Skinebi Connect — Privacy Policy

What the extension reads

1. The steamLoginSecure cookie set by steamcommunity.com. This is a session token Steam issues to your browser. The extension reads it in two situations: when Steam rotates the cookie (typically every ~24 hours), and on a 30-minute periodic timer in case a rotation event was missed.
2. A Skinebi extension token you paste into the popup once. You generate this token on your Skinebi profile page; it is bearer-equivalent to “permission to update this user’s stored Steam session.” The extension stores it in chrome.storage.local.

The extension does NOT read any other cookies, browsing history, form contents, or page contents. It does not run content scripts.

What the extension sends

The extension sends a single HTTPS request to https://skinebi.ge/steam-extension/sync containing:

• The current steamLoginSecure cookie value.
• The Skinebi extension token in the X-Skinebi-Extension-Token header.

Nothing else is transmitted. No analytics, no telemetry, no third-party services.

How Skinebi uses the data

Skinebi receives the steamLoginSecure value and stores it encrypted (AES-256-GCM) against your Skinebi user account. It is used solely to keep your marketplace listings functional — without an active Steam session, Skinebi cannot help observe Steam trade outcomes for items you have listed for sale.

Skinebi never sells, rents, or shares this value with any third party.

Retention and deletion

The value is retained until one of the following happens:

• You revoke the extension token on your Skinebi profile page (the extension is then unable to send further updates).
• You delete your Skinebi account (all data is purged within 30 days).
• Steam itself rotates the cookie, at which point the previous value is overwritten with the new one.

Your control

• Disconnect at any time from the extension popup (“Disconnect” button), which removes the token from local storage.
• Revoke the token on Skinebi’s profile page; subsequent sync attempts will be rejected by the server.
• Uninstall the extension at any time.

Contact

Privacy questions: [email protected]