Privacy policy

The personal data controller (operator) is the owner of the service; the contact for enquiries on personal data is support@impmarket.com.

All enquiries on personal data go to support@impmarket.com. Full details and working hours are on the contacts page.

Email address - it is also your login. It is needed for signing in, confirming registration and password recovery.

Password is stored as an irreversible hash (Argon2id). The original password cannot be recovered from it - if you lose it, the password is reset, not sent to you.

Session data - the IP address and browser from which a sign-in was made. It is needed so that you can see sign-ins that are not yours and end them.

History of operations, rentals and seats - top-ups, charges, rentals placed, seats on shared accounts, listings for the sale of seats and the deals made on them (price, the service's fee, the credit to the seller). This is financial history, and it is also the basis for refunds and disputes.

Records of consents - what exactly you accepted at registration, when, from which IP address and which browser, and with which version of the document. This is evidence that the processing is lawful: without it the consent exists, but there is nothing to confirm it with.

Enquiries about a rental or a seat - the text of your messages to a staff member and of their replies.

Shop order data - the details you provide for crediting a purchase (Steam login, profile link, in-game identifier) and the fulfilment of the order (codes, eSIM data). In the database they are stored in encrypted form; the fulfilment is available only to the owner of the order.

Performance of a contract (Art. 6, part 1, clause 5 of Federal Law No. 152-FZ "On Personal Data") - everything without which the paid service cannot be provided: the account, rentals, seats, payments, issuing access.

Your consent (Art. 6, part 1, clause 1) - it is given at registration by a separate tick and relates to the processing of data for the purposes named in this policy.

Requirements of the law (Art. 6, part 1, clause 2) - keeping records of settlements for the periods set by tax and accounting legislation.

Bank card data does not reach the service: payment takes place on the payment system's side, and only the fact of the payment and its amount come back to us.

We do not collect data about your gaming activity, do not track your behaviour on third-party sites and do not use advertising trackers. We do not ask for a passport or date of birth: age is confirmed by a tick at registration.

We use only technical cookies - sign-in does not work without them. There are no advertising or third-party counters on the site. We count visits ourselves, without cookies: the statistics contain neither your address nor your account. That is why you will not see an "allow cookies" window here: there is nothing to allow.

All four are marked httpOnly - they cannot be read from scripts on the page - and SameSite=Lax: they are not sent to other sites.

To the payment system - the amount and the payment identifier needed to carry out the payment. To the mail service - the recipient's address and the text of the email with the confirmation code.

To the supplier of digital goods - only the crediting details you provided in the order (Steam login, profile link, in-game identifier): the order cannot be fulfilled without them. The data of your account in the service - email, password, history - is not transferred to the supplier.

Your data is not transferred to the other party of a seat resale. The buyer sees the game, the type of seat, the price and the date from which they will be able to sign in; the seller sees the price, the service's fee and the amount credited. The email and purchase history of one party are not shown to the other.

Data is not transferred or sold to third parties for other purposes, including advertising. The data of your account in the service - email, password, history - is not transferred outside Russia. The crediting details specified in the order are transferred to the supplier fulfilling the order; if such a transfer turns out to be cross-border, it is carried out under the terms of Article 12 of the Federal Law "On Personal Data".

Account data is stored for as long as the account exists and is deleted at your request - except for what the law obliges us to keep for longer.

Information on payments and financial operations is stored for five years: that is what the accounting rules require. Records of consents are stored for three years after the processing ends - this is the limitation period during which it may be necessary to confirm that the processing was lawful.

Upon achievement of the purpose of processing or upon withdrawal of consent, the data is destroyed within 30 days, unless another basis from section 3 remains for keeping it.

You may request the composition of the data stored about you, demand its correction, blocking or destruction, withdraw your consent and complain to Roskomnadzor (the federal communications supervisory authority).

The request is sent to support@impmarket.com from the address specified at registration - this is how we know that the account owner is the one making the request. The reply arrives within 30 days.

Consent is withdrawn by an email to support@impmarket.com from the address specified at registration. There is deliberately no separate form for this: withdrawal is an irreversible action, and a single click is too little for it.

After withdrawal the service stops working for you: without an account there is no one to issue console access to. Current rentals end, and the remaining internal balance is returned in a way that we will agree separately.

We record the fact of withdrawal as a new entry, and we do not erase the earlier record of consent: otherwise the confirmation that the processing was lawful before the withdrawal would disappear as well.