Privacy Policy

Last updated: 5 May 2026

1. Introduction

1.1

MaestroAI Ltd ("we", "us", "our") operates the website skinscanner.gg and the SkinScanner platform (the "Service"). We are committed to protecting your personal data and complying with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1.2

This Privacy Policy explains what personal data we collect about you, why we collect it, how we use it, who we share it with, and what rights you have in relation to it. Please read it carefully.

1.3

MaestroAI Ltd is the data controller for the personal data collected through the Service. Our company number is 16555541. You can contact us at support@skinscanner.gg with any questions or requests relating to this policy.

2. What Personal Data We Collect

2.1

When you create an account with us, we collect the following personal data directly from you:

2.1.1

Your username;

2.1.2

Your email address; and

2.1.3

Your password (stored in hashed, encrypted form — we do not store passwords in plain text).

2.2

If you choose to share your in-game CS2 inventory through the Service, we access and display that inventory data. CS2 inventory items are in-game assets associated with your Steam account and do not constitute personal data in themselves. However, your Steam ID, if used to retrieve or link your inventory, may constitute personal data and is treated accordingly.

2.3

We also collect technical and usage data automatically when you visit the Service, including:

2.3.1

Your IP address;

2.3.2

Browser type and version;

2.3.3

Device type and operating system;

2.3.4

Pages visited and time spent on those pages;

2.3.5

Referring website URLs; and

2.3.6

Interaction data such as clicks, navigation patterns, and feature usage.

2.4

In addition to general technical data, we collect detailed behavioural and usage event data through our own first-party analytics system. This is collected automatically as you use the Service and includes the following categories of information:

2.4.1

Session identifier: a unique session ID generated per browser session and stored locally on your device, used to associate your activity within a single session;

2.4.2

Search behaviour data: search queries you enter (including partial and completed searches), item names, skin categories, wear conditions, item variants, and whether a search was a refinement of a prior query;

2.4.3

Scraping activity data: when you initiate a price scrape, we record the item searched, wear condition selected, a scrape identifier, the marketplaces included, and the source of the request. When you view scraped results, we record how the results page was accessed, how old the cached results are, and whether the results were generated by your own previous scrape;

2.4.4

Marketplace interaction data: when you click on a marketplace listing, we record the marketplace name, the item and price displayed, whether it was the cheapest listing, and the total number of listings shown. When you apply filters or change sort order, we record the filter type and value applied;

2.4.5

Watchlist activity data: when you add or remove items from your watchlist, we record the item name, variant identifier, marketplace, and price at the time of the action;

2.4.6

Blog engagement data: when you view a blog article, we record the article slug and title. When you leave, we additionally record the time you spent reading it;

2.4.7

Banner and promotional interaction data: when you click on banners or promotional content, we record the banner identifier, name, position on screen, and the destination URL;

2.4.8

Recent search history: when you click on a recent search from your history dropdown, we record the query, the type of history entry, and the associated item details; and

2.4.9

Marketing attribution data: where you arrive at the Service via a paid or tracked link, we capture and store UTM parameters (source, campaign, medium, term) and, where applicable, a Google Click ID ("gclid") in your browser's local storage. This data is automatically appended to all event records generated during your session.

2.5

Event data is collected using a deduplicated, fire-and-forget event system. Each event record is automatically associated with your session identifier and, where you are logged in, your authentication token. Events of the same type fired within a one-second window are discarded to prevent duplication.

2.6

Some of the data described in sections 2.4 and 2.5 above is stored in your browser's local storage as part of our first-party tracking infrastructure. This includes your session identifier, authentication token, and any captured UTM or marketing attribution parameters. Please see our Cookie Policy for further details.

3. How We Use Your Personal Data

3.1

We use your personal data for the following purposes and on the following legal bases:

3.1.1

To create and manage your account, and to provide you with access to the Service — legal basis: performance of a contract with you (Article 6(1)(b) UK GDPR);

3.1.2

To communicate with you about your account and to respond to enquiries — legal basis: performance of a contract and our legitimate interests;

3.1.3

To analyse how the Service is used and to improve it, including through our first-party event tracking system — legal basis: our legitimate interests in operating, improving, and developing the Service (Article 6(1)(f) UK GDPR);

3.1.4

To serve you with relevant advertising via Google Ads, and to measure the effectiveness of advertising campaigns — legal basis: your consent, which you provide via the cookie consent mechanism on our website;

3.1.5

To comply with legal obligations — legal basis: compliance with a legal obligation (Article 6(1)(c) UK GDPR); and

3.1.6

To measure the effectiveness of our marketing campaigns and to attribute traffic to its source, using UTM parameters and Google Click IDs — legal basis: our legitimate interests and, where Google Ads cookies are involved, your consent.

3.2

We will not use your personal data for any purpose that is incompatible with those set out in this policy without first notifying you and, where required, obtaining your consent.

4. Affiliate Links and Third-Party Marketplaces

4.1

The Service includes links to third-party CS2 skin marketplaces. When you click on an affiliate link, we or our affiliate partners may set cookies or use tracking pixels that record the referral. This may involve the transfer of certain data to the relevant marketplace, such as click identifiers or session tokens, to attribute any resulting transactions to us.

4.2

We have no control over the data practices of third-party marketplaces. Each marketplace operates under its own privacy policy, and we encourage you to review those policies before making any purchases. We are not responsible for the data practices of any third party.

4.3

Affiliate tracking cookies are only placed with your consent, as described in our Cookie Policy.

5. Google Analytics and Advertising

5.1

We use Google Analytics to collect anonymised statistical data about how users interact with the Service. Google Analytics uses cookies to collect information such as how often users visit the Service, what pages they visit, and what other sites they used prior to visiting the Service.

5.2

We use Google Ads to deliver and measure advertising. Google may use cookies and similar technologies to serve ads based on your prior visits to the Service or other websites.

5.3

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout. You can manage Google advertising preferences at adssettings.google.com.

5.4

These services are only activated where you have provided your consent via our cookie consent tool.

6. Who We Share Your Personal Data With

6.1

We do not sell your personal data. We may share your personal data with the following categories of third parties:

6.1.1

Service providers who help us operate the Service, including cloud hosting providers and infrastructure services. These providers are bound by contractual obligations to keep your personal data confidential and to use it only for the purposes we specify;

6.1.2

Google LLC, in connection with Google Analytics and Google Ads, subject to your consent;

6.1.3

Third-party affiliate marketplace partners, to the extent necessary to attribute referrals, subject to your consent; and

6.1.4

Law enforcement, regulatory authorities, or courts, where we are required by law to do so.

6.2

In the event that MaestroAI Ltd is acquired, merged, or undergoes a business restructuring, your personal data may be transferred to the acquiring entity, subject to the same protections as set out in this policy.

7. International Transfers

7.1

Some of the third parties we work with, including Google LLC, are based outside the United Kingdom. Where we transfer your personal data to countries that are not subject to a UK adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.

7.2

You may contact us at support@skinscanner.gg to request further information about the specific safeguards in place for any particular transfer.

8. How Long We Keep Your Personal Data

8.1

We retain your account data for as long as your account remains active. If you delete your account, we will delete your personal data within 30 days, subject to any legal obligations that require us to retain it for longer.

8.2

Technical and usage data collected via analytics is retained in accordance with the retention settings of the relevant tool (typically up to 26 months for Google Analytics, unless you configure otherwise).

8.3

Behavioural event data collected through our first-party analytics system is retained for a period of 24 months from the date of collection, after which it is deleted or anonymised. Session identifiers, UTM parameters, and marketing attribution data stored in your browser's local storage persist until you clear your browser data or until the relevant storage entry expires.

9. Security

9.1

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Passwords are stored using industry-standard hashing algorithms.

9.2

Despite these measures, no transmission of data over the internet is entirely secure. You are responsible for keeping your account credentials confidential. If you believe your account has been compromised, please contact us immediately at support@skinscanner.gg.

10. Your Rights

10.1

Under the UK GDPR, you have the following rights in relation to your personal data:

10.1.1

Right to be informed — you have the right to be told how we use your personal data (as set out in this policy);

10.1.2

Right of access — you have the right to request a copy of the personal data we hold about you;

10.1.3

Right to rectification — you have the right to ask us to correct any inaccurate or incomplete personal data;

10.1.4

Right to erasure — you have the right to request that we delete your personal data in certain circumstances;

10.1.5

Right to restrict processing — you have the right to ask us to restrict how we process your data in certain circumstances;

10.1.6

Right to data portability — you have the right to receive your personal data in a structured, commonly used and machine-readable format;

10.1.7

Right to object — you have the right to object to our processing of your personal data where we rely on legitimate interests; and

10.1.8

Rights in relation to automated decision-making and profiling — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

10.2

To exercise any of these rights, please contact us at support@skinscanner.gg. We will respond within one month of receipt of your request. We will not charge you a fee unless your request is manifestly unfounded or excessive.

10.3

Where our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Complaints

11.1

If you have a complaint about how we handle your personal data, we ask that you contact us first at support@skinscanner.gg so that we can try to resolve the issue.

11.2

You also have the right to lodge a complaint with the Information Commissioner's Office ("ICO"), the UK supervisory authority for data protection, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

12. Changes to This Policy

12.1

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this policy and, where appropriate, notify you by email. Your continued use of the Service following such notice constitutes your acknowledgement of the updated policy.

13. Contact Us

13.1

For any questions, requests, or concerns relating to this Privacy Policy or your personal data, please contact us at:

MaestroAI Ltd

Company number: 16555541

Email: support@skinscanner.gg