Home/Privacy Policy

Privacy Policy

Last updated: 30 August 2026

CDKeyCheap is a price-tracking website. We do not sell anything, we have no user accounts, and we collect as little about you as it is practical to collect. This policy explains exactly what that means.

1. Who we are

CDKeyCheap (“we”, “us”) operates the website at cdkeycheap.com. For questions about this policy or about your data, contact us via the contact page.

2. What we collect

2.1 Server logs

Like essentially every web server, ours records a line for each request it serves. That line contains your IP address, the date and time, the page requested, the HTTP status returned, the size of the response, the referring page if your browser sent one, and your browser user-agent string.

We use these logs only to keep the site running and secure — diagnosing errors, understanding load, and identifying abusive traffic such as scrapers and vulnerability scanners. The lawful basis for this processing is our legitimate interest in operating a functioning, secure website. Logs are rotated and deleted automatically after 14 days.

2.2 Local storage in your browser

We store one value in your browser local storage: your light/dark theme preference, under the key ckc-theme. It never leaves your device and is never sent to us. Clearing your browser site data removes it.

2.3 What we do not collect

3. Third parties

Your browser loads game cover images and screenshots directly from Valve content delivery network hosts (akamai.steamstatic.com). To serve those images, that CDN necessarily receives your IP address and user-agent. We have no control over and no access to that processing; it is governed by Valve's privacy policy.

When you click through to a storefront you leave our site, and that store's own privacy policy applies from that point onward.

Our server is hosted with a commercial hosting provider, which processes server logs on our behalf as a data processor.

4. Where data is processed

Our server is located in the United States. If you are in the UK, EU or EEA, the limited data described above — essentially your IP address in a short-lived server log — is therefore processed outside your home jurisdiction.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, and to lodge a complaint with your data protection authority. Because we hold no account data, in practice the only personal data we could hold about you is an IP address in a server log less than 14 days old.

To make a request, contact us via the contact page. Please tell us the approximate date and time you visited so we can locate the relevant log entries; without that we may be unable to identify your data at all.

6. Children

This site is not directed at children under 13, and we do not knowingly collect personal data from them.

7. Security

The site is served exclusively over HTTPS with a valid TLS certificate, and plain HTTP requests are redirected to HTTPS. Because we hold no accounts and no payment data, the impact of any compromise on you personally is limited by design.

8. Changes to this policy

If we change what we collect — for example when we launch email deal alerts — we will update this page and change the date above before the new processing begins.