Privacy Policy

Last updated: September 2, 2026

1. Who this applies to

This policy covers the data Buyorder Manager ("the Service", "we", "us") collects when you sign in and use the buyorder dashboard. It's operated by [operator name - update this before publishing]; you can reach us at [email protected].

2. What we collect

Your SteamID64, obtained when you sign in through Steam - this is how we identify your account. We never see or store your Steam password.
Your public Steam display name and avatar, fetched from your public Steam profile, shown back to you in the dashboard.
Your CSFloat API key, if you choose to add one - stored encrypted at rest, used only to call CSFloat's API on your behalf.
Your buyorder configuration - item names, price caps, quantities, and any float range or paint seed restrictions you set.
Activity logs generated by the Service (price changes, pauses, errors) so you can see what it's been doing.
Login timestamps and your selected plan.
A session cookie that keeps you signed in - this is the only cookie we set, and it isn't used for tracking or advertising.

We don't use any analytics or advertising trackers, and we don't sell or share your data with advertisers.

3. Why we collect it

All of the above is collected because it's directly needed to run the Service: identifying your account, showing you your own dashboard, and calling CSFloat on your behalf to place and adjust buy orders the way you've configured them. Rate-limit counters are keyed by your SteamID (or, only for unauthenticated requests like sign-in attempts, by IP address) purely to prevent abuse, and aren't kept beyond what's needed for that.

4. Who we share it with

We share data with two outside parties, both only as needed to run the Service:

Steam, during sign-in (standard OpenID login - we only receive your SteamID, never your password or email address).
CSFloat, when the Service calls their API using your key on your behalf. Data you send to CSFloat is subject to CSFloat's own privacy practices, which we don't control.

We don't share your data with advertisers or any other third party.

5. How long we keep it

We keep your data for as long as your account is active. If you stop using the Service, your data simply stays in our database until you ask us to delete it (see below) - we don't currently auto-delete inactive accounts.

6. Your rights, and deleting your data

You can update most of your settings (API key, price caps, active items) directly in the dashboard at any time.

To have your account and all associated data permanently deleted, email [email protected] and let us know your Steam name or SteamID so we can find your account. We aim to process deletion requests within a few days. Deleting your account removes your SteamID, your encrypted API key, your buyorder configuration, and your activity log from our database.

One thing deletion does not do: it doesn't cancel any buy orders that are still active directly on CSFloat.com. If you also want those cancelled, say so in your request while your API key is still saved with us - otherwise, cancel them yourself on csfloat.com before or after asking us to delete your data.

7. Cookies

We use exactly one cookie: a session cookie that keeps you signed in. We don't use marketing, advertising, or analytics cookies.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about your data, or a deletion request? Email [email protected] - you'll be talking directly with the developers.

Unofficial third-party tool · Not affiliated with Valve Corporation · Not affiliated with CSfloat.com