Privacy policy

Account data

• Email address and a hashed password, or, if you sign in with Google or Discord, the email and account ID that provider gives us.
• Plan and subscription status; Stripe customer and subscription IDs. Payments are processed by Stripe; we never see card numbers.
• Usage counts per feature and day, used for plan limits.

Data read from marketplace pages

The extension only runs on the marketplaces listed in its manifest (Skinport, SkinBaron, CSFloat, Skin.place, LIS-SKINS, DMarket, ShadowPay, CS.Money, white.market, Waxpeer). On those pages it reads:

• Item names, wear, Doppler phase, float value and the displayed listing price and currency, to look up comparison prices.
• Item identifiers from listing links (URL slugs), to work out the exact item name when the page does not show it.
• When you start the Pro “Scan ROI” feature: the listings on the current page, including their links, prices and floats, to calculate the result.

Signed-out users get prices from a public price list stored in the extension; only signed-in users send lookups to our server. Those lookups are tied to your account, so our server sees which items you look up and scan. We use this to answer the request and enforce plan limits, not to build browsing profiles. The extension does not read or send the addresses of pages you visit apart from the listing links above, and it does not run on any other website.

On white.market and cs.money the extension also reads the responses of those sites’ own catalog requests, because the full item name is not in the page markup. This happens only inside your browser and only for requests to the site itself; nothing from these responses except item names leaves your device.

The extension never reads form input, cookies, passwords, session tokens or request headers of the marketplaces, and never your Steam credentials.

Third parties

• Price lookups are answered by our server (ext-api.cspriceapi.com), which uses the CSPriceAPI data service; your account is not shared with it.
• Item images in the price panel are loaded directly from image hosts such as api.steamapis.com and Steam’s image servers. Like any image on the web, these hosts see your IP address and the image requested.
• Stripe processes payments. Google and Discord are used only if you choose to sign in with them.

We do not sell personal data and do not use it for advertising.

Server logs

Our servers log requests (time, IP address, requested path including item names, status) for security and troubleshooting. Logs are deleted after at most 30 days. Rate-limit counters keyed by IP address or account expire within minutes.

Retention and your rights

Account data is kept while your account exists. You can request access to or deletion of your data at support@cspriceapi.com; deleting the account removes it, apart from records we must keep for tax purposes (invoices).