Privacy Policy

01What this policy covers

This Privacy Policy explains what CsBubble collects, why we collect it, how long we keep it, and the choices you have. It applies to the website, the games, the account, the chat, and the settings pages. It sits next to the Terms of Service. If you do not want this handling of information, do not create an account and do not play.

We collect what the product needs in order to run: to know who is signed in, to hold a gem balance, to settle a bet, to show a profile you chose to make public, and to keep the site from being abused. We do not sell your personal information. We do not run a data brokerage. We do not build an advertising profile of you for other companies.

02Account information

When you register we store a username, an email address, a password hash, and the country you select. We never store the password itself. When you sign in with Steam we store the Steam identifier and the name, avatar, and profile address Steam sends us, so the account can be recognized the next time.

In settings you may save a Steam trade URL, a Steam API key, a replacement email, and a client seed. The trade URL and the API key are secrets you chose to give us. They are shown back only to you, masked until you reveal them. Do not save a Steam API key you would not trust the site to hold. You can replace or clear those fields.

We also store the switches you set: whether the client seed rotates, whether you asked for browser notifications, whether your profile is hidden, and whether your statistics are public. Those switches do what they say. A hidden profile is not listed as a normal public page. Private statistics are not shown to other players and are not returned by the public history feed.

03Play, balance, and chat

Every bet creates a record. That record can include the game, the stake, the payout, the result, the time, and, where the game uses them, the server seed, the client seed, and the nonce. We keep those records so balances stay honest, so a round can be checked on the fairness page, so your own history can load, and so we can investigate a dispute or a bug. Crash does not store a client and server seed pair, because Crash is not resolved that way.

We store your gem balance, your vault balance, vault locks, rain and tip activity when those features record it, and affiliate referral data if you use affiliates. Chat messages are stored with your account so the room can show them, so moderators can remove them, and so a mute can be enforced.

Game Show, Battles, and the public bet feeds show a limited view of play to other people on the site, such as a masked or display name, a game, and an amount. If your profile is hidden or your statistics are private, we cut off the public history that those settings are meant to hide. Your own account can still see your own history.

04Technical data

Signing in uses a session cookie so the site knows the browser is still you. The cookie is required for the account. If you block it, you will be signed out. We also store a session epoch so "Sign out everywhere" can end older sessions.

The host that serves the site may log technical events in the ordinary way: IP address, time, browser type, and the page or request that was hit. We use that to keep the service up, to diagnose errors, and to detect abuse such as credential stuffing or automated betting. We do not use that log as a marketing list.

Your browser may store a client seed and a few interface preferences locally, such as animation settings. That storage stays on your device until you clear it. The account copy of the client seed, if you saved one, lives on the server so the games can use it.

05Why we use it

We use the information to create and secure the account, to take bets and pay results, to show the profile and statistics you allowed, to operate chat and moderation, to run self-exclusion and vault locks, to investigate cheating, bugs, and payment problems, and to keep a fairness record where a game has one.

The legal bases, where a privacy law requires us to name them, are: performing the contract with you (the account and the bets), our legitimate interest in securing the site and preventing fraud, your consent where you opt into a non-essential control such as browser notifications, and a legal duty where one applies. You can withdraw a consent that was only a consent, such as a notification switch, without deleting the bet history the contract still needs.

06Who else sees it

Other players see what the product is built to show: a public username, avatar, level, and, unless you turn them off, public statistics and game history. Staff who operate the site can see the account, the balance, the bets, and the chat, because that is how support, moderation, and the admin tools work.

Steam receives whatever their own sign-in flow requires when you choose Steam. We do not send them your gem history. If you later connect a payment or trade method, that provider receives what the method needs to move the transaction, and their own policy applies to what they collect. We do not sell, rent, or trade your personal information to advertisers or data brokers.

We may disclose information if the law, a court, or a competent authority requires it, or if a disclosure is necessary to investigate a serious breach, to protect a person from harm, or to establish or defend a legal claim. We share the minimum that the request actually needs.

07How long we keep it

Account data stays while the account is open and for as long after closure as we need to finish withdrawals, resolve disputes, meet accounting duties, and prevent a banned person from instantly returning. Bet and fairness records are kept so a settled round can still be explained. Chat may be deleted by moderators or fall out of the live room, but a copy can remain in backups or in a moderation log for a limited time.

Server logs are kept for a shorter operational window and then age out, unless a specific log is held because it is part of an abuse investigation. If you ask us to delete an account, we delete or anonymize what we can remove without breaking a record we are required to keep. A fairness proof and a completed financial entry are examples of records we may have to retain in a reduced form.

08Your choices and rights

You can read and change your email, trade URL, Steam API key, client seed, notification switch, profile visibility, and public statistics in settings. You can sign out of other devices. You can self-exclude on the responsible-play page. You can ask support, in the site chat, for a copy of the personal information we hold, for a correction, or for deletion, and we will respond within a reasonable time.

Where the law gives you the right to object, to restrict processing, or to lodge a complaint with a supervisory authority, you can use that right. None of those rights rewinds a settled bet or publishes a hidden seed before its game is ready to reveal it. We may need to confirm you are the account holder before we act on a request.

09Children

CsBubble is not for anyone under 18. We do not knowingly create accounts for children. If we learn that an account belongs to someone under 18, we will close it and remove what we can remove. Do not send us information about a child.

10Security

Passwords are stored as hashes. Sessions can be cut off everywhere from settings. Profile and statistics can be hidden. That is not a promise of perfect security. You are responsible for your email, your Steam account, and the device you play on. If you believe someone else entered your account, sign out everywhere and contact support immediately.

No website can promise that a breach will never happen. If a breach creates a real risk to your account, we will take the steps the situation and the law require, which can include locking the account and telling you.

11International access

The site can be reached from many countries. Your information may be processed in the country where the site is hosted and where the people who operate it are. Those countries may not have the same privacy law as yours. We still apply this policy. If your local law forbids you to use the site, do not use it. Choosing a country in the registration list does not change where the server is, and it does not make a prohibited use lawful.

12Changes to this policy

We may update this policy. The date at the top is the current version. If a change is significant we may ask you to accept again, or we may post a notice on the site. Continuing to use the account after the update means you accept the new policy. The Terms of Service still govern play, gems, and conduct. This policy governs information.

Questions about privacy go through support in the site chat. Include your username so we can find the right account, and do not paste a Steam API key or a password into the chat.