SCP WORKSHOP — Privacy policy

SCOPE OF THIS POLICY

This policy applies to all interactions with our website (https://scp.gg/workshop/) and our API. It describes how data is shared between SCP Workshop and selected third parties to enhance your user experience.

INFORMATION COLLECTION AND PURPOSE

Whether you’re just visiting or you’ve registered with SCP Market, we collect certain information from all users:

Visitors browse without an account.
Users have a registered account or make authenticated API calls.

[INFO 1.1] EVERY VISITOR AND USER – Upon using the platform, you consent to the collection of:

IP address: To identify your country for VAT purposes.
System Information: Shared by your browser for bug reporting and statistical analysis.
General Activity: Anonymous data on page visits, IP location (hashed), referring domains, and screen resolutions, with no tracking cookies unless consented to.

[INFO 1.2] REGISTERED USERS – Upon registration, you consent to the collection of:

Username, avatar, third-party tokens (e.g., SteamID), IP address, pseudonymized hardware/software tokens for fraud prevention, contact details, and, for EU creators or businesses, legal names. Payment information includes agent details, transaction IDs, and VAT-related data. Also, any content you provide, such as images, product details, support queries, messages, and profile descriptions.

DATA USAGE

Your data is solely used to facilitate SCP Market features, including purchase facilitation, tax determination, and as explicitly described elsewhere on our website and in this policy.

DATA SHARING

[DATA 1.1] Public Sharing: Content you post in public areas of SCP Market is publicly accessible.

[DATA 1.2] Third-party Sharing: Data sharing is context-dependent and includes:

Mandatory sharing with CloudFlare for security, with payout providers for financial transactions, and with Stripe for payment processing and fraud prevention.
Optional sharing includes Google Analytics for user analytics.

DATA RETENTION

Your data is kept as long as it's useful or as permitted by you, subject to legal obligations such as keeping payment records for ten years and retaining anonymized fraud prevention data.

YOUR RIGHTS

[RIGHT 1.1] Right to be Forgotten (Account Deletion)

At SCP Workshop, we believe in your fundamental right to privacy and control over your personal data, offering the right to be forgotten to all our users worldwide. If you decide to invoke this right, you can initiate the process by submitting a request through our help and support center on the SCP Market. For the security and privacy of all users, we will require you to provide sufficient proof of account ownership. Should we be unable to confirm that you are the rightful account owner, we reserve the right to decline the account deletion request.
Please consider the implications of exercising your right to be forgotten carefully. Once actioned, it may not be possible to re-register under the same credentials or recover any data previously associated with your account. Your data will be permanently removed from our databases, anonymized, or disassociated from any user identity, effectively erasing your digital footprint from our platform.

[RIGHT 1.2] Your Right to Access Your Data

In alignment with our commitment to transparency and user rights, particularly for our users and visitors within the European Economic Area (EEA), we uphold your right to access your personal information. You are entitled to request a copy of your personal data stored by us. It’s important to note that the personal data we hold is typically limited to non-sensitive information such as IP addresses, transaction history, and any business-related information you have shared with us.
This right enables you to receive insights into the personal information we have collected about you, ensuring our practices align with your expectations and regulatory requirements. To make a request for your personal data, please contact us through the support channels available on the SCP Market. Our team is dedicated to assisting you promptly and efficiently, ensuring you have the information you need regarding your personal data within our systems.

Version 1.0.2 – Effective date: May 7, 2024.
We comply with the CC-BY-SA License offered from SCP Foundation.