Sign in with Steam
We are committed to protecting your privacy and handling your personal data transparently and in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act. This policy describes what we collect, why, how long we keep it, and the rights you have.
1. Data Controller
The controller responsible for your personal data is Falken Systems OÜ, contactable at privacy@regalskins.com.
2. Personal Data We Collect
- Contact & account data — email address, and any name you provide.
- Order & delivery data — your Steam ID and Steam trade link, the Items purchased, order history, and billing details required to complete a purchase.
- Payment data — processed by our payment providers. We receive confirmation of payment and limited transaction metadata; we do not store full card numbers.
- Technical data — IP address, device and browser type, and usage data collected through cookies and similar technologies (see our Cookie Policy).
- Communications — messages you send us through email or support channels.
3. How and Why We Use Your Data (Legal Bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and delivering your Orders; account management | Performance of a contract (Art. 6(1)(b)) |
| Payment processing and fraud prevention | Legal obligation & legitimate interests (Art. 6(1)(c), (f)) |
| Customer support and communications | Performance of a contract / legitimate interests |
| Site security, analytics, and improving our service | Legitimate interests (Art. 6(1)(f)) |
| Non-essential cookies and marketing (where used) | Your consent (Art. 6(1)(a)) |
| Compliance with accounting and tax law | Legal obligation (Art. 6(1)(c)) |
4. Sharing Your Data
We share personal data only as necessary, with:
- Payment providers — to process your payments securely;
- Valve Corporation (Steam) — to deliver Items to your trade link;
- Service providers — hosting, infrastructure, analytics, and anti-fraud partners acting as our processors under data-processing agreements;
- Authorities — where required by law or to protect our legal rights.
We do not sell your personal data.
5. International Transfers
Your data is primarily processed within the European Economic Area (EEA). Where a provider (for example, Steam) processes data outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
6. Data Retention
We keep personal data only for as long as necessary for the purposes described above: order and transaction records are retained for the period required by Estonian accounting and tax law (generally 7 years); account and contact data are kept while your account is active and for a reasonable period afterwards; technical and cookie data are kept for shorter periods as described in our Cookie Policy.
7. Your Rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- request rectification of inaccurate or incomplete data;
- request erasure (“right to be forgotten”);
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time, without affecting prior lawful processing;
- lodge a complaint with a supervisory authority.
To exercise any of these rights, email privacy@regalskins.com. You may also contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the authority in your EU country of residence.
8. Security
We use appropriate technical and organisational measures — including encryption in transit (SSL/TLS), access controls, and PCI-DSS compliant payment processing — to protect your personal data against unauthorised access, loss, or disclosure. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security.
9. Children
The Website is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
10. Changes to this Policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the current version. We encourage you to review this page periodically.
11. Contact
For any privacy question or request, contact our data controller at privacy@regalskins.com, or write to Falken Systems OÜ at the registered address above.