Privacy Policy
Last updated: 2026-10-10
This Privacy Policy explains what personal data STEAMLTU ("we") processes when you use steamltu.lt / csltu.lt, and your rights under the EU GDPR.
Who we are
STEAMLTU is operated by MB VARIANTAI, a company registered in Lithuania (company code 306133252, VAT LT100016340412), running a peer-to-peer marketplace for Counter-Strike 2 and Rust skins. MB VARIANTAI is the data controller. For privacy questions, contact legal@steamltu.lt.
Data we collect
When you sign in with Steam we receive your public SteamID, persona name and avatar. You may add a Steam trade URL and an email address for notifications. We store the listings, trade posts, offers, orders and reviews you create, your balance and its transaction history, plus basic technical data (IP, device, cookies). To pay you out we store the legal name and bank account number (IBAN) you give us. If you connect it, we store a Steam access token used only to confirm that a trade was delivered. Card and online-banking details are entered with our payment provider (Paysera) and are never seen or stored by us.
How we use your data
To operate the marketplace and escrow, verify trades, prevent fraud and abuse, provide support, and meet legal obligations.
Legal basis
We process data to perform our contract with you, for our legitimate interest in running a safe marketplace, to comply with the law, and — for non-essential cookies — with your consent.
Sharing
We share data only as needed: with Paysera to take payments; with our bank to send payouts; with Steam/Valve via your trade; with our service providers — Vercel (hosting and cookieless analytics), Neon (database), Resend (email), and Discord (internal operational alerts, which can include a SteamID and order details); and with authorities where legally required. Pages may show a banner served by the A-Ads network in an isolated frame. We do not sell your data.
Retention
We keep data while your account is active and as required to resolve disputes, meet accounting and legal duties, and cover the Steam trade-protection period.
Your rights
Under the GDPR you can access, correct, delete, restrict or port your data, and object to processing. Contact legal@steamltu.lt. You may also complain to the Lithuanian State Data Protection Inspectorate (VDAI).
Security
We use industry-standard measures to protect your data, but no method of transmission or storage is completely secure.