This Privacy Policy (hereinafter — the "Policy") describes how the TradeOn online service (hereinafter — the "Platform", "Service", "we") collects, uses, stores, and protects the personal data of its users.

The TradeOn Platform is an independent third-party service and is not affiliated with Valve Corporation, Steam, or any of their subsidiaries.

By authorizing on the Platform via Steam OpenID, you confirm that you have read the terms of this Policy and consent to the processing of your data as described below.

If you do not agree with the terms of this Policy, please refrain from using the Platform.

Data obtained via Steam OpenID

When you authorize via Steam, we gain access to the following public information:

• Steam ID (your unique account identifier).
• Steam profile name.
• Profile avatar.
• Public inventory (subject to your Steam privacy settings).

Data provided during Platform use

• Trade URL (Steam item exchange link).
• Email address (when linked to your account).
• Transaction and operation history on the Platform.
• Internal account balance.

Automatically collected data

• IP address.
• Browser type and version.
• Device type and operating system.
• Cookies and similar technologies.
• Platform interaction data (pages viewed, visit duration).

Payment data

Bank card and payment system data is processed directly by payment providers. We do not store full payment card details on our servers.

We process your data for the following purposes:

• Service delivery — ensuring Platform operation, facilitating buy-sell and exchange transactions of virtual items, delivering items via Steam Trade Offers.
• Security — fraud prevention, detection of suspicious activity, protection of user accounts.
• Analytics — improving Platform performance, analyzing user behavior, optimizing interface and functionality.
• Support — handling user inquiries, resolving disputes.
• Marketing — sending notifications about new features and promotions (with your consent).
• Legal compliance — fulfilling legal requirements, responding to requests from authorized authorities.

Your personal data is processed on the following legal grounds:

• Contract performance — processing is necessary to fulfill the Terms of Service (conducting transactions, delivering items, managing balance).
• Legitimate interests — ensuring Platform security, fraud prevention, improving service quality.
• Consent — marketing communications and use of optional cookies.
• Legal obligations — storing financial data in accordance with legal requirements.

We use cookies and similar technologies to ensure Platform operation and improve user experience.

Types of cookies used

• Essential — ensure basic Platform functionality (authorization, session persistence, language settings). The Platform cannot function properly without them.
• Analytics — help us understand how users interact with the Platform (Google Analytics, Sentry). Data is anonymized.
• Functional — remember your preferences (currency, filter parameters, display settings).

Managing cookies

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect Platform functionality.

We may share your data with the following categories of recipients:

• Payment systems — for processing payments and balance top-ups.
• Steam API — for executing item exchanges, verifying inventory, and confirming Trade Offers.
• Analytics services — Google Analytics, Sentry (for error and performance monitoring).
• Hosting providers — for data storage and processing on servers.
• Law enforcement — upon legitimate request in accordance with applicable law.

We do not sell your personal data to third parties and do not share it for advertising purposes without your explicit consent.

We retain your data for the periods necessary for the purposes of processing:

• Account data (Steam ID, profile, Trade URL) — for the duration of your account on the Platform. Upon account deletion, data is removed within 30 days.
• Transaction data — 5 years from the date of the transaction in accordance with financial legislation requirements.
• Server logs (IP addresses, session data) — 90 days.
• Cookies — in accordance with the periods specified for each cookie type.

After retention periods expire, data is permanently deleted or anonymized.

We implement technical and organizational measures to protect your data:

• Encryption — data is transmitted over the secure HTTPS (TLS) protocol.
• Access control — only authorized personnel who need it to perform their duties have access to personal data.
• Monitoring — we continuously monitor security systems to detect and prevent unauthorized access.
• Backups — regular backup creation to prevent data loss.

Despite the measures taken, we cannot guarantee absolute data security during Internet transmission. You use the Platform at your own risk.

Regarding your personal data, you have the following rights:

• Right of access — you may request information about what data we process.
• Right to rectification — you may request correction of inaccurate or incomplete data.
• Right to erasure — you may request deletion of your account and associated data.
• Right to restriction — you may request restriction of data processing in certain cases.
• Right to data portability — you may receive your data in a structured, machine-readable format.
• Right to withdraw consent — you may withdraw previously given consent to data processing at any time.

To exercise your rights, contact our support team at support@tradeon.market. We will review your request within 30 days.

The TradeOn Platform is intended for individuals who are 18 years of age or older (or the age of majority in your jurisdiction).

We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have received data from a minor, we will take steps to promptly delete it.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@tradeon.market.

We reserve the right to modify this Privacy Policy at any time.

• Notification of significant changes will be published on the Platform.
• The date of the last update is indicated at the beginning of the document.
• Continued use of the Platform after changes are made constitutes your acceptance of the updated Policy.
• If you do not agree with the changes, you must stop using the Platform and, if necessary, request account deletion.

For any questions related to personal data processing and this Privacy Policy, you may contact us:

• By email: support@tradeon.market.
• Through the "Help" section on the Platform.

We aim to respond to all inquiries within 30 business days.