Privacy Policy

Last updated: 16 October 2026

This notice explains how personal information is used when you visit AIMVAULT at https://aimvault.org/, use a Steam-connected account, buy or sell CS2 skins, open cases, manage your inventory, or contact support.

1. Who is responsible for your information

AIMVAULT is operated by VELTRIX MM LTD, the controller of personal information processed for this website. Our company number and registered office address are shown in the Company information section below. For privacy requests, email info@aimvault.org or write to our registered office.

2. Information we process

• Account and Steam information: account identifiers, Steam ID, public profile name and avatar, and any trade or profile information you provide. Steam authentication takes place through Steam; never send your Steam password to support.
• Order and billing information: your name, email, billing address, country and telephone number where requested, selected items, prices, order references, payment status and transaction references.
• Inventory and activity: purchased and awarded items, case openings, account balance entries, listings, sales and relevant account history.
• Support information: the name, email, topic, reference and message you submit through our contact form or send by email.
• Technical information: IP address, browser and device details, request and security logs, session information, and the cookies or browser storage described in our Cookie Policy.

Payment providers handle card authorisation. Our order records contain payment statuses and references. Do not send full card numbers, security codes or account passwords through our contact form.

3. Why we use information and our legal grounds

We use information to operate accounts, fulfil orders, maintain inventory and transaction records, and respond to requests connected with the service. This processing is necessary to perform a contract or take steps you request before entering one.

We rely on legitimate interests to protect accounts, investigate errors and abuse, keep the service reliable, and deal with support enquiries, while considering your rights and reasonable expectations. Records needed for tax, accounting or lawful regulatory requests are processed to meet legal obligations. Optional analytics, marketing and other consent-based features depend on your choice where consent is required.

Fields marked as required are needed for the relevant form or transaction. Without them, we may be unable to provide that function. Optional information is identified as such.

4. Who may receive information

Information may be handled by hosting and infrastructure providers, payment processors, email and support services, and professional advisers as needed for their role. Steam/Valve receives information when you use its authentication or inventory services. Requests for externally hosted assets, including Steam item images and Google Fonts, also disclose ordinary connection information such as your IP address to the relevant provider.

We may disclose information where required by law, to address fraud or security incidents, or in connection with a business transfer subject to applicable data protection requirements. We do not sell personal information. External services apply their own privacy notices.

5. International processing and security

Internet service providers may process information in countries outside your own. International transfers must meet applicable data protection requirements, including an adequacy decision or another lawful transfer mechanism and safeguards where required. Contact us for information about transfers relevant to your data.

We use access controls and other measures appropriate to the service to protect information. No online service can guarantee absolute security. Keep your credentials private and report suspected account misuse promptly.

6. How long information is kept

We keep information for as long as needed for the purpose described here. Account and inventory records are needed while the account is active; order and payment records may need to be retained afterwards for accounting, legal obligations and disputes. Support and security records are retained according to the issue, fraud risk and applicable legal requirements. We consider these purposes, the sensitivity of the information and whether it remains necessary when deciding when to delete or anonymise it.

7. Your choices and rights

Depending on the applicable law and the basis for processing, you may request access, correction, erasure, restriction or portability of your information. You may object to processing based on legitimate interests and to direct marketing. You can withdraw consent for future consent-based processing without affecting earlier lawful processing.

Email info@aimvault.org to exercise a right. We may need proportionate information to confirm your identity, and will respond within the applicable legal timeframe. You may complain to the UK Information Commissioner’s Office at ico.org.uk or to the relevant authority where you live.

8. Automated functions and age restrictions

Orders, balances, case results and abuse checks involve automated functions. Contact support if you believe a result or account action is incorrect. The service is intended for adults aged 18 or over. If you believe a child has provided information through an account, contact us so we can investigate and take appropriate action.

9. Cookies, links and changes

Use the Privacy choices control to review optional cookie categories. See our Cookie Policy and Terms & Conditions for related information. This notice applies to AIMVAULT; linked websites have their own practices. We will update this page when our processing changes and identify the latest revision date.