Privacy Policy for Trade Assistant Chrome Extension

1. Introduction

This Privacy Policy describes how the JJSKIN Trade Assistant Chrome Extension ("Extension"), developed by Lumio for the JJSKIN marketplace, collects, uses, and protects your information. We are committed to protecting your privacy and ensuring the security of any data processed by our Extension.

2. Information We Collect

The Extension collects only the minimum information necessary to facilitate CS2 skin trading:

2.1 Steam Session Information

• Steam user ID (steamID64)
• Session identifiers (g_sessionID)
• Web API access tokens
• Trade offer IDs and asset information

Important: We extract this information from Steam Community web pages you visit. We do NOT access or store your Steam cookies, passwords, or login credentials.

2.2 Trade Data

• CS2 skin asset IDs involved in trades
• Trade offer status and timestamps
• JJSKIN marketplace order information
• Cryptographic proofs of completed trades

3. How We Use Your Information

All collected information is used exclusively for:

• Creating and sending Steam trade offers
• Monitoring trade offer status
• Generating cryptographic proofs of trade completion
• Synchronizing trade status with JJSKIN marketplace
• Providing extension functionality status updates

4. Data Storage and Security

4.1 Local Storage Only

All sensitive data is stored locally on your device using Chrome's secure storage APIs. No personal information is transmitted to external servers for storage.

4.2 Automatic Data Expiration

• Steam session data: Automatically expires after 30 minutes
• Trade monitoring data: Cleared after trade completion
• Expired orders: Automatically purged after 24 hours

4.3 Security Measures

• All API communications use HTTPS encryption
• Cryptographic operations performed locally in your browser
• No plaintext storage of sensitive information
• Isolated execution environments for security-critical operations

5. Data Sharing and Third Parties

6. User Rights and Control

You have complete control over your data:

• Access: View all stored data through Chrome's extension settings
• Deletion: Clear all data instantly by uninstalling the Extension
• Opt-out: Disable the Extension at any time through Chrome
• Transparency: All operations are logged locally for your review

GDPR Rights (EU Residents)

If you are located in the European Union, you have additional rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your personal data
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis: We process your data based on legitimate interests (providing the Extension service) and your consent (by installing the Extension).

CCPA Rights (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (Note: We do NOT sell your data)
• Right to Non-Discrimination: Equal service regardless of exercising privacy rights

To exercise these rights, contact us at privacy@lumio.it.com. We will respond within 45 days.

7. Data Retention

• Session Data: 30 minutes maximum
• Trade Records: Until trade completion plus 24 hours
• Extension State: Until you uninstall the Extension
• Cryptographic Proofs: Stored temporarily until blockchain submission

8. Children's Privacy

This Extension is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

9. Permissions Explained

Each Chrome permission serves a specific purpose:

• Storage: Save trade state locally on your device
• Host Permissions (Steam): Monitor trades and extract session data
• Host Permissions (JJSKIN): Sync with marketplace
• Offscreen Documents: Generate cryptographic proofs
• Alarms: Background trade monitoring

10. Updates to Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. Updates will be noted with a new "Last Updated" date. Continued use of the Extension after changes constitutes acceptance of the updated policy.

11. Open Source and Transparency

Our Extension's functionality is transparent and auditable. The cryptographic proof generation uses the open-source TLSNotary protocol, ensuring verifiable and trustless operations.

12. Contact Information

For privacy concerns or questions about this policy, contact:

13. Legal Compliance

This Extension complies with:

• Chrome Web Store Developer Program Policies
• Steam Terms of Service
• General Data Protection Regulation (GDPR) principles
• California Consumer Privacy Act (CCPA) where applicable

14. Data Breach Notification

In the unlikely event of a security breach affecting your data, we will notify affected users through the Extension update notes and our website within 72 hours of discovery.

15. Consent

By installing and using the JJSKIN Trade Assistant Extension, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please uninstall the Extension.

16. Policy Updates and Version History

We review this Privacy Policy quarterly and update it when necessary. Material changes will be communicated through the Extension update notes.

17. Additional Disclosures

Do Not Track Signals

The Extension does not respond to Do Not Track signals as it does not track users across websites.

International Data Transfers

All data processing occurs locally on your device. When API calls are made to Steam or JJSKIN servers, standard internet protocols apply. No personal data is stored on international servers.

Automated Decision Making

The Extension does not engage in automated decision-making or profiling that produces legal or similarly significant effects.