Privacy Policy
Effective date: April 2025
Steam Refill (“we”, “us”, or “our”) operates steamrefill.com, a CS2 skin arbitrage deal finder that compares prices across third-party marketplaces. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Steam Refill you agree to the practices described here.
Steam Refill is not affiliated with, endorsed by, or sponsored by Valve Corporation or Steam.
1. Information We Collect
We collect only the information necessary to provide and improve our service.
Email address (optional)
If you subscribe to sell-reminder alerts, we collect the email address you provide. Subscribing is entirely voluntary. We use this address solely to send you the reminders you requested and to process your unsubscribe requests.
Usage and analytics data
We use PostHog to understand how visitors interact with the site. PostHog may collect:
— Pages visited and navigation paths
— Clicks and feature interactions
— Browser type, operating system, and screen size
— Approximate geographic location derived from IP address (country or region level)
— Referring URL
This data is collected in aggregate and is used to improve the product. We do not sell or share it for advertising purposes.
Bot-protection challenge data
Subscription forms are protected by Cloudflare Turnstile to prevent automated abuse. When you submit a form, Turnstile may collect signals from your browser environment (such as interaction patterns and environment attributes) to verify you are human. This processing occurs client-side and is governed by Cloudflare’s privacy policy. We do not receive or store raw Turnstile signals ourselves.
Information we do not collect
We do not collect payment card numbers, Steam credentials, marketplace account credentials, or any government-issued identification. We have no visibility into your marketplace transactions.
2. How We Use Your Information
We use the information we collect for the following purposes:
— Email reminders: If you subscribe, we send you sell-reminder emails at the timing you selected. We do not send promotional or marketing emails unless you have explicitly opted in to a separate communication.
— Service operation: To display real-time price comparisons and manage your subscription preferences.
— Product analytics: To understand which features are used, identify performance issues, and prioritize improvements.
— Security and abuse prevention: To detect and block automated or malicious use of the service via Cloudflare Turnstile.
We do not use your data for targeted advertising, sell it to third parties, or use it to build individual profiles beyond what is described above.
3. Third-Party Services
We rely on the following third-party services. Each has its own privacy policy and data processing terms.
Supabase
We use Supabase as our database and backend infrastructure. Subscriber email addresses are stored in Supabase’s hosted PostgreSQL environment. Supabase is SOC 2 Type II certified and encrypts data at rest and in transit. For more information, see supabase.com/privacy.
PostHog
PostHog provides product analytics. It processes anonymised or pseudonymous usage data on our behalf. We have configured PostHog to avoid capturing personally identifiable information in event properties. For more information, see posthog.com/privacy.
Cloudflare Turnstile
Cloudflare Turnstile is a privacy-preserving CAPTCHA alternative that validates form submissions without tracking users across sites. Cloudflare may process browser signals to determine whether a visitor is human. For more information, see cloudflare.com/privacypolicy.
4. Data Retention
We retain your email address for as long as you have an active sell-reminder subscription. When you unsubscribe, your email address is deleted from our database. You can unsubscribe at any time using the link included in every reminder email or by visiting the unsubscribe page.
Anonymised analytics data collected by PostHog is retained in accordance with PostHog’s own data retention settings, which we have configured to a rolling 12-month window.
We do not retain Turnstile challenge data; it is processed by Cloudflare at the time of form submission and is not stored on our servers.
5. Your Rights
Depending on your country or region of residence, you may have rights regarding your personal data, including the right to access, correct, or delete it. Regardless of jurisdiction, we will honor the following requests:
— Unsubscribe: You can remove your email address from our system at any time by clicking the unsubscribe link in any reminder email or by visiting steamrefill.com/unsubscribe.
— Deletion: To request deletion of any other data associated with your email address, contact us at [email protected]. We will confirm and complete the deletion within 30 days.
— Access: To receive a copy of the personal data we hold about you, contact us at the same address.
Because we collect minimal data and do not require account creation, there is typically very little personal data associated with any given individual beyond an email address.
6. Cookies & Analytics
Steam Refill uses a small number of cookies and similar browser storage mechanisms:
— Analytics cookies (PostHog): PostHog sets a first-party cookie to distinguish unique visitors and sessions. This cookie does not track you across other websites. You can opt out by enabling “Do Not Track” in your browser; PostHog respects this signal.
— Session/preference storage: We may store lightweight UI preferences (such as selected filters) in your browser’s localStorage. This data never leaves your device.
We do not use advertising cookies, third-party tracking pixels, or social media widgets that track you off-site.
7. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, please reach out to us:
Email: [email protected]
We aim to respond to all privacy-related inquiries within 5 business days.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of the page. Continued use of Steam Refill after any update constitutes your acceptance of the revised policy.