01Who we are
Montuga (montuga.com) offers free tools for the Steam community, such as inventory values, item prices, portfolios, an item archive and a developer API. Montuga is based in the Netherlands and is the data controller for the personal data described in this policy. "Montuga", "we" and "us" refer to Montuga and the people who run it.
This policy applies to everyone who uses the Montuga website, API and official community channels, wherever you live. Because Montuga is based in the Netherlands, the EU General Data Protection Regulation (GDPR) applies. Questions? Email [email protected].
02What we collect
Depending on how you use Montuga, we collect:
- Steam data: Steam IDs, display names, avatars and other public profile and inventory data, which we get from Steam.
- Account data: what you add or do with your account, such as portfolios, giveaway entries, referrals and API usage.
- Payment data: your subscription details and your card brand and last four digits. Stripe handles the payment itself.
- Technical data: your IP address, browser and device type, and the pages and profiles you view.
- Messages: your contact details and what you write when you contact us.
We never get your Steam password or email address, and we don't collect sensitive data such as health information or political opinions.
03Data about other Steam users
In short: anyone can look up any public Steam profile on Montuga, so we also process data about Steam users who don't use Montuga. We only use what Steam already makes public.
When a public profile is looked up, we show its public profile and inventory and store a daily snapshot of the inventory's value, so we can show value history. High-value inventories can appear on the public leaderboard.
We do this based on our legitimate interest in offering inventory and market tools to the Steam community. The data is already public on Steam and contains no contact details.
Don't want to be included? Set your Steam inventory or profile to private, and Montuga can no longer fetch it. To remove existing value history or leaderboard entries, email us your Steam profile link. We may ask you to confirm the account is yours.
04Why we use it
The GDPR requires a legal basis for every use of personal data. These are ours:
| Purpose | Data | Legal basis |
|---|---|---|
| Providing our tools: inventory lookups, values, prices, value history and the leaderboard | Steam IDs and public Steam data | Legitimate interests |
| Your account and its features | Account data and the content you add | Agreement with you |
| Subscriptions and the developer API | Payment and API data | Agreement with you |
| Keeping payment records | Payment records | Legal obligation |
| Security, fair use and abuse prevention | Technical data and logs | Legitimate interests |
| Analytics | Cookies and usage data | Consent |
| Answering your questions | Your contact details and message | Legitimate interests |
Where we rely on legitimate interests, you can object at any time. Where we rely on consent, you can withdraw it at any time.
05What other people can see
- Leaderboard: top inventories with their public Steam profile details and inventory data, including people without a Montuga account.
- Value history: anyone who knows a Steam ID can see the value history we have for it.
- Referrals: if you use someone's referral code, they can see your Steam display name and avatar.
- Giveaways: a winner's Steam avatar may be shown, and winners are announced on our Discord.
Your portfolios, API key and subscription details are private.
08International transfers
Some of our service providers process data outside the European Economic Area, for example in the United States. In those cases we rely on safeguards recognised by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
09Keeping and deleting data
We keep personal data only as long as we need it for the purposes in this policy, or longer when the law requires it, for example for payment records.
You can delete your account at any time under Settings → Account. This deletes your account and everything linked to it, such as your portfolios, referrals, giveaway entries and API key. Some data can remain afterwards, such as security logs, payment records we're legally required to keep, and value history or leaderboard entries for your public inventory, since those come from public Steam data. Email us if you want those removed too.
Have a subscription? Cancel it first in the subscription dashboard. Deleting your account doesn't cancel it.
10Security and abuse protection
We use encrypted connections, limit access to personal data to the people who run Montuga, and never handle your card details ourselves. No system is perfectly secure, though. If a data breach puts your rights at risk, we'll report it to the relevant authority and inform you where the law requires it.
To keep Montuga available for everyone, we automatically detect abuse, such as bots or unusually high numbers of requests. Requests that exceed fair-use limits may be blocked, and we may block IP addresses, devices or Steam accounts that abuse the service. If you think you were blocked by mistake, contact us and a person will review it.
11Your rights
In short: you can see, correct, export or delete your data, and object to how we use it. It's free.
Under the GDPR you have the right to:
- Access: get a copy of the personal data we hold about you.
- Rectification: have incorrect data corrected.
- Erasure: have your data deleted.
- Restriction: ask us to pause using your data while a question or complaint is resolved.
- Portability: receive the data you gave us in a machine-readable format.
- Objection: object to any use based on legitimate interests, including the leaderboard and value history.
- Withdraw consent: at any time, for example through the cookie settings.
To use any of these rights, email [email protected]. We may ask you to confirm the Steam account is yours, and we'll reply within one month.
If you're unhappy with how we handle your data, please contact us first so we can fix it. You also have the right to complain to a data protection authority.
12If you live outside the EU
We give everyone the rights in section 11, wherever they live.
United Kingdom
You have the same rights under the UK GDPR.
United States
We don't sell your personal information or share it for targeted advertising, and we don't use sensitive personal information. Residents of California and other states with privacy laws can ask to know, correct or delete their personal information, and won't be treated differently for doing so. The categories we collect and why are described in sections 02 and 04.
Other countries
Privacy laws in countries such as Canada, Brazil and Australia give similar rights. Email us and we'll help.
13Children
Montuga is meant for people aged 18 and over, and we don't knowingly collect personal data from children. If you believe a child has created an account, contact us and we'll delete it.
14Changes to this policy
We update this policy when Montuga or the law changes. The date at the top shows the latest version. We'll announce significant changes on the site or on our Discord.
15Contact us
Email is the quickest way to reach us about anything privacy-related.
Email
[email protected]