Last updated: 29 October 2026
This Privacy Policy explains what personal data UncrateTrade collects, why, and what rights you have. It applies to uncratetrade.com, its support helper and the @UncrateTrade_bot Telegram bot.
1. Data controller
Vladislav Buravkov, a private individual based in Ukraine. Contact for any privacy question or request: [email protected].
2. What data we collect
- Steam profile: your SteamID, public profile name and avatar, received from Steam when you sign in.
- Order data: email address, Steam trade URL, number of keys, prices, chosen coin and network, wallet addresses, transaction hashes, Steam trade offer IDs and order status history.
- Reviews: rating and text you choose to publish, shown with your Steam name and avatar.
- Support: messages you send to the support bot or by email, your Telegram user ID and name, and attachments.
- Technical data: IP address, browser information and request logs, used for security and to keep the site working.
We never receive your Steam password, Steam Guard codes or wallet private keys. Please never send them to anyone.
3. Why we use it (legal bases)
- To carry out your orders and provide support — performance of a contract.
- To keep the Service secure, prevent fraud and abuse, and limit automated requests — legitimate interests.
- To keep records of transactions and to comply with legal obligations — legal obligation.
- To publish your review — your consent, which you can withdraw by asking us to remove it.
We do not sell personal data, do not use it for advertising and do not use analytics or tracking cookies.
4. Who receives the data
- Hetzner Online GmbH (Germany) — server hosting.
- Cloudflare, Inc. — domain, DNS, security and content delivery; handles your IP address and requests.
- Valve Corporation — Steam sign-in, Steam Web API and trade offers.
- Telegram — if you contact support through the Telegram bot.
- Google — if you contact support by email (support mailbox).
- Blockchain networks and exchange providers — wallet addresses and amounts of payments and payouts are recorded on public blockchains; when a payout is routed through an exchange provider, the provider receives the payout address and amount.
- Authorities — only where the law requires it.
Some recipients are located outside the European Economic Area or Ukraine (for example, in the USA). Where this happens, transfers rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
5. How long we keep it
- Order records — 5 years after the order is finished, for accounting, disputes and legal obligations; then they are deleted automatically. An order with a published review is kept without its email, trade URL, wallet and other details.
- Sign-in sessions — 7 days.
- Server request logs — up to 14 days.
- Support conversations — the bot keeps the state of a conversation for 30 days after the last message; messages in Telegram and in the support mailbox are deleted within 12 months, or earlier on request.
- Reviews — until you ask us to remove them.
Transactions recorded on public blockchains cannot be deleted by anyone.
6. Your rights
You can ask us to access, correct or delete your personal data, to restrict or object to its processing, or to receive it in a portable format, by writing to [email protected]. We reply within one month. Some data may need to be kept where the law requires it. You can also complain to a data protection authority — in the EU, the authority of your country of residence; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.
7. Security
The site uses encrypted connections (HTTPS), access to the server is restricted, and payout keys are kept separately from the website in isolated services. No system is perfectly secure, but we take reasonable measures to protect your data.
8. Age
The Service is for people aged 18 and over. We do not knowingly collect data of minors; if you believe a minor has used the Service, please contact us.
9. Changes
We may update this policy; the current version is always on this page with its date.