Privacy Policy – LootNinja.org
Effective Date: November 24, 2025

This Privacy Policy explains how LootNinja.org (“we”, “us”, or “our”) collects, uses, and protects your personal information when you access our website https://lootninja.org and use our services, including purchasing, trading, or receiving in-game items and skins. By using our site or services, you agree to the practices described in this Privacy Policy.

1. Data Controller

Contact: info@lootninja.org

2. Information We Collect

We may gather the following categories of personal information:

• Personal Details: your name, email, billing address, and other information provided during registration or checkout.
• Transaction Information: order history, payment confirmations, and receipts.
• Payment Data: securely processed by third-party providers; full card numbers are never stored.
• Gaming/Trade Information: Steam username, trade URL, and delivery status of items.
• Technical Data: IP address, browser and device type, operating system, referral source, and cookie identifiers.
• Communications: messages sent via forms, support requests, or emails.
• Verification Documents: identity checks, proof of address, date of birth, and other AML/KYC information required by payment processors or regulators.

3. How We Collect Data

We obtain information through:

• Direct input from you when registering, making a purchase, or contacting support.
• Automatic collection via cookies, analytics, and other tracking technologies.
• Third-party services, including payment processors like PayPal, Stripe, or WooCommerce.

4. Why We Use Your Information

We process your personal data to:

• Fulfill orders, including sending CS2 and Dota 2 items via Steam trade offers.
• Communicate regarding transactions, updates, or support inquiries.
• Maintain and improve website functionality, security, and performance, including fraud prevention and analytics.
• Comply with legal and regulatory obligations, including tax, accounting, AML/CTF, and payment regulations.
• Enforce our Terms of Service and protect our rights.

Processing is limited to what is necessary for service provision, legal compliance, and fraud prevention.

5. Sharing and Disclosure

Your data may be shared with:

• Banks, card networks, and payment processors for fraud checks, AML compliance, and dispute resolution.
• Service providers supporting hosting, analytics, communications, or customer support.
• Steam/Valve to execute trade offers.
• Regulatory authorities or professional advisers when legally required or to protect our rights.

We do not sell personal information. Payment details are processed directly by authorized providers; Lootninja never stores complete card information.

6. Communications

We may use your contact information to:

• Confirm orders, trades, and account activities.
• Send service updates, security notifications, or support responses.
• Provide marketing communications if you have opted in (unsubscribe options are provided; essential service emails will still be sent).

7. Cookies and Tracking

We use cookies and similar technologies to improve website functionality, remember preferences, perform analytics, and support marketing efforts.
Cookies can be managed via your browser or, where available, our cookie preference center. Disabling certain cookies may limit website features.

8. Data Retention

Personal data is retained only as long as necessary to meet business, legal, and regulatory requirements:

• Support messages are kept until resolved.
• KYC/AML records are retained for at least five years or longer if required.
• Cookies and analytics data are stored according to their individual lifetimes or until deleted.
• Order and transaction records are retained for up to six years to comply with accounting and legal obligations.

9. Your Rights

Under the UK GDPR, you have the right to:

• Access, correct, or request deletion of your personal data.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent for processing based on consent.

Our services are intended for adults aged 18 or over. If a child has provided personal information, please contact us to delete it.

10. International Data Transfers

Your data may be transferred outside the UK/EEA to service providers or payment partners. We implement appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, to protect your information.

11. Data Security

We employ technical and organizational measures to protect your personal data, including encryption and access restrictions. No system is fully secure; you are responsible for safeguarding your account credentials.

Some transactions may undergo automated fraud checks or bank risk assessments. You may request a human review if a transaction is declined.

12. Third-Party Links

LootNinja.org may include links to external websites. We are not responsible for their privacy practices. We recommend reviewing third-party policies before providing personal data.

13. Policy Updates

This Privacy Policy may be updated periodically. Updated versions will appear on this page with the new effective date. Continued use of our services after updates constitutes acceptance of the revised policy.