Privacy Policy

This policy explains how UPCASE (“UPCASE”, “we”, “us”), the operator of upcase.pro, handles personal data of people who visit the Site or have an account on it. It applies together with our Terms of Service.

For any privacy question or request, write to [email protected].

From Steam, when you sign in. Your SteamID, public profile name and avatar. Steam does not give us your password, email, friends list or payment details, and we do not ask for them.

What you give us. Your Steam trade URL when you withdraw an item; your confirmation that you are 18 or older and accept the Terms; promo codes you enter; anything you write to support.

What is created while you use the Site. Your balance and the full record of its changes; cases opened and upgrades made, with their results and the seeds needed to verify them; your inventory, sales and withdrawal requests; the amount, time and status of your deposits.

Technical data. IP address, browser type, and the time and address of requests. We use it to keep the Site secure, limit request rates and investigate abuse.

Identity verification. If a check is required, you may be asked for your name, date of birth, country and a photo of an identity document. This data is used only to confirm your age and identity.

We do not store card numbers or other payment credentials: you enter them on the payment provider’s page, and we receive only the result of the payment.

• To provide the service — sign you in, keep your balance and inventory, run games, deliver items to Steam. This is necessary to perform our agreement with you.
• To keep games verifiable — we keep the data needed to recalculate every game you played.
• To prevent fraud and abuse — detect multiple accounts, payment fraud, automation and attempts to exploit errors. This is our legitimate interest.
• To meet legal duties — age checks, record keeping and answering lawful requests from authorities.
• To answer you when you contact support.

We do not sell your data, do not use it for advertising and do not send marketing messages.

When you win an item, the live feed and the “Best drops” block on the case page show your Steam profile name and avatar next to the item, its price and the chance. Your balance, inventory, history, SteamID and trade URL are never shown to other players.

We share data only with those who need it to make the Site work, and only the part they need:

• Valve (Steam) — to sign you in and to send trade offers to the trade URL you provide.
• Payment providers — the amount and a payment reference, to process your deposit. They handle your payment details under their own policies.
• Identity verification provider — the data and document you submit for a check, when one is required.
• Hosting and network providers — our servers and the network that protects the Site from attacks process requests, including IP addresses, on our behalf.
• Authorities — when the law requires it, or to protect our rights in case of fraud.

Some of these providers operate in other countries. Where data is transferred abroad, we rely on the safeguards the applicable law provides.

We use only what the Site needs to work. There are no advertising or analytics trackers.

• Session cookie — keeps you signed in. It is set when you sign in, cannot be read by scripts and is removed when you sign out.
• Sign-in cookie — a short-lived cookie that protects the Steam sign-in from being hijacked. It exists only while you are signing in.
• Local storage — remembers your interface settings on this device, such as sound and fast mode. It never leaves your browser.
• Security cookies — our network provider may set a cookie to tell real visitors from automated traffic.

You can delete cookies in your browser at any time. Without the session cookie you will be signed out.

• Account, balance records, games and withdrawals — while your account exists, and after it is closed for as long as financial and anti-fraud rules require.
• Sessions — until you sign out or the session expires.
• Technical logs — for a limited period needed for security, then deleted.
• Verification data — for as long as the law requires such records to be kept.

You can ask us to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong;
• delete your account and personal data;
• restrict or stop a particular use of your data.

Write to [email protected] and include your SteamID so we can find the account. We may ask you to confirm that the account is yours. Some records — balance changes, payments and game results — may have to be kept after deletion where the law or fraud prevention requires it; they are then no longer used for anything else.

If you believe we have handled your data unlawfully, you may also complain to the data protection authority of your country.

The Site works over an encrypted connection. Sessions are stored on the server and the session cookie is unavailable to scripts. Balance changes are recorded in a ledger that is reconciled with the balance, and access to player data is limited to administrators whose actions are logged.

No system is perfectly secure. Protect your Steam account with Steam Guard, and if you think someone else has used your account, write to us straight away.

The Site is for adults only. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we close it. If you believe a minor is using the Site, tell us at [email protected].

When we change how we handle data, we update this page and the date at the top. If a change is significant, we will post a notice on the Site.