1. Data We Collect
When you use LuckyRecycler, we collect and process the following data:
- Steam ID: Your unique Steam 64-bit identifier, used as your account key across all LuckyRecycler systems.
- Display name and avatar:Fetched from Steam's public profile API and displayed in-platform (leaderboard, chat, game history).
- Trade history: Records of skins deposited and withdrawn, game participation, outcomes, and balance changes. Required for game integrity and dispute resolution.
- Affiliate and referral data: The affiliate code used at registration (if any) and your referral activity if you have generated a code.
- Technical data: IP address, browser type, and session timestamps — collected automatically for security monitoring and abuse prevention.
We do not collect passwords, payment card details, or government-issued identity documents.
2. How We Use Your Data
- Authenticating your session and linking it to your Steam account
- Executing and recording game outcomes and skin trades
- Displaying your username and stats on leaderboards (opt-out available in settings)
- Tracking affiliate referrals and paying commissions accurately
- Detecting and preventing fraud, multi-accounting, and bot activity
- Responding to support requests and resolving disputes
- Complying with legal obligations (e.g., retaining trade records for anti-money laundering purposes)
3. Data Storage
LuckyRecycler stores data in Cloudflare D1 (SQLite-compatible relational database) and Cloudflare KV (key-value cache), both operated within Cloudflare's infrastructure. Data is encrypted at rest using Cloudflare's managed encryption. Cloudflare's privacy and security posture is described at cloudflare.com/privacypolicy.
Backups are retained for up to 30 days. After account deletion, personal data is purged from live systems within 14 days; anonymised game-record data may be retained indefinitely for platform integrity purposes.
4. Data Sharing
We do not sell your personal data to third parties. Data is shared only with:
- Valve / Steam: Trade offers are executed via the Steam Web API. Valve receives information about trades involving your account per their API terms.
- Cloudflare: Infrastructure provider. Processes all traffic and stores all platform data.
- Law enforcement:Where required by valid legal process (court order, subpoena) in the operator's applicable jurisdiction.
5. Cookies
LuckyRecycler uses only session cookies, strictly necessary to maintain your authenticated session. We do not use advertising cookies, cross-site tracking cookies, or analytics beacons. Your session cookie expires when you log out or after a 24-hour inactivity period.
6. Your Rights (GDPR / Privacy)
If you are a resident of the European Economic Area or another jurisdiction with data protection laws, you have the following rights:
- Access: Request a copy of all personal data we hold about you.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your account and personal data.
- Restriction: Request that we limit processing of your data.
- Portability: Request a machine-readable export of your data.
- Objection: Object to processing based on legitimate interests.
To exercise any of these rights, submit a request via the Contact page. We respond within 30 days. Identity verification (via Steam) is required before processing deletion requests.
7. Contact
For privacy-related questions or data requests, use the Contact page.