not for anyone under 18. We do not knowingly hold information about children, and if we discover that we have, we will delete it.

Changes

If we change this policy we will update the date above. If a change materially affects you, we will tell you rather than relying on you noticing.

Contact

Write to support@skinsdojo.com with anything about this policy, your information, or a request to exercise your rights.