Privacy policy
1. General
- 1.1This policy says which data Lunacy Market stores, why, and where to write about it.
- 1.2The Russian text leads the English translation. A new edition is published on this page. The update date sits at the bottom.
- 1.3The site does not send advertising mail. There is no separate marketing consent, and sign-in does not require one. The Yandex Metrica counter (Yandex LLC) is added only after consent to analytics. There is no Google Analytics.
2. What is stored
- 2.1From Steam at sign-in: SteamID, name and avatar. The person can replace the name and avatar in settings: the site shows what is set now. The name is 2 to 32 characters, without the signs < and >. The avatar is a PNG, JPEG or WebP up to 5 MB, and a larger file is compressed: it is shown in the header and on the public page. Until the name or avatar is replaced in settings, signing in with the same Steam may fill them in from Steam. The person supplies their own trade URL. Steam accounts linked to the profile are stored too.
- 2.2The site stores listings, deals, balance ledger entries, deposit and withdrawal requests, transfers between people, an invite code, the watchlist, notifications, reviews, messages, support tickets and an administrator action log.
- 2.3If the person turns on the site sign-in code, the site stores it. That is not a Steam Guard code. If the item goes to a friend, the deal stores the recipient’s trade URL.
3. What is not stored
- 3.1A Steam password, Steam Guard codes and a user’s Steam API key are never asked for and are not stored.
- 3.2The top-up form does not collect a card number, a bank account or a crypto-wallet address. Sign-in does not ask for an email or a phone number. A withdrawal request stores the text of where to send the money, and the person can write a phone number there. The form does not ask for a full card number, a passport, a selfie or a photo of the card.
4. Why the data is needed
- 4.1To sign in, show a listing, run a deal, keep the balance and answer support.
- 4.2To limit actions that repeat too fast.
5. Who can see the data
- 5.1The public seller page shows the name, avatar, registration date and when they were last seen: “online” if they were seen in the last five minutes, otherwise the time of the last visit. It also shows the number of sales, purchases, cancels and refunds, the delivery share, active listings, open buy orders, the average score and reviews.
- 5.2If an address name is set, the public page opens as /profile/name. The current numbered address and the three previous names lead to it. A number from a joined profile does not. Older names do not stay with the profile.
- 5.3The Reviews page is open to everyone. It shows the author’s name, the seller’s name, the item, the score, the time and the text, if there is any, and the administrator’s reply. Email and balance are not there.
- 5.4Balance, payout details, messages and the full SteamID are not published on that page. A message thread is visible to its participants and to the staff member who replies. The watchlist is visible only to its owner. The item page shows only the count, without names. A notification is visible only to the person it was sent to. The notifications list in the account shows up to 50 of the latest ones. The site does not send an email about the deal. The deal page is visible to its buyer and seller. A staff member sees the deal in the site desk. On that page both see the names. The seller sees the trade URL the item should go to: the buyer’s or the friend’s. The buyer sees the trade-offer link if the seller saved one. An item’s history shows up to 20 completed sales: the number, time and price, without names. The sales feed shows up to 16 completed sales: the item, price and time, without names and SteamIDs, and it may show the number of completed sales. An open buy order on the item page shows the name and the price. The History page in the wallet is visible only to its owner.
- 5.5An administrator sees deals, ledger entries, requests and tickets in order to pay out, refund and reply.
7. Other services
- 7.1The request address is used to limit how often actions can be repeated. Country from that address chooses the language until the person presses RU or EN.
- 7.2Sign-in goes through Steam, so Valve processes part of the data.
- 7.3If the cashier is enabled, the payment happens on the payment service’s side. The card is entered there, not on Lunacy Market.
8. How long it is kept
- 8.1Account data stays while the account exists.
- 8.2A deal, a ledger entry and a support ticket stay while they are needed for the deal, a dispute and the books.
- 8.3An Inventory value calculation is not written into the account. A later request for the same profile may reuse a recent calculation, for at most 12 hours, and then the inventory is not read again. The token from a trade URL is not saved on that page.
9. Asking about your data
- 9.1Write to info@lunacy.market and name the Steam account you signed in with.
- 9.2You can ask what is stored and ask to correct or delete what the site can do without.
Updated 29 October 2026