Browser Extension Privacy Policy

1. What the Extension Does

The extension adds two categories of functionality on top of your browser:

• Marketplace price badges - on supported CS2 marketplaces the extension reads the item name from the page and overlays a small badge showing the Skinstrack reference price so you can compare values without leaving the site.
• Steam inventory integration- on your Steam inventory page the extension adds a "View on Skinstrack" button next to each selected item. With one click in the popup you can also sync your full CS2 inventory to your Skinstrack account so the dashboard can track your portfolio value.
• Steam trade offer prices - on Steam trade offer pages the extension reads the items in both trade slots and shows their Skinstrack reference price alongside each item.

The extension never modifies any marketplace pages beyond injecting read-only badge overlays. It does not place bids, submit orders, or interact with any marketplace on your behalf.

2. Permissions Requested

The extension requests the following Chrome permissions. Each one is required for a specific feature - we do not request permissions speculatively.

• storage- stores your Steam ID, last inventory sync timestamp, auto-sync preference, and daily badge activity stats in local Chrome storage. Nothing is synced to Chrome's cloud storage.
• tabs- opens or focuses your Steam inventory tab when you click "Sync Inventory" in the popup. Without this the sync button cannot navigate to the correct page.
• activeTab - allows the popup to communicate with the currently active tab to trigger an inventory fetch once the inventory page has loaded.
• scripting - required by the WXT framework to register and manage the content scripts that inject badges and buttons on supported pages.
• alarms - schedules the optional automatic inventory sync that fires every 24 hours if you enable it in settings. Disabling the toggle clears the alarm immediately.

3. Websites the Extension Runs On

The extension has host permissions for the following domains and runs content scripts only on the listed pages:

• steamcommunity.com- inventory pages (to sync items and inject the "View on Skinstrack" button), Steam Market listings for CS2 items, and Steam trade offer pages.
• buff.163.com - marketplace badge injection.
• csfloat.com - marketplace badge injection.
• cs.money - marketplace badge injection.
• dmarket.com - marketplace badge injection.
• market.csgo.com - marketplace badge injection.
• skinport.com - marketplace badge injection (host permission reserved for future badge support).

On marketplace pages the extension reads item names and listing prices from the DOM only. It does not read your account details, order history, wallet balance, or any other information on those sites.

4. Data Accessed and Stored Locally

The extension stores the following data in chrome.storage.local on your device only. This data never leaves your machine unless the inventory sync feature is used.

• Steam ID - your 64-bit Steam ID, resolved from your steamcommunity.com profile URL on install and on browser startup. Used to construct the inventory URL for syncing.
• Last synced timestamp- the Unix timestamp of the most recent successful inventory sync, displayed in the popup as "Last synced: X minutes ago".
• Auto-sync preference- a boolean flag recording whether you have enabled the "Auto Inventory Sync" setting.
• Daily badge stats - two counters reset each day: the number of marketplace items the extension checked and the total potential savings detected. These are displayed in the popup and stored only locally.

5. Data Sent to Skinstrack

The extension makes network requests to api.skinstrack.com for two purposes:

• Price lookups- when the extension needs to display a reference price for a specific item, it sends the item'smarket_hash_name(the standard CS2 item identifier) to our API and receives the lowest listed price in return. Your identity is not attached to these requests unless you are logged in to skinstrack.com in the same browser profile.
• Inventory sync- when you click "Sync Inventory", the extension reads your CS2 inventory from the Steam API (using your authenticated Steam session) and sends a list ofmarket_hash_name, item count, and optional trade-lock expiry date for each item to our API under your logged-in Skinstrack account. This requires you to be signed in at skinstrack.com. If you are not logged in, the sync fails and no data is transmitted.

We do not transmit asset IDs, inspect links, float values, stickers, or any other item-level detail beyond the data listed above. Inventory data is stored on our servers under your account and governed by the same privacy and terms rules as the main Skinstrack service.

6. Third-Party Network Requests

The extension makes one additional request to a third-party service:

• api.frankfurter.app - a free, open exchange rate API. The extension fetches the latest USD conversion rates so prices can be displayed in your local currency. No personal data is sent to this service - it is a plain GET request with no identifiers.

The extension does not embed advertising scripts, analytics SDKs, or any other third-party tracking code.

7. Steam Data Access

When you open your Steam inventory page the extension makes two fetch requests to the Steam inventory API using your existing browser session (credentials: include). These requests are identical to what Steam's own inventory page would make - the extension simply reads the JSON response to extract item names and quantities for the sync payload.

The extension also makes a single request tosteamcommunity.com/my/on install and on each browser startup to resolve your Steam ID from the redirect URL. No Steam account credentials, passwords, or session tokens are read or stored by the extension.

8. What We Don't Do

• We do not read or store your passwords, Steam Guard codes, or session cookies.
• We do not interact with any marketplace or Steam on your behalf - no bids, purchases, or trade offers are ever submitted by the extension.
• We do not sell, share, or rent your data to third parties.
• We do not run any code outside the explicitly listed host permissions.
• We do not use Chrome's sync storage - all local data stays on your device.
• We do not collect browsing history beyond the item names read on supported marketplace pages.

9. Removing the Extension

Uninstalling the extension from your browser removes all locally stored data immediately. Inventory data previously synced to your Skinstrack account remains on our servers as part of your account and can be deleted by deleting your account or contacting us directly.

10. Updates to This Policy

If we change what data the extension accesses or how we handle it, we will update the effective date above and post a notice on our Discord. Material changes - such as adding a new site the extension runs on or sending new categories of data to our servers - will also be described in the Chrome Web Store release notes for that version. Continued use of the extension after a policy update means you accept the new terms.

Questions about this policy can be directed to our Discord community or by email. Links to both are available on the main skinstrack.com homepage.