How sign-in works

Last updated: 2 November 2026

What Steam OpenID is

OpenID is a standard way to prove who you are to a website without giving that website your password. When you press “Sign in through Steam”, your browser goes to Steam’s own site. Steam checks your password there, then sends you back to C$GOAT with a signed note saying “this visitor is Steam account number X”.

What happens, step by step

1. You press the Steam sign-in button on C$GOAT.
2. Your browser opens a Steam page on steamcommunity.com. Check the address bar before you type anything. It should read steamcommunity.com, with the padlock shown.
3. You sign in to Steam there, if you are not already, and confirm that you want to sign in to C$GOAT.
4. Steam sends you back to C$GOAT with a signed note.
5. Our server asks Steam directly whether the note is genuine. Only if Steam says yes do we treat the Steam ID as yours.
6. We read your public profile (name, avatar, country) and, if it is public, your CS2 inventory.
7. We give your browser a random session token so you stay signed in. We keep only a hash of it, and it expires after 30 days.

What we receive

• Your Steam ID (a 17-digit number).
• Your public profile name, avatar and country.
• Your public CS2 inventory, if your inventory is set to public.

What we never receive

• Your Steam password, or your Steam Guard codes. These are typed only on steamcommunity.com.
• Your payment details, Steam wallet balance or purchase history.
• The ability to trade, sell, buy or move your items. C$GOAT cannot do any of these.

If a page that claims to be C$GOAT asks for your Steam password on any address other than steamcommunity.com, close it and tell us at [email protected].

Revoking access

Steam OpenID does not give us a standing key to your account, so there is nothing to switch off on Steam’s side. Each time you sign in, Steam confirms it again. To stop C$GOAT using your data:

• Sign out in the app, which ends the session on that device.
• Delete your account from Settings, using “Delete my account”, to remove what we store.
• Set your inventory to private (below), so we can no longer read it.

If you ever think your Steam account is at risk, change your Steam password and review your devices in the Steam app. That is a matter for Steam, not something C$GOAT can fix.

Making your inventory public or private

C$GOAT can only value an inventory that is public. You control this in Steam, not on our site:

1. Open your Steam privacy settings (steamcommunity.com, Edit Profile, Privacy Settings).
2. Set “Inventory” to Public so we can read it, or to Private or Friends Only to stop us reading it.
3. Save, then refresh C$GOAT. Steam can take a few minutes to apply the change.

Our public pages never show your inventory to other people. See the privacy policy for the full detail.