Safe by design, at every step.
Skins, balances and personal data deserve real care. Here is how SkinsFlow protects merchants, players and every dollar that moves through it.
Only you get in.
Two-factor sign-in
Add an authenticator app to your account. Our staff cannot sign in without one, and every payout request asks for a fresh code.
Secrets nobody can read
Passwords and API keys are stored in a form that cannot be read back, not even by us.
Bot checks at the door
Sign-in and sign-up forms are protected against bots and password guessing.
Money leaves only when it should.
A person checks every payout
Every withdrawal, for businesses and players alike, is reviewed by our team before it is sent.
Payout details locked away
Bank, PayPal, Revolut and wallet details are encrypted before they are stored. We only ever show the last few characters.
New details, new checks
Adding a new payout destination needs a fresh two-factor code, and the business owner gets an email about it.
Every cent on record
Each balance change is its own entry, so every number can be traced back to the trade or payout behind it.
Built to protect players, too.
Sign in on Steam
You sign in on Steam's own page. We never see your Steam password.
A code for every withdrawal
Each withdrawal is confirmed with a one-time code sent to the email address you confirmed.
Destinations you confirmed
A new payout destination only works after you confirm it from your inbox.
Items go to you
Skins are only sent to the Steam account you signed in with.
Trades settle before money moves.
Trade Protection respected
Steam can hold traded items for up to 7 days. A protected payment is credited when the hold ends, and a player sale is never paid out before the trade is final.
Every step tracked
Merchants see each protected payment in their dashboard and choose whether to trust a customer early.
Real offers only
Every payment page shows who will send the trade offer, so customers know which offer to accept.
Safe connections to your shop.
Signed notifications
Every payment update we send to your shop carries a signature, so your site knows it really came from us.
Test mode on its own
Test mode has its own keys and its own balance, so trying things out never touches real money.
Keys under your control
Choose which servers may use your keys, and replace a key with one click whenever you need to.
99% uptime promise
We aim for at least 99% availability every month for checkout, the dashboard and the API. Our status page shows the live state.
Every business is verified.
Verified before going live
Businesses and the people behind them are verified before they can take payments. It is free.
Sanctions screening
We check against sanctions lists and do not serve high-risk or sanctioned countries.
Clear rules for everyone
Our acceptable use rules apply to every merchant and are enforced.
Handled with care.
- Every page and every connection uses HTTPS.
- Sensitive details are encrypted where they are stored.
- Staff see only what their role needs, and every look at verification documents is logged.
- We never sell personal data and never use it for advertising.
Found a weakness? Tell us.
Email [email protected] with the steps to reproduce it. Give us time to fix it before telling anyone else, and never access data that is not yours. We answer every report.