Privacy Policy

Last updated 25 August 2026

This explains what CS2 Services collects, why, how long we keep it and how to get it removed. It is written to match what the system actually stores rather than to cover us for things we do not do.

What we never collect

We never ask for, receive or store your Steam password. There is no Steam login step anywhere in this service. We work from your public profile link, which anyone can read.

We also do not use third-party analytics, advertising trackers or a chat widget. Nothing on this site reports your browsing to anyone else.

What we do collect

Depending on how you use the service, that is:

Steam profileThe SteamID64 you ask us to send commends to, and the orders placed against it.

Discord accountYour Discord user ID and username, once you verify. This is what ties the free trial to one person.

Email addressOnly if you create an account to buy commends. The free trial needs no email.

PasswordFor website accounts only, stored as a bcrypt hash. We cannot read it, and neither can anyone who obtains the database.

IP addressRecorded against sign-ins, orders, free-trial claims and admin actions, so abuse and rate limits can be enforced.

Browser and deviceThe user-agent string your browser sends, stored with a session so you can see where you are signed in.

Order historyWhat you ordered, how much was delivered, and your remaining balance.

Support contextNotes staff add to your account, and an audit record of staff actions affecting it.

If you only take the free commends, that is a Discord ID, a SteamID64, an IP address and the order itself. No email address, and no password.

Why we hold it

To deliver what you asked for. The SteamID64 is the destination; without it there is no service.
To keep the free trial to one per person. The Discord ID and the target profile are what make "once" mean once.
To stop abuse. IP addresses drive the rate limits that keep the pool from being drained.
To answer you. Order history is what lets us tell you what happened when something goes wrong.
To keep ourselves honest. Staff actions on your account are recorded, including who did them.

We do not sell any of it, and we do not use it for advertising.

Cookies and local storage

All of these are set by this site. There are no third-party cookies.

cs_sessionSigned-in session for website accounts. Expires after 30 days, or when you sign out.

cs_freeRemembers which half-finished free-trial attempt this browser belongs to. Expires after 7 days. It is not an identity and grants nothing on its own.

langYour chosen language. Stored in the browser, never sent to us.

promo_dismissedWhich announcement banner you closed. Stored in the browser, never sent to us.

The first two are strictly necessary for the service to work. The last two live in your browser's local storage and never reach our server; clearing your browser data removes them.

We share personal data with nobody, with three narrow exceptions:

Discord. When you verify, our bot sees your Discord ID and username, because that is how verification works. Discord's own privacy policy governs what they do with your use of Discord.
Our hosting and delivery infrastructure. The server that delivers your commends receives the SteamID64 it is delivering to. It is ours, not a third party's.
The law. If we are legally required to disclose something, we will.

Payments are arranged directly with you and handled by whatever method you choose. We do not operate a checkout and never see or store card details.

How it is protected

The site is served over HTTPS.
Passwords are hashed with bcrypt. They are never stored in a readable form.
Every database query is a prepared statement, so data cannot be extracted by manipulating an input.
Credentials for our own pool accounts are encrypted at rest with AES-256-GCM, with the key held outside the web root and never in the database. No page can return them.
Staff access is role-based, and every action a staff member takes on an account is recorded with their name against it.

No system is perfectly secure, and we will not claim otherwise. What we can say is that a copy of our database on its own does not give up passwords or account credentials.

How long we keep it

Account and balanceUntil you ask us to delete it.

Order historyKept with the account, so you and we can both see what was delivered.

Free-trial recordKept indefinitely. It is the only thing preventing the same person claiming again, and deleting it would defeat the point.

SessionsRemoved when they expire or when you sign out.

Audit recordsKept as a record of staff activity. These name the staff member, not just you.

Your rights

Depending on where you live you may have the right to see the data we hold about you, correct it, have it deleted, or object to how we use it. You can exercise any of these by opening a ticket in our Discord — we do not require a particular form of words.

One honest limit. If you ask us to delete your account, we will, but we keep the record that a free trial was claimed against your Discord ID and Steam profile. Removing it would let the same person take the free offer again, which is the one thing that record exists to prevent. It holds no email address, no password and no order detail.

Children

This service is not intended for anyone under 18, and we do not knowingly hold data about children. If you believe we have, tell us and we will remove it.

Changes

We may update this policy. The date at the top is when it last changed, and this page always shows the current version. If a change means we start collecting something new, we will say so in our Discord.

Contact

Reach us in our Discord server. You can also email contact@cs2services.com.

This policy is written and published in English. Any translation is provided for convenience; the English text is the one that applies.

Privacy Policy

On this page

What we never collect

What we do collect

Why we hold it

Cookies and local storage

Who else sees it

How it is protected

How long we keep it

Your rights

Children

Changes

Contact