Privacy Policy

Last updated: 9 August 2026

This Privacy Policy explains how ULTRASENS LT, MB collects, uses, stores and shares personal data when you access or use ultrasensskin.com, create an account, sign in through Steam, purchase a Digital Item, receive a Steam Trade Offer, or contact us.

The Service is operated by:

For the purposes of the General Data Protection Regulation (“GDPR”), ULTRASENS LT, MB is the controller of the personal data described in this Privacy Policy, except where another organisation processes personal data as an independent controller.

In this Policy, “UltraSensSkin”, “ULTRASENS”, “we”, “us” and “our” refer to ULTRASENS LT, MB. “You” and “your” refer to the individual using the Service.

1. Scope

This Privacy Policy applies to personal data processed through:

• ultrasensskin.com;
• your UltraSensSkin Account;
• Steam Login;
• the purchase and delivery process;
• payment and fraud-prevention processes;
• Steam Trade Offers;
• customer support; and
• related security and compliance activities.

This Policy does not govern Steam, card issuers, payment service providers or other independent third-party services. Those organisations may process personal data under their own privacy documentation.

2. Data Controller

The controller responsible for the processing described in this Policy is:

Privacy questions and requests may be sent to info@ultrasensskin.com.

ULTRASENS has not appointed a data protection officer unless updated contact information is published through the Service.

3. Minimum Age

The Service is available only to individuals who are at least 18 years old.

We do not knowingly collect personal data from children. If we reasonably believe that an individual under 18 has created an Account or used the Service, we may close the Account and delete or restrict the relevant data, except where retention is legally required.

If you believe that a minor has provided personal data to us, contact info@ultrasensskin.com.

4. Categories of Personal Data

Depending on how you use the Service, we may process the following categories of personal data.

4.1 Steam account data

When you sign in through Steam or connect a Steam Account, we may receive or access:

• your unique SteamID;
• Steam profile name;
• avatar and profile URL;
• profile visibility status;
• country or location information made public through Steam;
• public inventory information;
• information concerning Digital Items in the public inventory;
• Steam trading eligibility or restriction status;
• information necessary to verify that the Trade URL matches the connected Steam Account; and
• other public Steam profile information where technically returned by Steam and reasonably necessary to provide or secure the Service.

Steam Login does not provide us with your Steam password. We do not ask you to disclose your Steam password, Steam Guard code, API key or account recovery code.

We do not intentionally collect unrelated information about your Steam friends, gameplay history, achievements or community activity unless such information is technically returned, publicly available and reasonably necessary for security or a specific Service feature.

4.2 Account and contact data

We may process:

• email address, if provided during registration, checkout or support;
• Account identifier;
• Account creation and login dates;
• selected language and currency;
• Account status;
• consent and policy acceptance records;
• country of residence or access;
• age or eligibility confirmation; and
• information you provide when updating or securing your Account.

4.3 Trade URL and delivery data

To deliver a purchased Digital Item, we may process:

• Steam Trade URL;
• receiving SteamID;
• sending SteamID;
• Trade Offer ID;
• Trade Offer status;
• offer creation, acceptance, rejection and expiry timestamps;
• Digital Item asset identifiers;
• delivery status;
• Steam trade history relevant to the Order;
• applicable Steam trade restrictions; and
• technical records showing whether delivery was completed.

4.4 Order and transaction data

When you place an Order, we may process:

• Order number;
• selected Digital Item;
• item name, type and characteristics;
• item float value, pattern, wear, stickers or other relevant attributes;
• price;
• currency;
• VAT and invoice information;
• Order date and time;
• Order status;
• cancellation and refund records;
• transaction correspondence; and
• records needed to establish, perform or defend the purchase contract.

4.5 Payment data

Card payments are processed with the assistance of authorised payment service providers.

Depending on the payment process, we may receive:

• payment status;
• payment transaction reference;
• amount and currency;
• card network;
• limited masked card information, such as the last four digits;
• card issuer country;
• authentication status;
• fraud or risk indicators;
• refund status; and
• chargeback or payment dispute information.

We do not intend to receive or store:

• complete card numbers;
• CVV or CVC security codes;
• card PINs; or
• online banking credentials.

Complete payment information may be collected directly by the payment service provider under its own privacy documentation.

4.6 Technical and security data

When you access or use the Service, our systems or infrastructure providers may automatically process:

• IP address;
• approximate country or region derived from the IP address;
• browser type and version;
• device type;
• operating system;
• language and time-zone settings;
• session identifier;
• login time;
• pages or Service functions requested;
• error and diagnostic data;
• security events;
• fraud-prevention signals; and
• server and access logs.

This information is used to operate and secure the Service, enforce geographic restrictions, diagnose technical problems and prevent abuse.

At the date of publication, UltraSensSkin does not use third-party advertising cookies, behavioural advertising tools, marketing pixels or third-party analytics tools.

4.7 Communications and support data

When you contact us, we may process:

• your name or Account identifier;
• email address;
• SteamID;
• Order number;
• the contents of your message;
• attachments and screenshots;
• complaint or refund information;
• our response; and
• related internal support notes.

Please do not provide passwords, authentication codes, full card details or unrelated sensitive information in support communications.

4.8 Compliance and verification data

Where reasonably necessary for fraud prevention, legal compliance or transaction security, we may request or receive:

• confirmation of age;
• confirmation of country or residence;
• payment authorisation evidence;
• information concerning a disputed payment;
• sanctions-screening results;
• account ownership evidence; or
• other information proportionate to a specific security or legal concern.

We will not claim to perform a specific identity verification procedure unless that procedure is actually implemented for the relevant transaction.

4.9 Special-category data

We do not intentionally request or process data revealing racial or ethnic origin, political opinions, religious beliefs, health information, sexual orientation, biometric identifiers or other special categories of personal data.

Do not send such information unless it is strictly necessary for a legal claim and has been specifically requested through an appropriate secure process.

5. Sources of Personal Data

We may obtain personal data:

• directly from you;
• from Steam through Steam Login, Steam APIs or publicly available Steam information;
• from payment service providers, card networks or financial institutions;
• from Fulfilment Providers involved in delivering an Order;
• automatically from browsers, devices, servers and security systems;
• from support communications;
• from fraud-prevention or compliance service providers; and
• from competent authorities or public sources where permitted by law.

6. Purposes and Legal Bases

We process personal data only where we have an applicable legal basis.

6.1 Providing the Service and performing a contract

Under Article 6(1)(b) GDPR, we process data where necessary to:

• create and administer your Account;
• authenticate you through Steam;
• display relevant Digital Items;
• receive and process an Order;
• process payment status;
• issue an Order Confirmation and invoice;
• arrange and verify delivery;
• send or facilitate a Trade Offer;
• handle cancellation or refund requests;
• provide customer support; and
• otherwise perform the purchase contract.

Without the data required for these purposes, we may be unable to create an Account, accept an Order or deliver an Item.

6.2 Compliance with legal obligations

Under Article 6(1)(c) GDPR, we may process data to:

• maintain accounting and tax records;
• issue legally required invoices;
• respond to valid authority requests;
• comply with consumer protection requirements;
• comply with sanctions and other applicable restrictions;
• manage legally required retention;
• investigate and report unlawful activity where required; and
• comply with court orders and other binding legal processes.

6.3 Legitimate interests

Under Article 6(1)(f) GDPR, we may process data where necessary for our legitimate interests or those of another person, provided that those interests are not overridden by your rights and freedoms.

These interests may include:

• preventing fraud, phishing and payment abuse;
• protecting Accounts, users and the Service;
• enforcing geographic restrictions;
• investigating unauthorised activity;
• maintaining reliable transaction and delivery records;
• detecting technical errors;
• improving security and operational reliability;
• preventing duplicate or improper refunds;
• establishing, exercising or defending legal claims;
• protecting our contractual rights; and
• communicating about security or administrative matters.

You may object to processing based on legitimate interests as described in Section 14.

6.4 Consent

Under Article 6(1)(a) GDPR, we may process data based on consent where consent is legally required.

This may apply to:

• non-essential cookies, if introduced;
• optional communications;
• optional Service features; or
• another clearly identified purpose.

At the date of publication, UltraSensSkin does not use personal data for behavioural advertising or third-party analytics.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

6.5 Legal claims and unlawful activity

Where necessary, personal data may also be processed to establish, exercise or defend legal claims, prevent unlawful activity, or protect the rights and safety of users, ULTRASENS and third parties.

7. Steam Login

Steam Login allows us to authenticate your SteamID without receiving your Steam password.

When you use Steam Login:

• you are redirected to or interact with Steam;
• Steam authenticates your credentials;
• Steam returns an identifier confirming the relevant Steam Account; and
• we may retrieve public Steam profile information needed for the Service.

Steam acts independently in relation to its own authentication systems and processing activities. Your use of Steam remains subject to Steam’s terms and privacy documentation.

You should access Steam Login only through an official Steam domain and must never provide Steam credentials directly to UltraSensSkin or a Fulfilment Provider.

8. Payment Processing

Payments are processed through authorised third-party payment service providers.

A payment provider may process:

• cardholder name;
• billing address;
• complete card details;
• authentication data;
• device and IP information;
• fraud-prevention signals; and
• other information required to authorise or process the payment.

The payment provider may act as our processor for some activities and as an independent controller for regulatory, fraud-prevention and financial compliance activities.

We may change payment providers without changing the purposes described in this Policy. The identity of a particular provider may be made available during checkout, through the payment interface, or upon a valid data protection request where required by law.

9. Digital Item Supply and Fulfilment Providers

Delivery may be performed by a confidential Digital Item supplier, inventory provider, bot operator or current holder of the Item.

To complete and verify delivery, we may provide a Fulfilment Provider with:

• SteamID;
• Trade URL;
• internal Order identifier;
• selected Digital Item and asset information;
• delivery instructions;
• relevant Trade Offer information; and
• delivery status.

Fulfilment Providers are not permitted to receive your Steam password, Steam Guard code, full card information or unrelated personal data from us.

The commercial identity of a Fulfilment Provider may remain confidential. However, this does not restrict any right you have under applicable data protection law to receive information about actual recipients of your personal data where disclosure is legally required.

10. Other Recipients of Personal Data

We may disclose personal data to the following categories of recipients where necessary:

• payment service providers;
• card networks, banks and card issuers;
• Digital Item supply and fulfilment providers;
• hosting, infrastructure and security providers;
• IT maintenance and technical service providers;
• email and communication providers;
• accountants, auditors, lawyers and other professional advisers;
• insurers;
• fraud-prevention and compliance providers;
• courts, regulators, law enforcement and other authorities;
• a purchaser, investor or successor in connection with a genuine corporate transaction; and
• other persons where you have instructed or authorised us to disclose the data.

Service providers may access personal data only to the extent necessary for the relevant service and must be subject to appropriate confidentiality and data protection obligations.

We do not sell personal data or share it for third-party behavioural advertising.

11. International Data Transfers

Steam, payment providers, Fulfilment Providers or infrastructure providers may operate in countries outside Lithuania or the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will ensure that the transfer has a lawful basis and appropriate safeguards where required. These may include:

• an adequacy decision adopted by the European Commission;
• the European Commission’s Standard Contractual Clauses;
• supplementary contractual, organisational or technical measures;
• another legally recognised transfer mechanism; or
• a specific GDPR derogation where applicable.

You may contact us for information about the safeguards applicable to a particular transfer. Some information may be redacted where necessary to protect security, confidentiality or third-party rights, without restricting the substance of your legal rights.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security and dispute-resolution requirements.

The applicable retention criteria include:

Account and Steam profile data

Retained while the Account is active and for a limited period after closure where necessary to prevent fraud, process remaining requests, resolve disputes or establish legal claims. Public Steam profile information may be refreshed, replaced or deleted when no longer needed.

Trade URL

Retained while needed for active or reasonably anticipated deliveries. A replaced Trade URL may remain in historical security or transaction records where necessary to investigate a completed or disputed Order.

Order, invoice and payment records

Retained for the period required by Lithuanian accounting, tax, consumer protection and other applicable laws, and for the period necessary to manage disputes, refunds or legal claims.

Trade and delivery records

Retained for as long as reasonably necessary to prove delivery, investigate reversals, prevent duplicate refunds, resolve payment disputes and establish or defend legal claims.

Technical and security logs

Retained for a limited security and diagnostic period. Relevant logs may be retained longer where connected to suspected fraud, a security incident, a disputed transaction or legal proceedings.

Support communications

Retained until the request is resolved and for a reasonable period afterwards where necessary to maintain service history, handle follow-up complaints or defend legal claims.

Compliance information

Retained only for as long as necessary for the applicable review, legal obligation, restriction or investigation.

When retention is no longer necessary, data will be deleted, anonymised or securely isolated unless continued retention is legally required.

13. Automated Processing

Payment providers and security systems may use automated tools to identify suspicious activity, assess transaction risk or approve or decline a payment.

UltraSensSkin does not currently use personal data for behavioural advertising or profiling unrelated to transaction security.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects, except where:

• the processing is necessary to enter into or perform a contract;
• the processing is authorised by law;
• you have provided explicit consent where legally permitted; or
• the decision is made independently by a payment provider under its own legal responsibilities.

Where applicable law provides such a right, you may request human review, express your point of view and contest an automated decision by contacting us.

14. Your Data Protection Rights

Subject to applicable law, you may have the following rights.

14.1 Right of access

You may ask whether we process your personal data and request a copy of that data, together with information about its processing.

14.2 Right to rectification

You may ask us to correct inaccurate personal data or complete incomplete data. Some Steam information must be corrected through Steam before the updated information can be retrieved by UltraSensSkin.

14.3 Right to erasure

You may ask us to delete personal data where:

• it is no longer necessary;
• consent has been withdrawn and no other legal basis applies;
• you have successfully objected to the processing;
• the data was processed unlawfully; or
• deletion is required by law.

The right to erasure does not apply where retention remains necessary for legal compliance, accounting, fraud prevention, legal claims or another lawful purpose.

14.4 Right to restriction

You may ask us to restrict processing while:

• data accuracy is being verified;
• an objection is being considered;
• the processing is unlawful but you oppose deletion; or
• we no longer need the data but you require it for a legal claim.

14.5 Right to data portability

Where processing is based on consent or contract and performed by automated means, you may request relevant personal data in a structured, commonly used and machine-readable format.

14.6 Right to object

You may object to processing based on legitimate interests. We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing remains necessary for legal claims.

You may object to direct marketing at any time. UltraSensSkin does not currently send behavioural advertising or share data for such advertising.

14.7 Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

14.8 Right concerning automated decisions

Where applicable, you may request human intervention and contest a decision based solely on automated processing that produces legal or similarly significant effects.

14.9 Right to complain

You may lodge a complaint with the supervisory authority in Lithuania or, where applicable, the authority in the EEA country of your habitual residence, place of work or alleged infringement.

15. Exercising Your Rights

Requests may be sent to: info@ultrasensskin.com

Please use the subject line “Data Protection Request”.

Your request should identify:

• your SteamID or Account identifier;
• the right you wish to exercise;
• the information or processing concerned; and
• an email address through which we can respond.

We may request proportionate information to verify your identity and protect the Account from unauthorised disclosure.

We will respond without undue delay and normally within one month after receiving a valid request. That period may be extended by up to two additional months where permitted because of the complexity or number of requests. If an extension is required, we will inform you.

Requests are normally handled free of charge. A reasonable fee may be charged, or a request may be refused, only where permitted by law, including where a request is manifestly unfounded or excessive.

16. Supervisory Authority

You may contact the Lithuanian data protection supervisory authority:

State Data Protection Inspectorate
L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania
Website: vdai.lrv.lt

The Inspectorate may require complaints submitted directly to it to be made in Lithuanian or in another form accepted by the authority.

We encourage you to contact us first so that we can attempt to resolve the concern, but you are not required to do so before exercising your right to complain.

17. Cookies and Similar Technologies

UltraSensSkin may use strictly necessary cookies or similar storage technologies for:

• Steam Login;
• authentication and Account sessions;
• checkout continuity;
• security and fraud prevention;
• load balancing;
• storing the selected currency;
• remembering privacy choices; and
• maintaining essential website functionality.

Strictly necessary technologies are used because the Service cannot operate securely without them.

At the date of publication, UltraSensSkin does not use:

• third-party advertising cookies;
• behavioural advertising technologies;
• marketing pixels; or
• third-party analytics cookies.

Further information is provided in the Cookie Policy.

If non-essential technologies are introduced, they will not be activated before any consent required by applicable law has been obtained.

18. Data Security

We use reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental or unlawful loss;
• alteration;
• disclosure;
• destruction; and
• misuse.

Measures may include:

• encrypted transmission;
• access controls;
• authentication controls;
• logging and monitoring;
• separation of payment information;
• data minimisation;
• provider confidentiality obligations;
• backups;
• incident response procedures; and
• periodic security review.

No internet or electronic storage system can be guaranteed to be completely secure. You are responsible for protecting your Steam Account, email account, devices and authentication credentials.

If you believe your Account or personal data has been compromised, contact us immediately.

19. Personal Data Breaches

If a personal data breach occurs, we will investigate and take reasonable containment and remediation measures.

Where required by applicable law, we will notify:

• the competent supervisory authority; and
• affected individuals where the breach is likely to result in a high risk to their rights and freedoms.

Notifications may describe the nature of the incident, likely consequences, measures taken and steps users should consider.

20. Third-Party Links

The Service may contain links to Steam or other third-party websites.

We are not responsible for the privacy practices of independent third parties. You should review their privacy documentation before providing personal data through their services.

The presence of a link does not mean that ULTRASENS controls or endorses the third party’s data processing.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• changes to the Service;
• new legal requirements;
• changes to Steam or payment functionality;
• security developments;
• new categories of service providers; or
• changes to our processing practices.

The updated Policy will be published on ultrasensskin.com with a revised effective date.

Where a change materially affects your rights or the way we use personal data, we will provide additional notice where required.

22. Contact

Questions, complaints and data protection requests may be sent to: