Privacy Policy
This Privacy Policy explains how CSWatcher (the "Operator", "we", "us") collects, uses, and protects personal data when you use CSWatcher and the https://cswatcher.com website. For the purposes of the EU/UK GDPR, the Operator is the data controller. Contact: support@cswatcher.com.
1. Data we collect
- Account — your email and password. Your password is never stored in a readable form.
- Licence — your plan, its expiry, and your request counts.
- Billing — handled by Stripe. We never see or store your card number.
- Activity — your own Auto-Buy history, kept for a limited period (Section 5).
- Settings — what you configure to run the tool, including any marketplace credential you choose to give it. Treated as sensitive and never sold.
- Technical — IP address, browser type and server logs, for security and diagnostics.
- Advertising measurement — the campaign identifier in the link you arrived from. Shared with the providers in Section 4 only if you consent (Section 7).
- Cookies — see Section 7.
2. How we use it
- To provide, operate, and maintain CSWatcher and your account.
- To process pass purchases and payments (via Stripe) and send you transactional email such as confirmation, invoice/receipt, and service notices.
- To secure the service, prevent fraud and abuse, and enforce our Terms and usage limits.
- To provide support and respond to your requests.
- To comply with legal obligations.
3. Legal bases (EU/UK GDPR)
We rely on: performance of a contract (to provide the service and billing you request); legitimate interests (security, fraud prevention, service improvement, direct communications about the service, and measuring which of our own marketing campaigns brought you to us — we have weighed this against your rights and consider it low-impact, as it involves no third party, no profiling, and no automated decision about you); consent where required — including for all third-party advertising measurement (Section 7), which never operates without it and which you may withdraw at any time; and compliance with legal obligations (such as tax and accounting records).
4. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate safeguards, including: Stripe (payment processing), our email delivery provider (transactional email), and our hosting/infrastructure provider. Only where you have consented to advertising measurement (Section 7) do we also share advertising identifiers and a hashed form of your email address with the advertising platforms we use to measure our campaigns, which may include Meta Platforms Ireland and X Internet Unlimited (Ireland); if you decline, nothing is shared with them at all. We may disclose data where required by law, to protect our rights, or in connection with a business transfer. When you direct CSWatcher to act on CSFloat, information necessarily flows to CSFloat as a result of your own instruction; CSFloat's handling of your data is governed by its own privacy policy. The same is true, in a narrower way, of every other marketplace you switch on: reading it means a request reaches it — sent from your own machine on the desktop app, or from your own browser through the extension — and that marketplace will see at least the technical data any web request carries, such as your IP address. Those requests carry no login and no account identifier for that marketplace, with the single exception of Steam, where the request is deliberately made on your own signed-in session so Steam will return float and paint seed (Section 12). Each marketplace's handling of your data is governed by its own privacy policy.
5. Retention
We keep account and licence data while your account is active and as needed to provide the service. Auto-Buy activity history and aggregated usage metrics are retained on a rolling basis (approximately 30 days) unless a longer period is needed for security or legal reasons. Billing and tax records are kept as long as required by law. When data is no longer needed, we delete or anonymise it.
6. Your rights
Depending on where you live (including under the EU/UK GDPR and, for California residents, the CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority. We do not sell personal data. Under the CPRA, disclosing identifiers to an advertising platform can count as "sharing" for cross-context behavioural advertising: that happens only where you have consented to advertising measurement (Section 7), and withdrawing that consent — from the cookie settings control on this site, or by emailing us — is also how you exercise the right to opt out of it. To exercise any right, email support@cswatcher.com; we will respond within the time required by applicable law and may need to verify your identity.
7. Cookies
Strictly necessary. A security/bot-clearance cookie that confirms your browser has passed our verification check, and a session/preference token stored in your browser. These are what make the site work, they are set on the strictly-necessary basis, and they cannot be switched off. You can block cookies in your browser, but parts of the site will then not function.
Advertising measurement — consent only. If you accept, we load measurement tools from the advertising platforms named in Section 4. They set their own cookies (for example Meta's "_fbp", which lasts up to 90 days), read the advertising click identifier in the link you arrived from, and receive a cryptographically hashed version of your email address, so that we can tell which advertisement led to a sign-up or a purchase. Nothing in this category loads, and no such cookie is set, until you accept it — declining is one click and is exactly as easy as accepting. You can withdraw consent at any time from the cookie settings control on this site or by emailing support@cswatcher.com, and we will not ask again for at least six months after you decline.
8. Security
We use technical and organisational measures appropriate to the risk, including password hashing, encryption in transit (HTTPS), access controls, and rate-limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International transfers
Your data may be processed in countries other than your own, including where our providers (such as Stripe) operate. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Children
CSWatcher is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Third-party links
The site links to third parties such as CSFloat, Steam, and Discord, and an alert links you directly to a listing on the marketplace it was found on. We are not responsible for the content or privacy practices of any of them; review their policies separately.
12. The CSWatcher CSFloat Bridge browser extension
- What it does — carries CSWatcher's marketplace requests from your own browser, on your own connection.
- Purchases — if you arm Auto-Buy, it carries the one request that will buy a listing with your own money, on your own account.
- When it runs — only while a CSWatcher tab is open, and only when your CSWatcher app asks it for something.
- Credentials — it holds no CSWatcher password and no licence key, and it never sends us a cookie, token or session id.
- On your device — it stores only the local settings it needs to reach your own CSWatcher app.
- No tracking — no analytics, no advertising, no browsing history.
- Your data — never sold, and never used for anything but providing the service you asked for.
Removing the extension, or withdrawing a permission, stops all of it immediately and deletes what it stored on your device.
13. Changes
We may update this Policy; the "last updated" date above reflects the current version, and material changes will be notified by email or an on-site notice. Continued use after a change takes effect means you accept the updated Policy.
Privacy questions or requests? Contact support@cswatcher.com.