PATINAAI — Privacy Notice
PatinaAI is a CS2 inventory value tracker at patinaai.net. This notice covers the web app and the PatinaAI — Inventory Sync browser extension, and describes how personal data is processed under the EU General Data Protection Regulation (GDPR).
Controller
The private operator of patinaai.net (an individual, not a company). Contact: info@patinaai.net.
What the extension does
Its single purpose: it reads your CS2 inventory, Steam Market price history, and market listing pages from steamcommunity.com inside your own browser, using the Steam session you are already signed in with, and imports that data into your PatinaAI account. Your Steam credentials and cookies never leave your browser — only the fetched inventory and price data do.
Data, purposes, legal bases, retention
| Data | Purpose · legal basis | Kept |
|---|---|---|
| SteamID, persona name, avatar URL | Sign-in and showing your account · contract (Art. 6(1)(b)) | Until account deletion |
| Inventory, floats, cost basis, theses, alerts | The tracking service itself · contract | Until account deletion |
| AI analyst usage counters (counts, cost) | Cost protection and quotas · legitimate interest (Art. 6(1)(f)) | Until account deletion |
| Analyst conversations | Continuing your conversation · contract | Browser-only, never on the server; auto-deleted after 30 days of inactivity; Clear deletes immediately |
| Trade partners’ public inventories | Evaluating a trade you request · legitimate interest | Cache auto-deleted after 7 days |
| Server logs (IP addresses) | Security and abuse handling · legitimate interest | At most 30 days |
Market price data (what items cost on which market) describes items, not people, and is shared across accounts.
Cookies and local storage
One strictly necessary session cookie for sign-in, plus interface preferences and your analyst conversations in local storage, on your device only. On free accounts, Google AdSense may set advertising cookies — only with your consent, collected through Google’s certified consent message. Pro accounts load no ad or tracking code.
Recipients and transfers
- Hetzner Online GmbH (Germany) — server hosting.
- Anthropic (USA) — processes the questions you ask the AI analyst and the account data its tools read, solely to produce the answer; API data is not used to train models. Transfer safeguarded under the EU–US Data Privacy Framework / standard contractual clauses.
- Valve/Steam — the source you sign in with and the data is read from, under Valve’s own privacy policy.
No selling, renting, or sharing of your data with anyone else. Free accounts may be shown ads by Google AdSense, which sets advertising cookies/identifiers only after you respond to Google’s certified consent message (EEA); Google acts as an independent controller for ad personalisation — see Google’s privacy policy. Pro accounts see no ads and load no ad code at all. Payments are processed by Stripe; PatinaAI never sees your card details, only your subscription status.
Your rights
- Access & portability — the Account tab’s “Download my data” exports everything the server holds about you as one JSON file.
- Erasure — “Delete my account” in the Account tab removes your account and all personal data immediately and permanently, no grace period.
- Rectification, restriction, objection — write to info@patinaai.net.
- You may lodge a complaint with your local data protection authority.
Security
TLS everywhere; per-user API keys encrypted at rest (AES-256-GCM); per-user rotatable extension tokens; the app is read-only against Steam and cannot trade.