Privacy Policy

CS2 Vault desktop application & website · Last updated: July 2026

The short version: CS2 Vault is a local-first desktop app. Your portfolio data stays on your own computer. We don't run an analytics or tracking server, and we never sell your data.

1. Who we are

CS2 Vault ("the app", "we") is a desktop portfolio-tracking and tax-estimation tool for CS2 items. This policy explains what data the app and this website handle and where it goes. [ACTION REQUIRED: replace with your legal/trading name and a contact email before your first paid sale.]

2. Data stored on your device

Everything you enter — holdings, trade history, play skins, watchlist, alerts, settings, API keys and FX cache — is stored locally in the app's own database on your machine (under your user data folder). It is never transmitted to us. You can export or clear it at any time from Settings → Data Management.

3. Data sent to third parties

To function, the app makes direct requests from your computer to the following services. We don't proxy or log these — they go straight from your device to the provider:

CSFloat and Steam Community Market — for live item pricing. Your CSFloat API key is sent to CSFloat only.
Pricempire — for historical pricing (only if you add a Pricempire API key).
frankfurter.app / open.er-api.com — for foreign-exchange rates (no personal data sent).
GitHub Releases — the auto-updater checks for new versions.

4. Payments & licensing

If you upgrade to Vault Pro, payment is handled entirely by Paddle (our merchant of record). We never see or store your card details — Paddle processes the transaction and is responsible for billing data under its own privacy policy. After purchase you receive a licence key. The app validates that key against our licence service (a Cloudflare Worker) by sending only the key itself and the product name — no portfolio data, no personal identifiers beyond what the key represents. The validation result is cached locally so the app keeps working offline.

5. This website

This site is a set of static pages hosted on Cloudflare Pages. We don't set our own tracking cookies and don't run our own analytics on it. Our hosting provider (Cloudflare) may process standard technical request data (such as IP addresses) to serve and secure the site, under its own privacy policy.

6. What we do not collect

No telemetry, usage analytics, or crash reporting is sent to us from the app.
No advertising identifiers. The app contains no ads.
No account is required to use the free tier.

7. Your controls

You can export a full JSON backup, clear all data, or remove your licence from a machine at any time in Settings. Removing the app from your computer removes the local database (your AppData folder may retain it until manually deleted — the uninstaller does not wipe user data by design, so an accidental reinstall doesn't lose your portfolio).

8. Children

The app is not directed to children and is intended for adult users managing their own assets.

9. Changes

We may update this policy as the product evolves. Material changes will be noted in the release notes and reflected on this page.

Questions about this policy? Contact [ACTION REQUIRED: contact email].