Privacy Policy

Kitted ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data. By using Kitted, you agree to the practices described here.

1. Information we collect

Account data

When you sign in via Steam or email magic link, we store your email address and — if provided by Steam — your Steam ID and display name. We do not store passwords.

Quiz & loadout data

We store your quiz answers and the loadouts generated from them so you can view, share, and manage them later. If you make a loadout public, it is visible to other users.

Inventory data

If you connect your Steam inventory, we read your owned CS2 items to match them against our catalog and show ownership badges on matching skins. We do not store item float values (Steam's inventory API does not provide them).

Usage data

We collect standard server logs (IP address, browser type, referring URL, pages visited, timestamps) for security and debugging. We also collect product analytics events (e.g. account creation, loadout saves) via Mixpanel, tied to your account ID. We do not sell this data.

Cookies

We use session cookies required for authentication. Mixpanel analytics data is stored in your browser's local storage, not cookies. We do not use advertising or cross-site tracking cookies.

2. How we use your information

• Operate and improve Kitted (authentication, loadout generation, quiz recommendations).
• Display your public loadouts and profile to other users if you opt in.
• Send transactional emails (magic link sign-in, account notices). No marketing emails without explicit consent.
• Detect and prevent fraud, abuse, and security threats.
• Comply with legal obligations.

3. Data sharing

We do not sell your personal data. We share data only with:

• Supabase — our database and authentication provider, hosted in the EU.
• Vercel — our hosting provider, for serving the application.
• Steam / Valve — only when you initiate a Steam login or connect your inventory; we receive only what Steam provides via OpenID or its public inventory API.
• Mixpanel — our product analytics provider; receives event data and your account ID.
• Marketplace partners (Steam Market, CSFloat, Skinport, DMarket, Skinbaron, Tradeit.gg, White.Market) — only when you click a buy link, which redirects you to their site. We do not share your account data with them.
• Law enforcement — if required by applicable law or valid legal process.

4. Data retention

We retain your account data and loadouts for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law or for fraud prevention.

5. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Restrict or object to processing.
• Data portability (receive a copy of your data in a machine-readable format).

To exercise any of these rights, email us at privacy@kitted.gg. We will respond within 30 days.

6. Children's privacy

Kitted is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have done so, contact us and we will delete the data promptly.

7. Security

We use industry-standard security measures (TLS in transit, AES-256 at rest via Supabase, row-level security policies). No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take reasonable precautions.

8. Third-party links

Kitted links to Steam Market and other third-party marketplaces (CSFloat, Skinport, DMarket, Skinbaron, Tradeit.gg, White.Market). We are not responsible for the privacy practices of those sites. Review their policies before providing personal data.

Some of these links (currently Tradeit.gg and White.Market) are affiliate links — we may earn a commission on purchases made through them, at no extra cost to you.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of Kitted after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this policy? Email us at privacy@kitted.gg.

Kitted is not affiliated with Valve Corporation or Counter-Strike 2.