Legal
Privacy Policy
This policy describes the data that МИКОЛА ЧЕРНЕТА collects through this website, why it is processed and how long it is kept. It covers only what the site actually does.
1. Who is responsible
The controller of the data described here is МИКОЛА ЧЕРНЕТА, вул. Центральна, 27, с. Лісове, Vinnyts'ka oblast, Ukraine, 23000, Ukraine. For any question about this policy, or to exercise the rights listed in section 8, write to [email protected].
2. What we collect
We collect only what you type into one of the two forms, plus the minimum technical data needed to keep those forms usable.
| Data | Where it comes from | Why we hold it |
|---|---|---|
| Steam Trade URL | Trade request form | To send you a trade offer if you accept the terms we propose |
| Email address | Both forms | To reply to your request; it is the only channel we use |
| Notes or message text | Both forms | To understand and answer the request |
| Name and subject | Contact form | To address you correctly and route the message |
| Reference number and time of submission | Generated by our server | To identify the request in later correspondence |
| IP address of the submission | Your connection, at the moment you submit a form | Rate limiting and abuse prevention |
We do not ask for and do not want your Steam password, Steam Guard code, recovery code, session cookie or API key. If you send any of these to us by mistake, we delete the message and ask you to change the credential.
There is no registration on this site, so we hold no profiles, no passwords and no payment card data. The site runs no analytics, advertising, profiling or automated decision-making.
3. Why we may process it, and on what basis
- To answer your request. Processing is necessary to take steps at your request before entering into an agreement, and to perform that agreement if an exchange goes ahead.
- To keep the service usable. Rate-limit counters and the IP address stored with a submission are processed on the basis of our legitimate interest in preventing abuse of the forms.
- To meet legal obligations, where a law of Ukraine requires us to keep or disclose specific records.
4. Who else sees it
The data is handled by the people who operate the service. Beyond that, it is stored on servers run by our hosting provider, which acts on our instructions and does not use the data for its own purposes, and it travels through the email provider we use to reply to you.
We do not sell personal data, do not share it with advertisers and do not transfer it to third parties for their own marketing. We disclose data to an authority only where we are legally required to do so.
5. How long we keep it
- Trade requests and contact messages: up to 12 months from the last message about the request, then deleted. Records connected to a completed exchange may be kept longer where a legal obligation requires it.
- Rate-limit counters: they contain a one-way hash of the IP address or email address and a timestamp, and they expire within 60 minutes.
- Server error logs: kept by the hosting platform for a short period for diagnosing faults, and never used to build a profile of a visitor.
6. How it is protected
Submissions are written to a directory that is not reachable over the web, and the web server denies access to it. The site is served over HTTPS with HTTP Strict Transport Security, sends a restrictive Content Security Policy and loads no third-party scripts, fonts or trackers. Forms use signed anti-forgery tokens, server-side validation, length limits and rate limiting. No system can be described as perfectly secure, so we do not claim that; the security page lists the specific measures in place.
7. Cookies
Reading pages on this site sets no cookies. One strictly necessary session cookie is created when you submit a form, so that the confirmation page can recognise the request you have just sent. It carries no advertising or analytics identifier. The Cookie Policy describes it in full.
8. Your rights
Under the data protection law of Ukraine you may ask us to give you a copy of the data we hold about you, to correct it, to delete it, to restrict or object to its processing, or to provide it in a portable form. Where processing rests on consent, you may withdraw that consent at any time.
Write to [email protected] from the address you used in the form, or quote your reference number, so that we can find the record. We answer within one month. You also have the right to complain to the competent data protection authority in your country.
9. Deleting your data
To have a request deleted, send its reference number to [email protected] and ask for deletion. We remove the stored record and the related correspondence, unless a specific legal obligation requires us to keep part of it, in which case we tell you which part and why.
10. Children
The service is not directed at children. See the eligibility section of the Terms of Service for the age requirement.
11. Changes to this policy
If this policy changes, the new version is published on this page with a new date at the top. We do not apply changes retroactively to data that has already been deleted.