Privacy Policy
What we collect, what we don't, and how we keep your Steam account safe. Plain English — no dark patterns.
Who we are
Hostadz.com (“Hostadz”, “we”, “us”) operates an automated peer‑to‑peer CS2 skin trading platform built on top of Steam's official trade offer system. We are not affiliated with Valve, Steam, or any game publisher.
What we collect
We store only what is needed to run the trading service:
- Steam ID — returned by Steam's OpenID after you sign in. Used to identify your account on Hostadz.
- Steam Trade URL — pasted by you. Used so the bot can send trade offers to your inventory.
- Site balance & trade history — items you have traded with the bot and any overpay credit on your account.
- Anonymous request logs — IP, user‑agent, page path, and referrer for fraud prevention and basic analytics. Retained 30 days.
What we do not collect
- Your Steam password — sign‑in goes through Steam's OpenID; we never see it.
- Payment information — Hostadz does not buy or sell skins for cash.
- Any personal data beyond what Steam returns (no email, real name, or phone).
- We do not sell, rent, or share your data with third parties for marketing.
Cookies & local storage
We use a single session cookie after you sign in to keep you logged in, and localStorage to remember UI preferences (filters, sort order, theme). No third‑party tracking pixels, no cross‑site advertising cookies.
Steam Trade URL — what it can and can't do
Your Trade URL only allows others to send you trade offers. You must still accept every offer manually through your Steam app or browser. Nobody can take items from your inventory without your explicit approval. You can invalidate any old Trade URL at any time by generating a new one from your Steam privacy settings.
Data retention & deletion
You can delete your Hostadz account and all associated data by contacting us on Discord. Trade history required for accounting purposes may be retained in anonymised form for up to 12 months.
Security
We use industry‑standard TLS for all traffic. Steam credentials never touch our servers. Trade bots run in isolated environments with hardware‑pinned API keys. We have not had a security incident.
Changes to this policy
If we make material changes to this policy we will post the updated version here and refresh the “Last updated” date above. Continued use of the service after changes are posted constitutes acceptance.
Contact
Questions? Reach us on Discord.