Privacy policy
1. Controller
The controller of personal data is the operator of the website https://daro.skin (the “Website”). The Website is not live yet; full contact details of the controller will be published here before the service launches.
2. What the Website does
DaroSkin is a planned CS2 skin buyback service. It is not live: the Website has no accounts, forms, orders or payments, and it does not ask for any personal data. It only publishes information and guides.
3. Server logs and Cloudflare
When you open a page, the server and our network provider Cloudflare, Inc. (content delivery and protection against attacks) process technical data: IP address, time of the request, requested address, browser and device type. We use it only to deliver the Website and keep it secure (Art. 6(1)(f) GDPR, legitimate interest). Fonts are served from our own server, not from external font services.
4. Cookies, consent and analytics
The Website itself needs no cookies. In your browser’s local storage we save only your consent choice (key daroskin_consent, valid for 12 months), which is necessary to remember it.
Analytics tools that use cookies run only with your consent, given with “Accept” in the banner. “Reject” is just as easy and changes nothing in how the Website works. Before you decide and after you reject, their scripts are not loaded at all. Legal basis: your consent (Art. 6(1)(a) GDPR and the ePrivacy rules on storing information on your device).
- Google Analytics 4 (Google Ireland Limited) — visit statistics: pages viewed, time on page, traffic source, approximate location, device and browser type. Sets cookies
_gaand_ga_*(up to 2 years). Advertising features are off: consent applies only to analytics storage, never to ads. Data is kept in Google Analytics for up to 14 months. - Microsoft Clarity (Microsoft Corporation) — heatmaps and session recordings showing how visitors use the pages (clicks, scrolling, mouse movement). Sets cookies
_clck(up to 1 year) and_clsk(1 day). According to Microsoft, recordings are kept for 30 days and aggregated data for up to 13 months.
To change or withdraw consent, click “Cookie settings” in the footer of any page and choose “Reject”: we delete the analytics cookies and the tools stop collecting data. Withdrawing consent does not affect processing before it was withdrawn.
Our own statistics (basic level, no cookies) — we count visits and how the Website is used with our own script (/_sx/s.js): the page visited, the domain of the site you came from, the language of the page and of your browser, country (from Cloudflare), device type, scroll depth and time on page, page elements clicked (never the text you type) and clicks on links to other websites and to contact. At this level we do not use cookies and do not store the IP address: within a single day we tell visitors apart by a hash of the IP address and browser with a random salt changed daily, so visits from different days cannot be linked. The data is kept for up to 13 months on the server that runs the Website, and the basic level runs without the consent banner. Legal basis: our legitimate interest in improving the Website (Art. 6(1)(f) GDPR). You can object at any time, for example by blocking daro.skin/_sx/ in your browser.
Our own statistics with consent (extended level) — if you choose “Accept” in the banner, our statistics script (/_sx/s.js) stores two cookies of our own domain in your browser and attaches them to the same events as the basic statistics. This tells us whether you come back to the Website, how long a visit lasts and how you move through the Website. Without consent (and after you withdraw it) only the basic level described above runs.
- Cookies:
_sx_id— a random visit identifier, valid for 13 months;_sx_s— a session identifier that expires after 30 minutes of inactivity. The identifier contains none of your data and is not linked with other websites or with data from forms. - Data: the same as the basic statistics plus the visit and session identifiers, and the city and region if Cloudflare determines them from the IP address at the time of the visit. The IP address itself is not stored.
- Purpose: to see which content and traffic sources lead to return visits, and to improve the Website.
- Legal basis: Art. 6(1)(a) GDPR (consent) — also for storing the cookies on your device.
- Retention: up to 13 months, on the server that runs the Website; the data is not shared with other parties.
- Withdrawing consent: at any time — click “Cookie settings” in the footer and choose “Reject”; both cookies are deleted.
Cloudflare Web Analytics (Cloudflare, Inc.) — aggregated visit statistics without cookies: it stores nothing in your browser and does not track you across websites, so it runs without the consent banner. It records the page address, referrer, country, browser, device type and page speed metrics. Legal basis: our legitimate interest in knowing which content is read and how fast the pages load (Art. 6(1)(f) GDPR). You can object at any time, for example by blocking static.cloudflareinsights.com in your browser.
Ahrefs Web Analytics (Ahrefs Pte. Ltd., Singapore) — aggregated visit statistics without cookies: it stores no files or identifiers in your browser and does not track you across websites, so it runs without the consent banner. It records the page viewed, the referring page, approximate country, device type, operating system and browser. The IP address is used only to estimate the country and is not stored. Legal basis: our legitimate interest in knowing which content is read (Art. 6(1)(f) GDPR). You can object at any time, for example by blocking analytics.ahrefs.com in your browser.
Providers of the external tools may transfer data outside the European Economic Area (including to the USA) under GDPR mechanisms such as the EU-US Data Privacy Framework or standard contractual clauses.
5. Your rights
You have the right to access your data, rectify or erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent. You can also lodge a complaint with a data protection authority; in Poland it is the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa).
6. Changes
We will update this policy when the Website changes, in particular before the buyback service launches. The current version is always available at this address.