Privacy Policy
1. What we collect
We keep this deliberately small. We never receive your Steam password — sign-in runs through Steam's own OpenID flow.
| Data | Where it comes from | Why we have it |
|---|---|---|
| SteamID, display name, avatar | Steam, when you sign in | Identifying your account, profile pages, leaderboards |
| Game statistics (kills, deaths, rank, playtime) | Our CS2 servers as you play | Leaderboards, your profile, matchmaking balance |
| Preferences (website and in-game language, equipped skins) | You, through Settings and the skinchanger | Applying your choices when you visit or connect |
| Membership records (tier, expiry, payment reference) | Our payment providers when you buy VIP or ELITE | Granting benefits, support, accounting |
| Support emails (your address and whatever you write to us) | You, when you email our support address | Answering you and keeping a record of the issue |
| Technical data (IP address, approximate country, browser type) | Automatically, when you connect | Security, abuse prevention, showing the right language and payment options |
We do not collect card or bank details. Payments happen entirely on our providers' systems; we only receive a confirmation and a reference.
2. Why we use it
- To run the Service — sign you in, apply your settings, show your stats, deliver membership benefits.
- To keep it fair and safe — detect cheating, enforce bans, investigate reports and abuse.
- To support you — answer your emails and resolve payment issues.
- To meet legal obligations — keep payment records for as long as accounting rules require.
Where the GDPR applies, our legal bases are performance of a contract (running the Service you asked for), legitimate interests (security and abuse prevention), legal obligation (accounting), and consent where we ask for it.
3. Cookies
We use as few as we can, and none of them for advertising:
- coldpeek_auth — a signed, HTTP-only session cookie that keeps you logged in for 7 days. Strictly necessary.
- Local storage — remembers your website language choice on your own device. It is never sent to us.
We do not run third-party advertising or cross-site tracking cookies. Clearing your browser storage signs you out and resets your language preference.
4. Who we share with
We do not sell your data. We share it only with the providers needed to run the Service, and only what they need:
- Steam (Valve Corporation) — authentication and your public profile data.
- Payment providers — to process a purchase and confirm it back to us.
- Hosting and infrastructure providers — who store the data on our behalf under contract.
We may also disclose data where the law requires it, or to protect the rights and safety of our players and the Service.
5. How long we keep it
- Account, stats and preferences — while your account is active, and up to 24 months after your last session.
- Support emails — 24 months after the matter is resolved.
- Payment records — as long as accounting and tax rules require, typically 5–7 years.
- Ban and anti-cheat records — kept for as long as needed to keep the ban effective.
- Server logs containing IP addresses — up to 90 days.
6. Your rights
Depending on where you live, you can ask us to:
- Give you a copy of the data we hold about you.
- Correct anything that is wrong.
- Delete your data (we will keep what we are legally required to keep, such as payment records, and ban records where deletion would let a banned player return).
- Restrict or object to how we use it.
- Withdraw consent, where we relied on consent.
Email contact@coldpeek.com. We answer within 30 days, and we will ask you to confirm ownership of the SteamID first. If you think we have handled your data badly, you can also complain to your local data protection authority.
7. Security
Traffic to the website runs over HTTPS. Session cookies are signed, HTTP-only, and expire after 7 days. Access to the database is restricted to the systems and staff that need it. No system is perfectly secure, but if a breach ever affects your data we will notify you and the relevant authority as required by law.
8. Children
The Service is not directed at children under 13 (or the higher minimum age that applies where you live). We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
9. International transfers
Our servers and providers are located in Europe. If data is transferred outside your country, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
10. Changes to this policy
We will update this page when our practices change. The "last updated" date at the top always reflects the current version, and material changes will be announced on the website or our Discord.
11. Contact
Privacy questions go to contact@coldpeek.com. See also our Terms of Service and the Help page.