Privacy Policy Update

May 24th 2018

That's correct, Marketplace.tf is also amending its privacy policy. If you're wondering why everyone is changing their privacy policies, this guide on the GDPR is very helpful.

You can view our new privacy policy here. Below, we'll explain in less formal terms how we collect, use, and protect your data.

 

To provide everyone with access to Marketplace.tf, we have to collect certain information from and about you. Depending on the actions you perform on your account, we will collect different information. Our general policy is to only collect information that we have a legitimate business interest in using (and in a way that does not infringe on your privacy rights). 

-We use Google Analytics which records anonymous usage data for the purpose of analyzing usage of our website and improving upon our service. You can see Google's privacy policy here.

-It is safe to assume that we are always recording your IP address and usage activity (which pages you visited / how long / etc.) when you use Marketplace.tf. If you create an account with us, we will store your SteamID, along with information about your Steam account (avatar, name, trade offer URL, etc). This information is necessary to allow you to access your account, and to represent you to other users on the platform when you choose to interact on our public marketplace.

-When you share personal information with us, such as an email address, shipping/billing address, full name, etc., we will record the information unless otherwise stated. We do not collect your personal information unless you choose to provide it to us (either by providing it directly to us, or through one of our payment processors when making a payment).

-When you pay with PayPal, we record your PayPal account information (PayPal email address, full name, billing address, etc.) for anti-fraud and record-keeping purposes. 

-When you pay with a card without using PayPal, we will record limited card information (full name, last 4 digits, expiration date, CVV verification status, card brand, card country, email address, etc.) for anti-fraud and record-keeping purposes. It is impossible for us to access your full credit card number or CVV, as our payment processor does not provide this data to us.

-When you verify a card through our card verification system, we will record the same information listed above for direct card payments. When you click to "delete" a verified card, the verified card information is not automatically deleted from our database for the purposes of preventing fraud, but it is marked as deleted and the verification process must be re-initiated to use the card.

-When you verify a physical address through our address verification system, we will record and retain information on your address (the full text of the address, information on its component parts, information on its deliverability status through our postal partner, and any information relevant to the tracking of verification postcards). When you click to "delete" a verified address, the verified address information is not automatically deleted from our database for the purposes of preventing fraud, but it is marked as deleted and the verification process must be re-initiated to use the address.

-When you perform Steam trades with us we record all information about the trades. You can view your history of Steam trades with us here.

-When you use our APIs we may record usage information (IP address, access key, time, endpoint, path, etc.) for every API request.

-When you make changes to your account we may log information on the update (date of change, information changed, previous values in some cases).

-When you verify your identity we will record your basic identity information such as name, address, last 4 of card digits, etc. We do not request or store your Social Security Number (SSN) or similar tax identifiers at this time. The image files of the verification documents are encrypted whenever stored in our database. When an identity verification submission is denied, the images are deleted from our database immediately. When an identity verification submission is approved, the files are re-encrypted with a long-term asymmetric encryption key that is stored externally to the service itself.

SteamRep / Community Protection

Marketplace.tf strives to make the TF2 and Steam communities a safer, fraud-free environment. To this end, we may share certain information with outside organizations (SteamRep, Valve) or representatives of other platforms we own (scrap.tf, backpack.tf). The information we share with these parties is limited and restricted solely to their duties. Specifically, we may share the following pieces of information with the aforementioned parties:

  • Your Steam Account information (name, URL, avatar, SteamID, etc.)
  • Limited usage information (history of IP usage, alt accounts detected by IP sharing, etc.)
  • Item deposit / withdrawal information (if you put an item onto Marketplace.tf to sell it, or withdraw an item that you have not sold, that information may be shared.).

We will never share payment information such as card details, name, email addresses, shipping/billing addresses, etc. with these parties.