← Back to home

Privacy Policy

Last updated: February 5, 2026

NTSkins LLC ("NTSkins", "we", "our") is committed to protecting the privacy of users of our platform. This Privacy Policy explains how we collect, use, share, and protect your personal information, in compliance with applicable privacy legislation.

1. Data Controller

NTSkins LLC

2. Data We Collect

2.1 Registration Data

  • Steam ID and public Steam profile information (display name, avatar)
  • Email address (when provided)
  • Steam Trade URL

2.2 Transaction Data

  • Purchase and sales history
  • Deposit and withdrawal history
  • Wallet balance
  • Payment details (processed by our payment partners)

2.3 Technical Data

  • IP address
  • Browser and device type
  • Operating system
  • Pages visited and time spent
  • Access and activity logs

2.4 Verification Data (KYC)

When necessary, we may request identity documents, proof of address, and selfie for identity verification.

3. Purposes of Processing

We use your data to:

  • Service provision: Process transactions, skin deliveries, manage your account and wallet.
  • Security and anti-fraud: Detect and prevent fraud, abuse, and suspicious activities.
  • Customer support: Answer your questions and resolve issues.
  • Communications: Send notifications about transactions, service updates, and, with your consent, marketing.
  • Legal compliance: Comply with legal and regulatory obligations.
  • Service improvement: Analyze platform usage to improve features.

4. Legal Bases (LGPD)

We process your data based on:

  • Contract performance (Art. 7, V): To provide our services according to the Terms of Use.
  • Legitimate interest (Art. 7, IX): For security, fraud prevention, and service improvement.
  • Legal obligation (Art. 7, II): To meet legal and regulatory requirements.
  • Consent (Art. 7, I): For marketing communications and non-essential cookies.

5. Data Sharing

We may share your data with:

  • Payment processors: Stripe, Cryptomus, Woovi (to process transactions)
  • Analytics providers: Google Analytics, PostHog (to understand site usage)
  • Marketing providers: Meta Platforms, Inc. (Meta Pixel) (campaign measurement and remarketing)
  • Infrastructure providers: Hosting and CDN services
  • Authorities: When required by law or court order

We do not sell your personal data to third parties.

6. International Transfers

Some of our service providers may be located outside Brazil. In these cases, we ensure that data transfers are made with adequate safeguards, including standard contractual clauses or transfers to countries with adequate data protection levels.

7. Data Retention

We retain your data for as long as necessary for the purposes described in this policy, or as required by law. Transaction data is kept for at least 5 years for tax and compliance purposes. After account closure, non-essential data is deleted within 30 days, except when retention is legally required.

8. Security

We implement technical and organizational measures to protect your data, including: encryption in transit (HTTPS/TLS), restricted access control, security monitoring, and secure development practices. However, no system is 100% secure, and we cannot guarantee absolute security.

9. Your Rights (LGPD)

Under the LGPD, you have the right to:

  • Confirmation of data processing existence
  • Access to your data
  • Correction of incomplete, inaccurate, or outdated data
  • Anonymization, blocking, or deletion of unnecessary data
  • Data portability
  • Deletion of data processed with consent
  • Information about sharing
  • Withdrawal of consent

To exercise your rights, contact: [email protected]

10. Cookies

We use cookies and similar technologies (pixels, SDKs) to:

  • Essential cookies: Necessary for site operation (authentication, preferences).
  • Analytics cookies: To understand how you use the site (Google Analytics 4, PostHog).
  • Marketing cookies: To measure campaign effectiveness and personalize ads. We use the Meta Pixel (Facebook/Instagram), which sends pseudonymous events of page view, item view, checkout initiation, purchase and registration to Meta Platforms, Inc. for measurement and remarketing. Data is handled according to Meta's policy (https://www.facebook.com/policy.php).

You can manage cookies in your browser settings, opt out of Meta personalized ads at https://www.facebook.com/settings?tab=ads, and use Google Analytics opt-out tools. Disabling essential cookies may affect site functionality.

11. Children

Our services are not directed to persons under 18 years of age. We do not knowingly collect data from minors. If we become aware that we have collected data from a minor, we will delete that information.

12. Changes to this Policy

We may update this Policy periodically. Significant changes will be communicated by email or notice on the website. We recommend reviewing this page regularly.

13. Browser Extension (NTSkins Companion)

NTSkins Companion is an optional Google Chrome and Mozilla Firefox extension that automates P2P trade delivery verification and allows sending Steam trade offers directly from the NTSkins dashboard. The data below is processed ONLY when you install the extension and paste a token generated on your account.

13.1 Data the extension accesses

  • steamcommunity.com `sessionid` cookie — used exclusively to authenticate trade offer submissions to Steam, NEVER transmitted to our server.
  • Steam offer IDs, asset IDs and SteamIDs involved in trades you initiate — to sync sale state with your dashboard.
  • Steam trade status (accepted, declined, expired, on hold) extracted from steamcommunity.com pages you visit.
  • Unique token generated at ntskins.com/settings/extension — stored locally in your browser via chrome.storage.local.

13.2 Data the extension does NOT access

  • Steam passwords or Steam Guard Mobile Authenticator codes.
  • Browsing history outside steamcommunity.com and ntskins.com domains.
  • Other cookies, form data or content from other tabs.

13.3 Browser permissions requested

  • storage — save the access token locally.
  • cookies — read only the steamcommunity.com `sessionid` to send trades.
  • alarms — schedule periodic trade verification (every 3 minutes).
  • scripting — inject extension code into authorized pages (Steam and NTSkins).
  • declarativeNetRequestWithHostAccess — adjust the Referer header on one specific request so Steam accepts trades sent by the extension.

13.4 Removal

You may uninstall the extension at any time via your browser’s extensions page. Revoking the token at ntskins.com/settings/extension also stops tracking immediately. Trade data already linked to your sales remains for audit purposes.

14. Contact

For privacy questions or to exercise your rights:

You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

This document does not constitute legal advice. For specific legal questions, consult an attorney.

Privacy Policy | NTSkins | NTSkins