Privacy Policy

Last updated: 13 October 2026

CDKeyCheap compares PC game prices and does not take payment or offer user accounts. We use server logs and browser preferences to operate the site, and integrate Google AdSense for advertising. This policy explains those uses and the third parties involved.

1. Who we are

CDKeyCheap (“we”, “us”) operates the website at cdkeycheap.com. For questions about this policy or about your data, contact us via the contact page.

2. What we collect

2.1 Server logs

Like essentially every web server, ours records a line for each request it serves. That line contains your IP address, the date and time, the page requested, the HTTP status returned, the size of the response, the referring page if your browser sent one, and your browser user-agent string.

We use these logs only to keep the site running and secure — diagnosing errors, understanding load, and identifying abusive traffic such as scrapers and vulnerability scanners. The lawful basis for this processing is our legitimate interest in operating a functioning, secure website. Logs are rotated and deleted automatically after 14 days.

2.2 Local storage in your browser

We store your theme preference (ckc-theme), grid/list view preference (ckc-view), selected display currency (ckc-currency), cached public reference rates (ckc-rates), and games you choose to save (ckc-saved) in your browser. There is no account or server-side wishlist. When you open Saved games, the game IDs are sent to our API to retrieve current prices; those request URLs can appear in server logs. Clearing site data removes your preferences and saved list.

2.3 What we do not collect

• No accounts, so no names, passwords or profiles.
• No payment information of any kind — we never take payment.
• We do not run a separate analytics service such as Google Analytics or the Meta pixel. Google advertising includes its own measurement, described below.
• We do not create account-based customer profiles. Google may use advertising identifiers and other information as described below.
• Our application preferences use local storage. Google advertising may use cookies and other identifiers; see our cookie policy.
• No email signup form. Email alerts are not currently available.

3. Third parties

Google AdSense

Our pages include Google AdSense code. When your browser loads it, Google receives information such as your IP address, browser details and the page you are visiting. When ads are served, Google and its advertising partners may use cookies or other identifiers for ad delivery, fraud prevention, measurement and, where permitted and consented to, personalized advertising.

Google may personalize advertising using visits to this and other websites. Where Google displays a consent message, use its controls to make or change your choices. You can also manage personalized advertising through Google My Ad Center and read how Google uses information from sites that use its services and Google's privacy policy.

Ad availability depends on Google's approval, your choices and regional requirements. Adding the AdSense code does not mean an ad will appear on every visit.

Game information and store links

Your browser loads game cover images and screenshots directly from Valve content delivery network hosts (akamai.steamstatic.com). To serve those images, that CDN necessarily receives your IP address and user-agent. We have no control over and no access to that processing; it is governed by Valve's privacy policy.

When you click through to a storefront you leave our site, and that store's own privacy policy applies from that point onward.

Retailer offers provided by CheapShark first pass through its deal redirect. CheapShark may receive your IP address, browser details and referral, and may use affiliate tracking under its own privacy policy. CDKeyCheap does not receive payment information from that transaction.

Our server is hosted with a commercial hosting provider, which processes server logs on our behalf as a data processor.

4. Where data is processed

Our server is located in the United States. If you are in the UK, EU or EEA, server-log data is therefore processed outside your home jurisdiction. Google and the other providers described above may process information in additional countries under their own privacy policies.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, and to lodge a complaint with your data protection authority. Because we hold no account data, in practice the only personal data we could hold about you is an IP address in a server log less than 14 days old.

To make a request, contact us via the contact page. Please tell us the approximate date and time you visited so we can locate the relevant log entries; without that we may be unable to identify your data at all.

6. Children

This site is not directed at children under 13, and we do not knowingly collect personal data from them.

7. Security

The site is served exclusively over HTTPS with a valid TLS certificate, and plain HTTP requests are redirected to HTTPS. Because we hold no accounts and no payment data, the impact of any compromise on you personally is limited by design.

8. Changes to this policy

If we change what we collect — for example when we launch email deal alerts — we will update this page and change the date above before the new processing begins.