Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data on this website is:

Luca Oerter
Im Mediapark 10
50672 Cologne, Germany
Email: luca@rentfor7.com

2. Data We Collect

We process the following categories of personal data when you use RentFor7:

Account data: Your Steam 64-bit ID, Steam display name, and Steam avatar.
Contact data: Your email address (e.g. for giveaway entries or notifications).
Trade data: Your Steam Trade URL, which is required to deliver and return rented skins.
Payment data: Payment is processed by Stripe. We do not store your full card details — only the transaction status and amount.
Usage data: Anonymous analytics about how you interact with the website (pages visited, clicks, etc.).
Cookie data: See Section 5 below.

3. Legal Basis & Purposes

We process your data on the following legal bases:

Contract performance (Art. 6(1)(b) GDPR): To create your account, deliver rented skins via Steam trade, process payments, and manage returns.
Legal obligation (Art. 6(1)(c) GDPR): To retain invoices and transaction records for tax and accounting purposes.
Legitimate interest (Art. 6(1)(f) GDPR): To prevent fraud, enforce our terms, and improve website security and performance.
Consent (Art. 6(1)(a) GDPR): For non-essential cookies and marketing communications (e.g. giveaway notifications).

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above or as required by law. Account data is kept until you request deletion. Transaction records are retained for the legally required period (typically 10 years for tax records in Germany).

5. Cookies

We use cookies and similar technologies for the following purposes:

Essential cookies: Required for the website to function (e.g. session management, login state). These cannot be disabled.
Analytics cookies: Help us understand how visitors use the site so we can improve it. These are only set if you consent.
Preference cookies: Remember your settings (e.g. cookie consent choice, language).

You can manage or withdraw your cookie consent at any time. Most browsers also allow you to block or delete cookies in their settings. Please note that disabling all cookies may affect website functionality.

6. Payment Processing (Stripe)

Payments are processed by Stripe Payments Europe, Ltd. (Stripe). When you make a payment, your card data is transmitted directly to Stripe — we never see or store your full card number. Stripe processes your data in accordance with its own privacy policy, available at stripe.com/privacy.

7. Steam OpenID

We use Steam's OpenID authentication to let you log in with your Steam account. When you log in, Valve Corporation provides us with your Steam ID, display name, and avatar. We use this data solely to identify you and manage your rentals. Valve's privacy policy is available at store.steampowered.com/privacy.

8. Your Rights under GDPR

You have the following rights regarding your personal data:

Right of access: You can request a copy of the data we hold about you.
Right to rectification: You can ask us to correct inaccurate data.
Right to erasure: You can ask us to delete your data (subject to legal retention obligations).
Right to restrict processing: You can ask us to limit how we use your data.
Right to data portability: You can receive your data in a machine-readable format.
Right to object: You can object to processing based on legitimate interest.
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at luca@rentfor7.com. You also have the right to lodge a complaint with your local data protection authority — in Germany, the State Commissioner for Data Protection NRW (ldi.nrw.de).

9. Data Sharing

We do not sell your personal data. We share data only with:

Stripe — for payment processing.
Valve / Steam — for authentication and trade delivery.
Hosting provider — for website infrastructure.
Legal authorities — where required by law.

10. Updates to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, along with the date of the last update below.

Last updated: July 28, 2026