Privacy Policy
Last Updated: April 29, 2026
Effective Date: April 29, 2026
Controller: ItemFort Ltd. Liability Co. Website: itemfort.com
ItemFort Ltd. Liability Co. respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use ItemFort.
1. Information We Collect
We may collect the following categories of information.
Account and Steam information
- Steam ID;
- Steam display name;
- Steam avatar;
- Steam profile URL;
- public inventory information;
- Steam trade URL;
- account preferences.
Transaction information
- orders;
- items purchased;
- item delivery status;
- supplier item submissions;
- supplier minimum payout settings;
- supplier payable history;
- payout request history;
- refund and dispute records.
Payment information
Buyer payments are processed by third-party processors such as Stripe. ItemFort generally does not store full card numbers. We may receive payment status, transaction IDs, billing country, payment method type, fraud signals, refund status, and dispute data.
Supplier payout and tax information
For suppliers, we or our providers may collect legal name, address, date of birth, tax identification information, tax forms, payout account details, provider account details, and verification status.
Technical and usage information
- IP address;
- device identifiers;
- browser type;
- operating system;
- pages viewed;
- session information;
- cookies;
- log data;
- fraud and security signals.
Communications
We collect support messages, emails, chat messages, reports, complaints, and other communications you send us.
2. How We Use Information
We use personal information to:
- operate ItemFort;
- authenticate users through Steam;
- process purchases;
- deliver Virtual Items;
- process supplier submissions and payouts;
- provide support;
- prevent fraud and payment abuse;
- screen for sanctions and restricted jurisdictions;
- comply with tax, legal, payment processor, and payout provider requirements;
- resolve disputes and chargebacks;
- enforce our Terms;
- improve the Platform;
- send service notices and policy updates.
3. Legal Bases for Processing
Where GDPR, UK GDPR, or similar laws apply, we process information based on:
- performance of a contract;
- compliance with legal obligations;
- legitimate interests, including fraud prevention, platform security, compliance, and service improvement;
- consent, where required for optional cookies or marketing.
4. How We Share Information
We may share information with:
- payment processors such as Stripe;
- payout providers such as Tipalti and Payoneer;
- Steam/Valve where necessary for authentication or item delivery;
- hosting, analytics, security, fraud prevention, and support vendors;
- tax, accounting, legal, and compliance service providers;
- banks, card networks, and dispute processors;
- law enforcement, regulators, courts, or government authorities where required or permitted;
- successors in a merger, acquisition, restructuring, or sale of assets.
We do not sell personal information for money.
5. International Transfers
ItemFort is based in the United States. If you access ItemFort from outside the United States, your information may be processed in the United States and other countries.
Where required, we use appropriate safeguards such as contractual protections or Standard Contractual Clauses.
6. Data Retention
We retain information for as long as needed to operate the Platform, comply with legal obligations, resolve disputes, enforce agreements, maintain tax and accounting records, prevent fraud, and satisfy payment processor or payout provider requirements.
Typical retention periods include:
- account data: account lifetime plus up to 3 years;
- transaction and tax records: up to 7 years or longer where required;
- fraud, compliance, and dispute records: as long as reasonably necessary;
- support records: up to 3 years;
- security logs: generally up to 12 months unless needed longer;
- cookie and analytics data: according to the Cookie Policy.
7. Children and Minors
Transactional use of ItemFort is intended for users who are at least 18 years old.
Users under 18 may only use non-transactional features with parent or guardian involvement where permitted by law. Users under 18 may not purchase items, supply items, request payouts, or participate in giveaways unless permitted through a parent or legal guardian and applicable law.
ItemFort does not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information to us, contact [email protected].
8. Your Privacy Rights
Depending on your location, you may have rights to:
- access your information;
- correct inaccurate information;
- delete information;
- restrict processing;
- object to processing;
- obtain data portability;
- withdraw consent;
- appeal certain decisions;
- lodge a complaint with a data protection authority.
To exercise rights, contact [email protected]. We may verify your identity before responding.
9. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
You can manage optional cookies through our cookie preferences tool where available.
10. Security
We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, monitoring, and security processes.
No internet service is completely secure. You are responsible for protecting your Steam account, email account, devices, passwords, Steam Guard, and trade URL.
11. Changes
We may update this Privacy Policy from time to time. Material changes will be posted on the Platform or communicated where appropriate.
12. Contact
Privacy: [email protected]
Support: [email protected]
ItemFort Ltd. Liability Co.
30 N Gould St Ste N
Sheridan, WY 82801
United States