Legal
Privacy policy
Last updated: September 10, 2026
Calculator data
Steam sign-in takes place on steamcommunity.com. We verify your SteamID and never ask for your Steam password or Steam Guard codes. We store your SteamID, saved contracts, membership expiry, and payment trade references to provide your account features. Your login uses an essential, secure session cookie that expires after 30 days. Signing out removes the current session.
Technical information
Like most websites, the hosting provider may process basic request information such as IP address, browser type, requested page and timestamp for security, reliability and traffic measurement. The site loads fonts from Google Fonts, whose own privacy terms apply to that request.
Optional renewal offers
If you save a Steam trade link, we store it privately with your SteamID and your renewal preference. For new setups, the renewal-offer checkbox starts checked; pasting a valid trade link saves the displayed preference automatically. Uncheck it before pasting if you do not want offers. Existing opt-outs stay off. With renewal offers enabled, Breadbot may read your public TF2 inventory to find one tradable standard key and send a renewal request when prepaid access expires. You must accept the offer in Steam; there is no automatic charge. We record the saved preference and offer references to prevent duplicate requests. You can disable renewal offers or remove the saved link in your membership panel. Trade tokens are not sent to analytics. Sent offer and payment references are retained for reconciliation; removing a link does not undo completed payments.
Website analytics
We automatically count page views, trade-up loads, simulation runs, contract rolls, membership/unlock clicks, promo-code copy clicks and successful copies, and referral-link clicks. These first-party counters store daily totals by action, page, market mode and promo partner for up to 90 days. Counter requests are sent without cookies or a referrer; the counter database has no visitor IDs, IP addresses, Steam account identifiers, session histories, form contents or individual timestamps. These totals stay on our VPS and are not exported to PostHog. They cannot identify unique visitors or confirm third-party purchases. You can turn off usage analytics in “Analytics preferences”; we also honor existing declines, Global Privacy Control, Do Not Track and testing exclusions for these counts. Normal hosting/security request handling remains separate.
We use Cloudflare Web Analytics to measure aggregate visits, page views, referral sources, device information, and page performance. It does not use analytics cookies or identify individual visitors. We do not attach SteamIDs, saved contracts, or payment details to Cloudflare analytics events. Account and payment records remain separate from these traffic statistics. See Cloudflare Web Analytics documentation for details.
Optional product analytics
With your permission, we record page paths, referral domains, campaign tags, calculator actions, promo-code copy clicks and successful copies, partner referral-link clicks, and checkout milestones to understand where the site is useful or confusing. Promo events identify the partner site, not arbitrary clipboard contents, and do not tell us whether you redeemed a code or completed a third-party purchase. A random analytics identifier and preference are stored in first-party cookies for up to 90 days. Signed-in activity may be associated with a pseudonymous account identifier; your raw SteamID, trade URL, password, saved contract contents and authentication tokens are not sent to PostHog. When configured, PostHog processes these opt-in events. Session recording and automatic capture of form contents are disabled.
You can allow or decline using “Analytics preferences” at the bottom of any page, or later withdraw permission there. We respect Global Privacy Control and Do Not Track for optional browser analytics. Declining does not affect sign-in, calculators or premium. We retain local activity for 90 days. Essential login and payment milestones are recorded privately on our VPS regardless of optional analytics consent, to diagnose account and payment failures. Existing payment records may appear as historical entries, not new activity. We retain payment reconciliation records separately as described below. PostHog privacy information.
Outbound links
Links to backpack.tf, Mannco.Store, Steam and other third-party services leave this site. Those services control their own collection and use of information. Review their policies before signing in, depositing items or completing a transaction.
Saved contracts and payment records
You can delete saved contracts from your account panel. Payment references are retained to prevent a trade being credited twice and to resolve payment issues. Checkout details may be stored in your browser session so you can return after trading. To request account deletion or ask about your data, contact Breadbot, the site operator, on Steam.