RustyHarbor Extension — Privacy Policy

Last updated: 2026-06-22

The RustyHarbor extension bridges trades between buyers and sellers on the RustyHarbor marketplace. This policy explains exactly what it reads, what it sends, and what it will never do.

What we read from your Steam session

• Your Steam ID — so our server knows it's really you when you list a skin.
• Your Steam Session ID — Steam requires it on every trade action you take.
• Your Steam Trade URL — buyers need it to send you a trade.
• Your Steam Web API key and access token — so we can confirm the status of trades without hitting Steam's request limits. The access token is read-only: it can check trades but can never send or accept them.
• Your Rust inventory — so we can mark a listing as expired when its skin is no longer in your account.

What we do NOT read

Your Steam password, email, payment info, or Steam settings; other browser tabs; inventories for games other than Rust; which websites you visit or anything about your computer, IP, or browser identity.

How we use it

We use this information for one purpose only, to confirm and fulfill trades between buyers and sellers on RustyHarbor. That's it.

The extension cannot move, sell, or remove anything from your Steam account. Every trade offer is sent from your own Steam session, the same as if you clicked "send trade offer" yourself you stay in control. The access token we use is read-only and cannot send trades. We never have your password and can never act as you on Steam.