Privacy Policy

1. Introduction

This Privacy Policy explains how Pixatura OÜ ("Skins Empire", "we", "us" or "our") collects, uses, stores, shares and protects your personal data when you visit or use https://skins-empire.com (the "Website") and any related services (collectively, the "Services").

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Estonian Personal Data Protection Act, and other applicable data protection legislation.

This Privacy Policy should be read together with our Terms and Conditions and Cookie Policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Scope of this Privacy Policy

This Privacy Policy applies whenever you:

• visit our Website;
• create or use an Account;
• purchase Digital Items through the Services;
• communicate with us or contact customer support;
• subscribe to marketing communications (where available);
• otherwise interact with the Services.

This Policy does not apply to third-party websites or services linked from our Website, including Steam, Valve or payment providers.

4. Personal Data We Collect

4.1 Information You Provide

• email address and username;
• Steam profile URL and Steam Trade URL;
• information in support requests or other communications;
• any other information you voluntarily provide.

4.2 Account and Order Information

• Account identifier, Order history and purchased Digital Items;
• delivery status, payment status, refunds, cancellations or disputes;
• account activity relevant to fraud prevention and security.

4.3 Payment Information

Payments are processed by independent third-party Payment Providers (including Stripe). We do not store your full payment card number, CVV/CVC or other sensitive payment credentials. We may receive limited transaction information such as payment confirmation, status, transaction identifiers, amount, method and fraud prevention signals.

4.4 Technical Information

IP address, browser type and version, operating system, device information, language preferences, time zone, pages visited, referring website, date/time of access, session information, and diagnostic/security logs.

4.5 Cookies and Similar Technologies

See our Cookie Policy for details.

5. How We Collect Personal Data

• directly from you when you create an Account or use the Services;
• automatically through your use of the Website;
• from Steam where necessary to facilitate delivery;
• from Payment Providers in connection with payments and fraud prevention;
• from service providers that assist us in operating the Services.

6. Why We Process Your Personal Data

We process personal data only where we have a lawful basis under the GDPR: performance of a contract, legal obligation, legitimate interests, or consent where required.

• Account & Orders — performance of a contract
• Payments & refunds — performance of a contract
• Customer support — contract and legitimate interests
• Fraud prevention & security — legitimate interests / legal obligations
• Analytics & improvement — legitimate interests or consent where required
• Marketing — consent or legitimate interests where permitted

7. Legitimate Interests

Our legitimate interests include operating and improving the Services, preventing fraud, maintaining security, investigating breaches of our Terms, resolving disputes, analysing reliability, maintaining business records, and protecting our business and users.

8. Sharing Your Personal Data

We do not sell your personal data. Recipients may include:

• payment service providers (including Stripe);
• Steam and Valve, where necessary for delivery;
• cloud hosting, analytics, fraud prevention and support providers;
• professional advisers;
• competent authorities where disclosure is required by law.

9. International Transfers

Some providers may process data outside the EEA. Where that occurs, we use appropriate safeguards such as an adequacy decision or Standard Contractual Clauses.

10. Data Retention

• Account information — while active and a reasonable period afterwards
• Order & transaction records — as required by accounting, tax and legal obligations
• Support communications — as needed to resolve enquiries or claims
• Security logs — as needed for security and fraud prevention
• Marketing preferences — until you withdraw consent

11. Security of Your Personal Data

We use HTTPS, access controls, authentication, monitoring, fraud prevention measures and regular security updates. No method of transmission or storage is completely secure. You are responsible for keeping your Account credentials confidential.

12. Your Rights

Subject to GDPR conditions, you may have the right to:

• access, correct or delete your personal data;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• request data portability where technically feasible;
• lodge a complaint with a supervisory authority.

Contact us to exercise these rights. We may verify your identity and aim to respond within one month where required by law.

13. Children's Privacy

The Services are not directed to children and are intended only for individuals legally capable of entering into binding contracts. We do not knowingly collect personal data from anyone under 18.

14. Links to Third-Party Websites

We are not responsible for the privacy practices of third-party websites linked from the Website.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be published on the Website and, where appropriate, notified electronically. The Last Updated date indicates the most recent revision.

16. Supervisory Authority

For users within Estonia, the competent supervisory authority is Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate). You may also contact the authority in your EU Member State of habitual residence, work, or the place of the alleged infringement.

17. Contact Us