Privacy Policy

Account data may include your Steam ID, account creation and login timestamps, saved-trade information, service usage, plan entitlements, credit usage and related account state.

Billing records may include plan and subscription status, billing interval, Stripe customer and subscription identifiers, checkout-session information, invoice or event identifiers and limited troubleshooting metadata. Payment card details are handled by Stripe and are not stored by TradeForge.

We may also process security, rate-limit and technical information needed to operate, protect and troubleshoot the service.

We process data to authenticate users, provide requested features, maintain subscriptions and credits, save user-requested data, secure the service, prevent abuse, troubleshoot failures and comply with legal obligations.

Depending on the processing activity, the legal basis may be performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and securing the service. Consent is used where applicable law requires it.

TradeForge uses service providers where necessary to operate the product. These include Steam for authentication, Stripe for payment and subscription processing, Vercel for application hosting and Neon for the production database.

Providers process data under their own terms and privacy obligations where they act independently, and under appropriate data-processing arrangements where they process data on our behalf.

We retain account and subscription information for as long as needed to provide the service and meet legal, accounting, security and dispute-handling requirements.

TradeForge does not retain full raw Stripe webhook payloads. Limited troubleshooting identifiers and failure details are kept on a bounded basis; current production cleanup removes eligible troubleshooting fields after 90 days while minimal event identifiers may be retained to prevent duplicate webhook processing.

Some service providers may process information outside your country or the European Economic Area. Where required, appropriate transfer safeguards are used by the relevant provider or controller.

Subject to applicable law, you may have rights to access, correct or delete personal data, restrict or object to certain processing, and receive certain data in a portable format. You may also have the right to complain to the competent data-protection authority.

Send privacy requests to the support address shown below. We may need to verify your identity before acting on a request.

This policy may be updated when the service, providers or legal requirements change. Material changes will be communicated where required.