Privacy Policy
Last updated: 2025-02-08
Welcome to tf2crypto or Munchy Bot ("Website," "we," "our," or "us"). Your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. By using our platform, you acknowledge and agree to this Privacy Policy.
1. Legal Basis for Data Processing
- Contractual Necessity – To authenticate and manage your account and process transactions.
- Legitimate Interest – To ensure security (Cloudflare), maintain website performance (Render logs), and improve user experience (analytics).
- User Consent – For analytics via PostHog, which requires explicit opt-in consent.
Note: We collect fully anonymized data for basic usage analytics before consent is given or if rejected.
2. Information We Collect
2.1. Account and Authentication Data
We collect your Steam ID and publicly available profile information when you sign in using Steam. We use cookies to maintain your authentication session.
2.2. Transaction Data
When users place an order, we collect transaction details such as cryptocurrency amount, number of TF2 keys, wallet address, timestamps, and payment confirmations from SwapSpace.
2.3. Usage Data & Analytics
We use PostHog for analytics to improve our website and make it more intuitive to use. PostHog collects personal usage data only with user consent. Individual users are not tracked until they accept the cookie banner.
2.4. Technical and Security Data
Our website uses Cloudflare for security and Render for hosting. These services collect security and performance-related data.
3. How We Use Your Data
- Authentication and account management
- Processing and confirming transactions
- Analyzing website usage
- Ensuring security and preventing fraud
- Maintaining website performance
4. Cookies and Tracking Technologies
We use cookies for authentication, security (Cloudflare), and analytics (PostHog). Opted in users can opt out out of personalized analytics any time by clearing their browser cache and rejecting the cookie banner.
5. Data Sharing and Transfers
We do not sell or share your data. Data may be processed by PostHog, Cloudflare, Render, and SwapSpace, all of which comply with GDPR regulations.
6. Your Rights Under GDPR
- Right to Access
- Right to Rectification
- Right to Erasure
- Right to Data Portability
- Right to Restrict Processing
- Right to Object
- Right to Withdraw Consent
7. Data Retention
Authentication and session data are stored as long as you have an active account. Transaction data is stored for record-keeping, and analytics data is stored only with consent.
8. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices. Users will be notified of significant updates.
9. Contact Information
For GDPR-related inquiries, contact us at [email protected]
