Privacy Policy
At LootNight.com ("LootNight," "we," "us," or "our"), operated by XYZ AI Limited, a company registered in England and Wales under registration number 16273763, with its registered office at Initial Business Centre, Wilson Business Park, Manchester, United Kingdom, M40 8WN, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services (collectively, the "Service").
By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
Data We Collect
We collect the following types of information: Personal Data You Provide
Email Address: Required for account registration and verification.
Steam Account Information: Necessary to deliver purchased in-game skins to your Steam Inventory.
Payment Information: Limited to data needed to facilitate transactions (processed by third-party providers; we do not store or process this directly).
Automatically Collected Data
Device Information: IP address, browser type, operating system, and device identifiers.
Usage Data: Pages visited, time spent on the Service, and actions taken (e.g., purchases).
Cookies: We use cookies and similar technologies to enhance your experience and analyze usage. You can manage cookie preferences through your browser settings.
Data from Third Parties
We may receive limited information from Steam (e.g., account status) to facilitate Item delivery.
How We Use Your Data
We use your personal data for the following purposes:
To create and manage your account, including email verification.
To process your purchases and deliver Items to your Steam Inventory.
To communicate with you about your account, purchases, or updates to the Service.
To detect, prevent, and address fraud, abuse, or technical issues.
To comply with legal obligations under UK law and applicable regulations.
To improve the Service, including analyzing usage trends and user preferences.
Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your data based on:
Contractual Necessity: To fulfill our agreement with you (e.g., delivering Items).
Legitimate Interests: To operate and improve the Service, prevent fraud, and ensure security.
Legal Obligation: To comply with applicable laws and regulations.
Consent: Where applicable (e.g., cookies), you may withdraw consent at any time by contacting us or adjusting your settings.
Data Sharing and Disclosure
We do not sell your personal data. We may share it in the following circumstances: Third-Party Service Providers
Payment Processors: Visa and MasterCard transactions are handled by trusted third-party providers. We do not store or process payment data ourselves.
Steam: We share minimal data with Steam to deliver Items to your Inventory.
Analytics Providers: We use tools to analyze usage (e.g., anonymized data for trends).
Legal Requirements
We may disclose your data if required by law, court order, or to protect our rights, property, or safety, or that of others.
Business Transfers
If XYZ AI Limited is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, subject to confidentiality obligations.
Data Retention
Account Data: Retained for as long as your account is active, plus a reasonable period thereafter (e.g., 6 months) for legal or operational purposes, unless required otherwise by law.Transactional Data: Kept for 7 years to comply with UK tax and accounting laws.
Usage Data: Retained in anonymized form for analytics purposes.
If you request account deletion, we will erase your personal data unless retention is required by law.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Access: Request a copy of the data we hold about you.
Rectification: Ask us to correct inaccurate or incomplete data.
Erasure: Request deletion of your data (subject to legal exceptions).
Restriction: Ask us to limit how we process your data.
Portability: Request your data in a machine-readable format.
Objection: Object to processing based on legitimate interests.
Withdraw Consent: Where processing is based on consent, withdraw it at any time.
To exercise these rights, contact us at [insert contact email]. We will respond within 30 days.
Data Security
We are committed to safeguarding your personal data through the implementation of reasonable technical and organizational measures designed to protect against unauthorized access, loss, or misuse. These measures include, but are not limited to, encryption protocols to secure data transmission, access controls to restrict who can interact with your information, and regular system assessments to identify and address potential vulnerabilities.
Our organizational practices also involve staff training on data protection principles and adherence to strict internal policies, ensuring that your email addresses, Steam account details, and transaction-related data remain confidential and secure within our operational framework.
Despite these efforts, we must acknowledge that no digital system can be deemed entirely impervious to all risks. The evolving nature of cyber threats means that, while we strive to maintain a high standard of security, absolute protection cannot be guaranteed. Factors such as sophisticated hacking attempts, unforeseen technical failures, or external breaches beyond our control could potentially compromise data integrity.
We continuously monitor and update our security practices to mitigate these risks, but in the interest of transparency, we advise users to remain vigilant and report any suspicious activity to our Support Team, so we can respond promptly and effectively to maintain the trust you place in our Service.
International Data Transfers
At LootNight.com, we recognize that certain operations may necessitate the transfer of your personal data beyond the United Kingdom, such as when delivering in-game skins to your Steam Inventory, which relies on Steam servers located outside the UK. To uphold our commitment to data protection, we ensure that any such international transfers are conducted with robust safeguards in place to meet the stringent requirements of the UK General Data Protection Regulation (UK GDPR). Specifically, we utilize mechanisms like Standard Contractual Clauses (SCCs), which are pre-approved legal agreements endorsed by the UK Information Commissioner’s Office, to guarantee that your data, such as email addresses or Steam account details, receives a level of protection equivalent to that within the UK. These clauses impose strict obligations on the receiving party, ensuring your information remains secure and confidential during and after the transfer process. Our compliance with these safeguards reflects our dedication to maintaining the integrity and privacy of your data, regardless of where it is processed, in alignment with applicable UK data protection laws.
Cookies and Tracking
At LootNight.com, we use cookies and similar technologies to ensure a reliable and optimized experience on our Service.
These small data files are essential for core functionality and help us improve our platform. Below, we explain their purposes and your options for managing them.
Essential Functions: Essential cookies enable critical features like account login and transaction processing. They verify your identity, maintain your session, and secure your account, ensuring safe access linked to your Steam Inventory. They also facilitate payments via third-party providers (Visa and MasterCard) and deliver purchased skins for CS2, DOTA 2, or TF2 to your Steam account. Without these, account access and purchases would not function properly.
Analytics: We use analytics cookies to collect anonymized data on how users engage with the Service—such as page visits and skin preferences. This helps us identify trends, enhance performance, and adjust inventory to meet demand, improving your experience without targeting individuals.
Managing Cookies: You can control cookies through your browser settings (e.g., Chrome, Firefox), found under privacy or security options, to disable or customize them. Note that blocking essential cookies may prevent logins or purchases, while disabling analytics cookies limits our ability to refine the Service based on usage insights. We recommend balancing your preferences with optimal functionality."
Children’s Privacy
Our service is explicitly designed for users aged 18 and older, in alignment with our operational policies and legal obligations.
We do not intend for individuals under 18 to access or utilize our platform, and we take deliberate steps to ensure that minors are excluded from our user base.
Consequently, we do not knowingly collect, process, or retain personal data from anyone below this age threshold.
This includes information such as email addresses, Steam account details, or payment data that might otherwise be submitted during account creation or transactions.
Should we become aware that personal data from a minor has been inadvertently collected, whether through registration, purchase attempts, or other interactions, we will act swiftly to address the situation. Upon discovery, we will promptly delete such data from our systems in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).
If you suspect that a minor’s information has been provided to us, please contact our support team at lootassist@lootnight.com, and we will investigate and resolve the matter efficiently to uphold our commitment to privacy and compliance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted here with an updated "Last Updated" date.
Your continued use of the Service after changes indicates acceptance of the revised policy.
Contact Us
If you have questions, concerns, or wish to exercise your rights, please contact us at:
Email: lootassist@lootnight.com
Address: Initial Business Centre, Wilson Business Park, Manchester, United Kingdom, M40 8WN
You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe we have not handled your data appropriately.