Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect the following types of information when you use CHESTF:

  • Steam Account Data: Your Steam ID, username, and avatar URL obtained through Steam OpenID authentication.
  • Trade Data: Information about items you deposit, withdraw, buy, or sell on the Platform, including transaction timestamps and values.
  • Financial Data: Cryptocurrency transaction details including wallet addresses, amounts, and blockchain transaction hashes.
  • Technical Data: IP address, browser type, device information, and usage patterns collected automatically when you access the Platform.

2. How We Use Your Information

  • To provide and maintain our trading services
  • To process transactions and manage your account balance
  • To send trade offers through Steam and confirm transactions
  • To detect and prevent fraud, abuse, and security breaches
  • To comply with legal obligations
  • To improve our services and user experience

3. Data Storage & Security

Your data is stored in secure databases with encryption at rest and in transit. We implement industry-standard security measures to protect your personal information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

4. Steam Integration

CHESTF integrates with Steam to facilitate item trading. We only access your Steam inventory and trade offers as necessary to provide our services. Your Steam login credentials are never stored on our servers — authentication is handled through Steam's OpenID protocol.

5. Cryptocurrency Transactions

Cryptocurrency transactions are processed through our payment gateway. Blockchain transactions are public by nature and cannot be deleted. We generate unique deposit addresses for each user to facilitate deposits while maintaining privacy.

6. Third-Party Services

We may use the following third-party services:

  • Steam / SteamWebAPI: For authentication and item data retrieval
  • Blockchain Networks (BSC, Avalanche): For processing cryptocurrency transactions
  • Supabase: For secure database hosting and management

7. Data Retention

We retain your account data for as long as your account is active. Transaction records are retained for a minimum of 2 years for audit and dispute resolution purposes. You may request deletion of your account, subject to pending transaction settlement.

8. Your Rights

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Object to processing of your data for specific purposes
  • Request a copy of your data in a portable format

9. Cookies

CHESTF uses essential cookies for session management and authentication. We do not use tracking cookies or share data with advertising networks.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the Platform. Continued use after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through our Support page.

← Back to CHESTF