Privacy policy

Last updated: September 2026.

Data collected

Skinlooters does not offer account creation and does not collect any identifying data. When a click on an offer is made, the relevant platform, the timestamp and the technical page referrer are logged for statistical purposes (measuring source performance), with no link to an individual identity. The site also uses a self-hosted, cookie-free traffic-analytics tool (Umami), which logs the page viewed, the referring page, an approximate country and device/browser type for each visit, purely for statistical purposes, with no identifier that could recognise an individual or be cross-referenced with any account.

Price alerts

If you create a price alert, your email address and the chosen price threshold are kept so we can send you a confirmation email and, once the alert is confirmed, an email when the price drops below that threshold. No account is created: the alert is identified by a unique link sent by email (via our provider Resend), which also lets you unsubscribe at any time without justification.

Steam account

If you sign in with Steam, your Steam ID is stored, along with your Steam display name and avatar when available, so you can track your skin portfolio and badges. This data stays private by default.

Public profile (player card)

From the "My portfolio" page, you can choose to make your profile public. Once enabled, a page anyone can view (badges, current portfolio value) becomes visible at a URL based on your Steam ID. The detail of your items and their purchase price always stays private. You can turn sharing off again at any time from the same page.

API customer account (B2B)

If you subscribe to the B2B API offer, your email and the Stripe customer ID tied to your subscription are kept to manage your API key and billing, handled by our payment provider Stripe. The API key is never stored in plain text: only its hash is kept, so you can only retrieve it from the confirmation email or by regenerating it from your account (pro.skinlooters.com). Signing in to that account uses a single-use link sent by email (like price alerts, no password is stored), valid for 15 minutes. The number of requests made each day with your key is kept for 30 days to show you your usage history — the content of your requests (e.g. the skins your own users search for) is never logged.

Retention period

Each piece of data is kept for as long as the matching feature stays active: a price alert until you unsubscribe, or until it automatically expires after 30 days without renewal (it then stops being monitored, without the data being erased automatically); a Steam account and the data tied to it (portfolio, badges, public profile) for as long as the account exists; an API subscription for as long as it's active. Beyond that, or at any time, you can ask for your data to be deleted by writing to hello@skinlooters.com.

Hosting

Data is hosted in France by OVHcloud, within the European Union (see the legal notice for the host's details). Our providers Resend (emails) and Stripe (payments for the B2B API offer) may process data outside the European Union, under the safeguards described in their respective privacy policies (GDPR standard contractual clauses).

Cookies

The site does not set any advertising tracking or third-party analytics cookie. It only uses strictly necessary technical cookies to keep you signed in (Steam login or API customer account), which serve no other purpose.

Rights

In accordance with the GDPR, you have the right to access, rectify, erase and restrict the processing of your data, as well as rights to object and to data portability. You can exercise these rights at any time by writing to hello@skinlooters.com. If you believe your rights aren't being respected, you can also file a complaint with the data protection authority in your country of residence (e.g. the CNIL in France).