CS2WINNER

Privacy policy

Controller

Markus Grigowski, …, e-mail: …

Hosting and server logs

The website runs on our own server at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany; we use no CDN. To deliver pages and keep the server secure, the web server processes your IP address, the time, the requested address and your browser type. These log files are deleted after 30 days. Legal basis: Art. 6(1)(f) GDPR (secure operation of the website).

Country detection

To hide promo codes and partner links in countries where they are not allowed, we determine your country from your IP address with a database stored on our own server (MaxMind GeoLite2). The IP address is not sent to anyone and not stored for this purpose. Legal basis: Art. 6(1)(c) and (f) GDPR (compliance with advertising rules).

Clicks on partner links

When you click a partner link, we count the click with the site, the place on the page, your country and whether the link was blocked. We store no IP address and no identifier that could be traced back to you. Legal basis: Art. 6(1)(f) GDPR (billing with partner programmes).

Necessary storage on your device

This storage is strictly necessary for the services you request and does not need consent. To prove your cookie choice, we store the consent ID, banner version, chosen categories, language and time on our server – without your IP address. Legal basis: Art. 6(1)(c) GDPR in connection with Art. 7(1) GDPR.

  • cw_age – your age confirmation, 12 months.
  • cw_consent – your cookie choice with a random consent ID, 6 months.
  • lang-choice (local storage) – your language choice, so we do not suggest another language again.
  • cw_session – login session, only after you log in with Steam; ends after 8 hours or when you log out.
  • cw_ref – the referral code of the link you came through, until your first Steam login, at most 30 days.

Steam login, account and giveaways

If you log in with Steam, Steam confirms your SteamID64 to us; we never see your password. With the Steam Web API of Valve Corporation (USA) we then retrieve your name, avatar, account creation date, Steam level, ban status, profile visibility and whether you own CS2. We use this to run the giveaways and to keep out fake accounts (anti-fraud). We also store your trade URL, your fields, your credit bookings and the acceptance of the terms.

For credits we also store who referred you (if you came through a referral link) and whom you referred, and – only if you switch these bonuses on – check your Steam name once a day for the name tag and whether you are a member of our Steam group (public member list). The referral leaderboard shows the Steam names of the best recruiters.

Your Steam name and avatar are shown publicly on the fields you take and, if you win, as the winner. The avatar is copied to our server, so visitors' browsers do not contact Steam. Legal basis: Art. 6(1)(b) GDPR (taking part under the giveaway terms) and Art. 6(1)(f) GDPR (preventing fraud). The data is kept until you delete your account, which you can do at any time in your account; fields in finished giveaways then remain without your name so the draws stay verifiable.

Google Analytics 4 (only with your consent)

If you allow statistics, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to count page views and clicks on partner links and promo codes. Google Analytics is only loaded after your consent. Google signals and ad personalisation are switched off, no Steam ID or name is sent, and data is deleted after 2 months. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time via “Cookie settings” at the bottom of every page; the Google Analytics cookies are then deleted.

Google AdSense (only with your consent)

If you allow marketing, we show ads from Google AdSense by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The AdSense script is only loaded after your consent. Google and its ad partners store cookies and similar technologies on your device (for example __gads, __gpi, __eoi, up to 13 months) and process your IP address, device and browser information and the pages you visit to deliver, measure and – where permitted – personalise ads and to prevent fraud. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. More: https://policies.google.com/technologies/ads. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via “Cookie settings”; the AdSense cookies on our domain are then deleted.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You can withdraw a consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.