Privacy notice

What this notice covers

This notice explains what the operator of Knifeless (knifeless.gg) processes when you use the site. Using the site needs no account; signing in with Steam is optional. Knifeless shows no ads, and analytics run only as your consent choice allows.

Your IP address

Every request reaches our server through Cloudflare, the network in front of it, and carries your IP address. Our server uses it to enforce rate limits, counting requests in memory for the current minute.

When you sign in with Steam or claim the daily case, we store a salted hash of the address, not the address itself, to spot several accounts playing from one connection on the leaderboard. These hashes are deleted after 30 days.

Your simulator inventory

When you use the simulator, the site sets one cookie holding a random device token. It links your simulated opens and inventory to your browser. We store only a hash of the token, together with those simulated opens.

An inventory with no activity for 90 days is deleted, together with its token hash.

If you sign in with Steam

Signing in is optional. Steam confirms your account to us, and we keep only your Steam ID, your Steam display name, whether your profile is public and when your Steam account was created, which the leaderboard's eligibility rules need.

A session cookie keeps you signed in for up to 30 days. You can sign out at any time, and you can delete your account from the site, which removes those Steam fields, your sessions, your leaderboard entries, your share pages and the IP hashes tied to your account. Your simulated inventory stays with your browser.

Analytics and your consent

Knifeless uses Google Analytics 4 to count visits and see which pages are used. In the EEA, the UK, Switzerland, Turkey and Brazil, and wherever your location is unknown, it does not load until you choose Accept on the consent banner. Elsewhere it loads at once with every consent signal denied: until you choose, it sets no cookies and sends Google only cookieless measurement pings. It never uses advertising signals.

We keep a record of your choice (the policy version, Accept or Reject, and whether you were in a region that asks first) under a random id, with no IP address or account. If you choose Reject, analytics stop at once on every page of the site you have open, other tabs included, and while your choice is stored no page requests anything from Google, in any region. A Reject takes effect in your browser even if its record cannot be saved. You can change your choice at any time from the footer link.

Why we process it

Rate limiting and the IP hashes protect the site and the leaderboard from abuse, which is our legitimate interest. The device token, the inventory and a Steam sign-in are needed to provide what you choose to use. Analytics run on your consent, or with every signal denied until you give it.

Who else handles it

Cloudflare, which carries and protects the site's traffic, and our hosting provider OVHcloud process requests on our behalf. Steam (Valve) confirms a sign-in when you choose one. Google processes analytics data as your consent allows. Item images are fetched from Steam by our server, so your browser does not contact Steam through our pages.

We do not sell your data or share it for marketing.

Your rights

Depending on where you live, for example under the GDPR, the UK GDPR, KVKK or the LGPD, you can ask to access or erase data about you, object to its processing, and complain to your data protection authority.

Deleting the site's cookie in your browser detaches your simulated inventory from you at once; the server then deletes it after the inactivity period above.