Privacy Policy

1. Scope

This Policy describes how XaocSteam processes and protects personal data on xaocsteam.shop. The controller is Администрация XaocSteam.

Data is processed to perform the contract, comply with law, protect legitimate security interests, or on consent where consent is the appropriate legal basis.

2. Data we process

Depending on the features used, we process account details; email and authentication records; IP address, browser, operating system and session logs; Steam login and transaction details; support messages; and payment status information. We never ask for your Steam password. Full card details are normally handled by the payment provider, not XaocSteam.

3. Purposes and legal bases

We use data to register and verify accounts, authenticate users, execute top-ups, credit payments, send receipts, provide support, prevent fraud, secure accounts, keep required records, and send notifications selected by the user.

4. Recipients

Necessary data may be shared with hosting providers, Steam top-up suppliers, payment processors, email providers, Google for Google Sign-In, Telegram for enabled support integration, professional advisers, and authorities where legally required. We limit sharing to what each recipient needs.

5. Retention and location

Account data is kept while the account is active and for a limited period needed for claims and legal duties. Security logs and sessions have limited retention; transaction records are retained as required by applicable law. Data is then deleted or anonymised.

The operator must verify the actual location and transfer safeguards for the VPS, backups, email delivery and other processors before launch.

6. Cookies

We use essential session cookies for sign-in and account security, and local storage for language and interface preferences. Advertising or analytics cookies must not be added without the required notice and consent.

7. Security

Measures include access controls, password hashing, encryption of integration secrets, TLS, two-factor authentication, rate limiting, administrative audit logs and backups. Users must keep passwords and recovery codes secret and promptly report suspicious activity.

8. Your rights

Depending on applicable law, you may request access, correction, restriction, deletion or portability, withdraw consent, object to certain processing, and complain to a supervisory authority. Contact support@xaocsteam.shop from your account address. Identity verification may be required.

Deletion does not require erasure of records that must be retained by law or are needed for disputes, fraud prevention and transaction evidence; those records are restricted to that purpose.

9. Notifications

System email includes verification, sign-in alerts, support replies and transaction receipts. Optional categories can be disabled in Settings. Messages necessary for security, a requested action or performance of the service may still be sent.

10. Children

The service is not intended for independent use by anyone who cannot enter the agreement under applicable law without a guardian. We will delete or restrict data collected without required authorisation when notified.

11. Changes and contact

Updates are published here with a new effective date. Material changes may also be emailed to registered users. Privacy contact: support@xaocsteam.shop. Effective date: 01.09.2026.