Privacy policy

Who is responsible

The person responsible for this website is the operator named in the legal notice: [PREENCHER], [PREENCHER]. Contact: [PREENCHER].

Overview

OrlandoSwap is a personal site for trading CS2 skins. There are no user accounts, no advertising and no analytics or tracking services. Most of the site works without any personal data.

Visiting the site

The site is delivered through Cloudflare, Inc. (USA), which protects it and passes requests on to my server. Cloudflare processes technical data such as your IP address, your browser (user agent) and the address you request, in order to deliver the site and block attacks.

My own server does not store IP addresses. The visitor statistics only keep an irreversible code (a hash of IP address and browser made with a secret key) for 60 days, to count visitors per day. The server log only records technical events, such as errors, without IP addresses. To block abuse, IP addresses are kept in memory for at most one hour and are never written to disk.

Signing in with Steam

Signing in is optional and only needed for the trade simulator and the chat. You sign in on the official Steam website (steamcommunity.com, OpenID): I never see your password and get no access to your account. Steam tells my server your SteamID64, and my server then loads your public Steam name and avatar. These are kept in a signed cookie in your browser for 7 days, or until you sign out.

When you sign in, your SteamID64, your public name and avatar, the dates of your first and last visit and the number of sign-ins are stored in a visitor list, so I can see who wants to trade and reply. Entries are deleted automatically after 6 months without activity.

Trade simulator (“Load my inventory”)

When you use the simulator, my server requests your public CS2 inventory from Steam. The inventory is kept in memory for 15 minutes so it doesn’t have to be requested again, and it is never written to disk. Only a summary — the number of items and their total value — is added to your entry in the visitor list. If your inventory is private, nothing is loaded.

Chat

Messages you send in the chat are stored on my server together with your SteamID64 and your public name and avatar, so I can read and answer them. A conversation is deleted automatically 6 months after its last message; I can delete it earlier if you ask.

Your browser: local storage and cookies

The site stores in your browser’s local storage the language you chose (orlandoswap.lang), the skins you selected for a trade (orlandoswap.picked) and, for a moment, a note to reopen the chat after signing in (orlandoswap.openChat). This data stays on your device and is not sent to me.

Cookies: os_steam (Steam sign-in, 7 days) and os_steam_state (security check during the sign-in, 10 minutes). There are no tracking or advertising cookies.

Content from other services

Item images and avatars are loaded by your browser from Steam’s servers (steamstatic.com, Valve Corporation, USA), which receive your IP address and browser information. The “3D” button opens SkinCraft (skincraft.gg) only if you click it. Prices come from CSFloat; my server requests them without any visitor data. Fonts are served by this site itself.

Recipients and transfers abroad

Personal data is not sold or shared for advertising. Recipients: Cloudflare, Inc. (USA), as service provider for delivering the site; and Valve Corporation (USA), which runs Steam — used to sign in and the source of inventories and images — and processes this data under its own privacy policy. Transfers to the USA are based on the Swiss-U.S. Data Privacy Framework (Cloudflare is certified) and/or the standard contractual clauses recognised by the Swiss FDPIC.

Purpose and legal basis

Data is processed only to run the site, protect it against abuse and answer trade requests and chat messages. Where the EU GDPR applies, the legal basis is my legitimate interest in running and protecting the site (Art. 6(1)(f) GDPR) and steps taken at your request before a trade (Art. 6(1)(b) GDPR).

Your rights

You can ask what data I have about you, have it corrected or deleted, and object to its processing. Write to [PREENCHER]. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the data protection authority of your country.

Last updated: October 18, 2026