1Who keeps it
smatter.club keeps what this page lists and decides what happens to it.
You can write to us about it at hello@smatter.club or on our Discord server, linked at the bottom of this page.
2Why we keep it
We keep it to run the service you signed up for. That means signing you in, showing your accounts and what your bots did, passing your commands to your bots, telling you when something needs your attention, and billing you.
We don't sell your data, show you ads, or use your data for anything else.
3What never reaches us
Your Steam password, your authenticator's secret and your Steam session stay on your computer. Our programs never send them to us.
Your CSGORoll cookie stays on your computer too. The only way a cookie reaches our server is if you paste a new one into the dashboard. That only works while you've switched it on in Settings. The cookie passes through to your bot, and we don't keep it.
Your bot removes passwords, secrets, cookies and buyers' Steam trade links from everything it sends us. It does send each account's Steam login name, because that's the name the dashboard uses for the account.
5Who else sees it
- OVH hosts our server and Supabase holds our database. They store your data for us.
- Resend sends our emails. It sees your email address and what we write to you. In an alert, that includes the Steam login name of the account it's about.
- When you pay, our payment provider 2328 (2328.io) handles the payment. What it tells us about the payment is kept with your bill.
- If you send alerts to Discord, they go to the channel you chose. Each one names its account by its Steam login name. If you write to us on our Discord server, Discord sees what you write there too.
- Steam and CSGORoll host the item pictures the dashboard shows, so your browser asks their servers for them. CSGORoll keeps the pictures of its newest stickers at SteamAnalyst (cache.steamanalyst.com), so your browser asks that site for those. That site sees your IP address and that a picture was asked for, but not which of our pages asked. This site's front page and demo do the same for the skins they show. A visitor's browser asks Steam's picture server, community.steamstatic.com, for each skin's picture. Steam sees the visitor's IP address and that a picture was asked for. It doesn't see which of our pages asked, or anything else. This is the only thing a page on this site loads from another site.
OVH and Supabase keep our server and database in their own data centres. These may be outside the country you live in.
6What we keep and for how long
- Your login: your email, whether it is checked, whether two-step login is on, your sign-ins, and which version of the terms you agreed to, and when.
For each sign-in, we keep the IP address it came from and how your browser describes itself. We keep your password only as a one-way hash, and your two-step secret encrypted.
How long A sign-in ends after 30 days without use, and an email link after one hour. The rest stays until your account is deleted, and it's the first thing removed then.
In your export
- Your smatter.club account itself: the number everything else of yours is filed under.
How long Forever. When you leave, a closed record stays, with its number and when it was made and closed. It stays because the bill we keep refers to it.
In your export
- Your accounts and their bots: each account's Steam login name, its CSGORoll and Steam ids, a copy of its Steam picture, how each bot connects, its version and its pairing.
We call each account by the Steam login name its bot sends each time it connects. Every alert about an account uses that name. Its Steam picture is a copy its bot got from Steam. The dashboard shows that copy from our own server, so your browser never asks Steam for it. We also keep any log files you sent from your bots for support.
How long Until your account is deleted. A log file you sent is removed after 30 days. If your account ends before that, the file goes within about a minute.
In your export
- Your trades and sales on CSGORoll, as your bots reported them.
Each trade names the CSGORoll user on the other side, as CSGORoll reports them.
How long Until your account is deleted.
In your export
- The items in your accounts' inventories, and how each is listed.
How long Until your account is deleted.
In your export
- Your balances, payouts, CSGORoll's trade protection, and your worth over time.
How long Until your account is deleted.
In your export
- Your rules, and the commands you sent your bots.
How long Until your account is deleted.
In your export
- Activity: what your bots and the dashboard did, line by line, and each pause CSGORoll or Steam asked for.
How long Until your account is deleted. Each account has a limit, and past it the oldest lines are removed first.
In your export
- Your settings: how updates arrive, your alerts, the currency and time zone your dashboard shows, and our server's notes about your accounts.
If you send alerts to Discord, we keep the address of that Discord channel.
How long Until your account is deleted. Our copy of an alert email is removed two days after it's sent.
In your export
- Your bill: rates, fees, statements, payments, credit and reminders.
A statement keeps the name and email it was issued to, and the names of the accounts and items it charged for. Your rate by total worth keeps the total worth it was based on, and when we last checked it.
How long Part of your bill stays after you leave. That's issued statements with their lines, payments, adjustments, closed months and our own record of changes to your bill. A statement is kept for seven years from the day it was issued. Fees not yet on a statement are removed when your account is deleted.
In your export
- Our own checks of what bots report, with our notes. They are not in your export: one can hold another customer's report.
How long Until your account is deleted.
Not in your export
- Our server's own records, the same for everyone. Nothing in them is yours.
We count recent sign-in attempts under a one-way hash of the IP address and the email. That hash doesn't name anyone. While your export waits for you to download it, it's kept as a separate file.
How long A count of sign-in attempts is removed after 15 minutes, and an export after a day. Our own record of each change we make to a bill or to the coin value is never edited or removed, even after you leave.
Not in your export
7After you delete your account
Seven days after you ask, we delete everything of yours except your bill, as the list above says, and a closed record of your account. That record holds its number and when it was made and closed. If you still owe something, the deletion waits until it's paid.
We also keep a note outside the database that your account was deleted. It holds only your account's number and the time. If we ever have to restore the database from a backup, we use that note to delete your account again.
Our database provider keeps daily backups for seven days, under its published terms for our plan. So for up to seven days after your account is deleted, your data is still in a backup.
8Your data is yours
You can see your data in the dashboard. In Settings → Login & data, you can download all of it as one file and delete your account.
That file holds your own data. It leaves out secrets, like how your password is stored, and anything that names another person, like the other side of a trade. It also leaves out our own working notes and the log files your bots sent for support. Those log files stay on your computer too. The file says what it leaves out.
For anything else, write to us at hello@smatter.club or on our Discord server, linked at the bottom of this page. That includes asking a question, asking us to correct something, or telling us you're not happy with what we do with your data.
9When this page changes
When we change this page, we write to you before the change applies.