Published: 18 October 2026
Privacy policy
This policy says what CowDrop Ltd. collects on CowDrop, why, and for how long.
Using the Site is consent to this processing. If you disagree, do not sign in and do not top up.
1. Who processes data
Controller
CowDrop Ltd., 88 Queensway, Hong Kong, Company no. 3391847.
Data contact
2. What we get
We do not ask for a passport on a normal login. The set depends on what you use.
Steam
SteamID64, public nick, avatar, the login event. You paste a trade URL yourself if you want a withdrawal.
Site account
User id, role, balance, inventory, history of opens, upgrades, contracts, headbutts, bonuses and promo codes, referral code and who invited you.
Payments
Amount, display currency, status, the provider’s id. Card numbers never land on our servers — the provider takes them.
Technical
IP, user-agent, browser language, request times, socket session (online), auth cookies.
KYC (when asked)
Name, document and selfie only when a check is required. Files sit apart from the game log and are not published.
Letters to support@cowdrop.io and attachments you chose to send.
3. Why
To let you in, compute a roll, credit an item, send a withdrawal, catch fraud, answer support, meet the law, and show the UI in your language.
We do not run blast marketing lists. Mail is replies and service notices about your operations.
4. Cookies and local storage
Auth session, language, display currency and UI counters live in cookies or localStorage.
Blocking cookies breaks login. This is not a third-party ad graph.
5. Who we share with
Steam — to sign in.
The payment provider — to take a top-up.
The market and/or Steam bots — to send a skin.
Hosting, database and mail — to run the Site.
We do not sell player lists. A court, police or regulator gets only the scope of the request.
6. How long
While the account lives we keep profile, balance and history — otherwise a withdrawal dispute cannot be read.
After an account deletion (if offered) or a valid erasure request we drop what we are not required to keep for books, fraud and disputes. That tail is up to five years, or less if the law allows.
KYC files go when the check is closed and the law no longer wants a copy.
7. Your requests
You can ask what we hold, fix nick/trade URL in the account, withdraw consent by leaving the Site, and ask for erasure — write to support@cowdrop.io from the Steam in question or with the SteamID64.
We can refuse a request that is someone else’s, empty, or that would wipe a payment trail we must keep.
8. Security
Database access is limited, payments go through the provider, we never see a Steam password and we never ask for one.
No internet path is perfectly closed. Do not send Steam Guard codes or anyone’s wallet seed to support.