Imprint
Statutory provider information pursuant to § 5 DDG and § 18 MStV — combined into a single continuous legal disclosure.
April 23, 2026
The following statutory information is published in fulfilment of the obligations imposed on commercial service providers by the German Digital Services Act (Digitale-Dienste-Gesetz, DDG), in particular § 5 DDG, as well as the parallel obligations arising from the German Interstate Media Treaty (Medienstaatsvertrag, MStV) and the German Value Added Tax Act (Umsatzsteuergesetz, UStG). It is structured as a continuous narrative rather than a tabular layout because the underlying statutes themselves do not prescribe any particular visual format; what is required by case law is that the mandatory items are clearly readable, complete, permanently available, and reachable from every page of the offering through no more than two clicks — all of which is the case here. The information below is therefore not intended as advertising material, marketing copy, corporate self-presentation, or contact-page substitute. Visitors looking for general support, sales enquiries, or partnership discussions are kindly referred to the dedicated contact channels described elsewhere on this website. The text in this document is purely declaratory and is updated whenever statutory changes or factual changes to the disclosed details require it.
Readers are reminded that the language of statutory disclosure under German law is German, and the German wording — accessible via the EN/DE language switcher at the top of this page — is the legally authoritative version. The English rendering offered here is provided for accessibility purposes only; in the unlikely event of a deviation between the two versions, the German text prevails. References to specific paragraphs, sections, or articles of German law throughout this Imprint are made under the version of those laws in force at the date of last update shown above; subsequent legislative amendments are taken into account upon the next regular review of this document. For the avoidance of doubt, none of the statements contained in this Imprint constitute a legally binding offer to enter into individual contractual relationships, nor do they constitute investment, tax, or legal advice; they merely satisfy the statutory obligation to disclose certain provider details. Any contractual relationship between the operator and individual users of the service is exclusively governed by the General Terms of Service published separately on this website.
The remainder of this document is organised loosely along the categories suggested by § 5 DDG (provider identification, representation, electronic and telephonic contact, register entry, VAT identification, responsible person for editorial content under § 18 MStV) followed by additional sections that deal with online dispute resolution, content liability, link liability, and copyright — all of which are customary in German imprints and are reproduced here in standard wording.
Statutory provider details
The website reachable under the domain steamwebapi.com — including any subdomains and any directly associated tooling such as developer dashboards, account management portals, billing pages, and the documentation environment — is operated, in the sense of § 5 (1) DDG, by Sellrock UG (haftungsbeschränkt), a German Unternehmergesellschaft (haftungsbeschränkt) with limited liability constituted under the laws of the Federal Republic of Germany and seated at Kölner Str. 43a, 90425 Nürnberg, Deutschland, where the company also maintains its place of effective management for both fiscal and corporate-governance purposes. The company is registered in the commercial register (Handelsregister) kept by the Local Court of Nürnberg (Amtsgericht Nürnberg) under the registration number HRB 44731 and may be addressed in writing under the address indicated above; service of process under § 130 ZPO and § 178 ZPO may equally be effected at the same address subject to the formal requirements of those provisions.
For purposes of § 27a UStG and the underlying European VAT directives, Sellrock UG (haftungsbeschränkt) holds the German VAT identification number DE457575629, which has been issued by the German Federal Central Tax Office (Bundeszentralamt für Steuern) and is valid for the entire European single market. The same number must be quoted on commercial invoices issued by us where the underlying transaction so requires and may be quoted by recipients of such invoices for the purpose of intra-community VAT verification through the European VIES system without any prior consent on our part. Pursuant to § 35a GmbHG in conjunction with § 5a GmbHG and the general provisions on representation contained in § 35 GmbHG, the company is represented externally by its sole appointed managing director, namely Ilayda Kundakcioglu, whose authority extends to all acts of representation that are usual in the ordinary course of business of the company.
Pursuant to § 5 (1) (2) DDG, which requires service providers to disclose information allowing rapid electronic contact and direct communication, electronic correspondence may be addressed to info@sellrock.de, an email inbox monitored during regular German business hours; for matters that the sender wishes to discuss by telephone, the company can additionally be reached at +49 (0) 176 61838332 — although senders are kindly reminded that for documentation, traceability, and legally significant declarations the email channel is generally preferable, and a written record will in such cases always take precedence over verbal exchanges. Communications of a purely commercial nature, including unsolicited advertising, will not be accepted; senders of such material expressly waive any further commercial advertising directed at the addresses disclosed in this Imprint, and in case of repeated infractions the company reserves the right to take all available legal steps under §§ 7, 8 UWG.
Editorial responsibility under § 18 MStV
Inasmuch as the contents published on this website fall within the regulatory perimeter of § 18 (2) of the Interstate Media Treaty (Medienstaatsvertrag), responsibility for the editorial content is borne, in his personal capacity, by Burhan Kundakcioglu, who is reachable for editorial-correspondence purposes at the same business address as the company itself, namely Kölner Str. 43a, 90425 Nürnberg, Deutschland; this designation does not, however, alter the contractual position of Sellrock UG (haftungsbeschränkt) as the operator of the service, nor does it imply that the natural person so designated assumes any liability beyond what is mandated by § 18 MStV in conjunction with the general principles of German press and media law.
Online dispute resolution and consumer arbitration
The European Commission provides, in implementation of Regulation (EU) No 524/2013 on online dispute resolution for consumer disputes, an online platform commonly referred to as the ODR platform, which is reachable under the URL https://ec.europa.eu/consumers/odr — consumers domiciled within the European Union may, in principle, use this platform for the out-of-court resolution of disputes arising from online sales or service contracts. The operator of this website hereby informs visitors of the existence of that platform but is, pursuant to § 36 (1) (1) Verbraucherstreitbeilegungsgesetz (VSBG), under no statutory obligation to participate in dispute-resolution proceedings before a consumer arbitration board (Verbraucherschlichtungsstelle), and Sellrock UG (haftungsbeschränkt) has decided not to participate in any such proceedings on a voluntary basis either; consumers retain in any event their full statutory right of access to the ordinary German courts.
Components of the platform covered by this Imprint
For the avoidance of doubt and to assist visitors in understanding which exact functional areas of our online presence are covered by the statutory provider information given above, the offering operated under the steamwebapi.com domain consists of several interlinked but functionally distinct components, each of which is provided by the same operator and falls under the same provider identification. These components include, without being limited to, the public-facing marketing pages and feature presentation; the publicly accessible product documentation environment, including reference material for individual API endpoints, integration guides, and code examples in various programming languages; the authenticated customer dashboard through which subscribers manage their accounts, view current subscription status, regenerate or revoke access credentials, inspect their request history, and configure usage-related options; the billing portal where invoices, payment methods, and subscription state can be reviewed and adjusted; and the actual programmatic interfaces (the "API"), exposed under the api.steamwebapi.com hostname, through which automated client systems retrieve, process, and submit data in the manner described in our technical documentation. All of these components are operated as a single coherent service by the entity disclosed above, even though they may from time to time be hosted on logically or geographically separated infrastructure for reasons of redundancy, latency, or capacity planning.
Technical nature of the platform
From a technical standpoint the service is implemented as a stateless HTTP-based application programming interface following commonly accepted REST and RESTful design principles, returning structured data in JSON format under standard HTTP status semantics; authentication of human users for purposes of dashboard access is performed via the OpenID 2.0 protocol provided by Valve Corporation under the steamcommunity.com identity endpoint, while authentication of programmatic clients takes place through bearer-style API keys generated within the customer dashboard and transmitted as part of the HTTP request — typically as a query parameter or as part of a header, depending on the endpoint. The supporting infrastructure runs on cloud-hosted virtual machines and managed database clusters located within the European Union, behind a global content-delivery network that performs edge-level caching, TLS termination, basic protocol filtering, and abuse-prevention at the network layer. Aggregation, transformation, and persistence pipelines internal to the service are operated as containerised workloads orchestrated through industry-standard container schedulers; the corresponding observability stack collects pseudonymised telemetry for the purpose of operational diagnostics. None of the technical details given in this paragraph confer rights upon visitors, customers, or third parties; they are stated here for transparency reasons only and may be adjusted at any time without prior notice as part of the ordinary technical evolution of the platform.
Developer-facing interfaces and API key handling
A non-trivial part of the offering is directed at professional software developers, technical decision-makers, and operators of third-party online services who wish to integrate Steam-related data into their own products. For this audience, the operator provides, in addition to the user-oriented dashboard and the marketing site, an extensive developer-facing surface consisting of machine-readable API endpoints, dedicated documentation, code samples, and SDK packages published in a number of widely used programming ecosystems. Access to the productive API endpoints is governed by individually issued API keys which serve, simultaneously, as authentication factor, identity binding, and quota allocation device; each API key is contractually assigned to exactly one customer account, must be kept confidential, and may not be transferred, shared, leased, sold, or otherwise made available to unrelated third parties without prior written consent of the operator. Misuse of API keys, including but not limited to unauthorised redistribution, exceeding contractually agreed throughput, or evasion of contractually agreed scope restrictions, may result in the immediate suspension of the affected key, termination of the associated account, and — depending on the severity of the conduct — appropriate contractual or legal measures; the corresponding rules are set out in detail in our separately published Terms of Service.
Automated processing and decisioning systems
In line with the nature of a high-traffic API service that is exposed to the public Internet around the clock, the operator employs a number of automated systems whose purpose is to ensure the availability, integrity, and security of the platform on the one hand, and the proper enforcement of contractual and statutory limits on the other. These systems include, in particular, request rate-limiters operating at multiple layers of the technology stack, anomaly-detection components that observe traffic patterns and flag deviations from established baselines, fraud-prevention heuristics in the context of subscription sign-up and payment, automated content moderation for parts of the service that accept user-generated input, and credential rotation safeguards that invalidate API keys upon detection of indicators of compromise. Decisions made by these systems are generally intended to be technical and operational in nature (such as transient request rejections, throttling, or short-term key invalidation) rather than decisions producing legal effects or similarly significantly affecting individuals; where a customer believes an automated measure has been taken in error, the matter can be reviewed by a human representative upon written request directed to the contact addresses given above.
International accessibility of the platform
The platform is, by its nature, accessible from anywhere in the world that is not subject to a network-level restriction imposed by national authorities, and a substantial proportion of the operator's customer base is in fact located outside the Federal Republic of Germany — both within the broader European Union and in third countries. Notwithstanding this international reach, the operator is incorporated, registered, and effectively managed exclusively under German law, and the entirety of the contractual, fiscal, and corporate-governance framework applicable to the service is therefore that of the Federal Republic of Germany, supplemented by directly applicable European Union law where relevant. International customers are advised that the choice of German law as governing law of the contract — as further specified in the Terms of Service — does not deprive consumers domiciled in another Member State of the European Union of the protection afforded to them by the mandatory consumer-protection provisions of the law of their country of habitual residence pursuant to Art. 6 Rome I Regulation. Visitors located in countries the laws of which would, on a self-executing basis, prohibit or restrict the use of services such as the one offered here are kindly asked to refrain from accessing the platform; the operator does not direct its services at jurisdictions where the offering would not be legally permissible.
Communication channels and response expectations
For routine product enquiries, technical questions about the API, integration support, and similar everyday matters, customers and prospective customers are encouraged to use the contact options described in the dedicated Contact section of this website, which include an email channel and a community-style chat platform monitored by the operator's team. For matters of a strictly legal, regulatory, or formal-corporate nature — such as service of process, formal complaints, requests under the General Data Protection Regulation, requests for information under § 5 DDG, takedown notices, or correspondence with regulatory authorities — the addresses given in this Imprint are the appropriate point of contact. Senders are kindly asked to mark such correspondence in a way that allows quick identification of its formal character (for example by indicating "Legal", "Datenschutz", "DSGVO", "Abuse", or a comparable subject prefix in the email subject line). The operator endeavours to acknowledge receipt of formal correspondence within a reasonable time given the nature of the request and the available staffing, without however assuming any contractually or statutorily binding response-time commitment beyond what is specifically prescribed by applicable law (such as the response-time obligations under Art. 12 (3) GDPR for data-subject requests).
Availability and admissibility of electronic communication
The operator expressly opens up the channel of electronic communication via email for the conduct of all formal correspondence connected with the offering, with the consequence that emails directed to the contact addresses disclosed in this Imprint are received in textual form within the meaning of § 126b German Civil Code (Bürgerliches Gesetzbuch, BGB), and statements transmitted via that channel may produce legal effects to the extent that the underlying matter does not require a stricter form (such as the notarised written form or the qualified electronic signature within the meaning of the eIDAS Regulation). Senders are reminded that ordinary email is not by itself a confidential channel; senders wishing to transmit particularly sensitive information by electronic means are encouraged to do so using end-to-end encrypted channels or, where appropriate, postal mail. The operator processes incoming emails on systems located within the European Union and applies industry-standard security measures to those systems; further details on the processing of personal data contained in such email correspondence can be found in the separately published Privacy Policy.
Relationship to other legal documents on this website
This Imprint is one of several legal documents made available on this website. It is, by its nature and pursuant to the underlying statutes, purely informational and declaratory; it does not create any contractual relationship between the operator and any visitor, customer, or third party, nor does it constitute, supplement, or amend any such relationship. The contractual relationship between the operator and individual users of the service is governed exclusively by the General Terms of Service ("AGB", "Terms of Service" or "ToS"), as supplemented by the Privacy Policy, the Cookie Policy, the Refund Policy, and any further special conditions explicitly referenced therein, all of which are published on this website under the corresponding /legal sub-paths. In the event of any apparent contradiction between this Imprint and any of the contractual documents listed above, the contractual documents shall prevail in their respective scope of application; this Imprint shall in such cases be read in light of the contractual documents and not the other way around. Visitors are explicitly invited to review all of the linked documents prior to entering into any contractual relationship with the operator.
Security reports and responsible disclosure
The operator takes the security and integrity of its platform seriously and welcomes good-faith reports of suspected security vulnerabilities, configuration weaknesses, or other defects that may put the safety of customer data, the availability of the service, or the security of the wider Internet at risk. Reports may be submitted through the contact addresses disclosed in this Imprint with the subject line clearly indicating the security-related nature of the report (for example by including the word "Security" or "Vulnerability"); pending implementation of a dedicated security mailbox, the general info@ address is the appropriate point of contact. The operator does not generally intend to pursue legal action against good-faith security research carried out by reporters who act in good faith, who refrain from data exfiltration beyond what is strictly necessary to demonstrate the existence of an issue, and who provide a reasonable opportunity to remediate before any public disclosure. The operator further reserves the right to publicly thank reporters for valid findings, subject to the reporter's prior consent, but does not, as a matter of policy, operate a paid bug-bounty programme.
Abuse and infringement notices
Notices alleging that the platform, or content accessible through it, infringes third-party rights — including, in particular, copyright, trademark, personality, or related rights — should be directed to the contact addresses given in this Imprint with a clear subject indication ("Abuse", "Infringement", "Copyright", or comparable). To enable swift handling, such notices should, as a minimum, identify the rights-holder or its authorised representative; identify with reasonable specificity the allegedly infringed work or right; identify with reasonable specificity the location of the allegedly infringing content within the platform; contain a statement that the rights-holder believes in good faith that the use complained of is not authorised; contain a statement, made under penalty of perjury where applicable, that the information provided is accurate; and provide complete contact details for follow-up correspondence. Although the operator is not subject to the United States Digital Millennium Copyright Act ("DMCA") as a matter of statutory necessity, the structural elements customary in DMCA notices are accepted in lieu of bespoke German notice formats and will be treated as a substantial notification under §§ 8 to 10 DDG and § 7 (2) DDG. Counter-notices and pushback against erroneous or abusive infringement notifications are equally welcome and will be evaluated on the merits.
Third-party names and trademarks
The platform necessarily references a number of third-party names and trademarks in the course of describing its functional scope, including without limitation the names "Steam", "Steam Community", "Steamworks", "Counter-Strike", "CS2", "Counter-Strike 2", "CS:GO", "Dota 2", "Team Fortress 2", "Rust", and the corresponding logos, all of which are trademarks or registered trademarks of Valve Corporation, Facepunch Studios, or other respective rights-holders, and the use of which on this website occurs strictly in a descriptive nominative-fair-use sense. The operator is an entirely independent commercial undertaking and is in no way affiliated with, endorsed by, sponsored by, or otherwise institutionally connected to Valve Corporation, the Steam platform itself, the publishers or developers of any of the games whose data is processed via the service, or any other rights-holder mentioned in passing. The use of third-party trademarks by the operator does not, and is not intended to, suggest such an affiliation, and any contrary impression is expressly disclaimed. Holders of trademarks that believe their rights are not properly observed in this respect are invited to use the abuse-notice channel described in the preceding section.
Liability for content
The contents of our pages have been created with the greatest possible care. However, we cannot guarantee the accuracy, completeness or timeliness of the content. As a service provider, we are responsible for our own content on these pages in accordance with § 7 (1) DDG and general laws.
Pursuant to §§ 8 to 10 DDG, however, we as a service provider are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.
Obligations to remove or block the use of information under general laws remain unaffected. However, liability in this regard is only possible from the point in time at which knowledge of a specific legal violation becomes known. Upon becoming aware of corresponding legal violations, we will remove this content immediately.
Liability for links
Our offer contains links to external websites of third parties over whose content we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the linked pages is always responsible for their content.
The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognisable at the time of linking.
However, permanent monitoring of the contents of the linked pages is not reasonable without concrete indications of a legal violation. Upon becoming aware of legal violations, we will remove such links immediately.
Copyright
The contents and works on these pages created by the site operators are subject to German copyright law. The duplication, processing, distribution and any kind of exploitation outside the limits of copyright law require the written consent of the respective author or creator.
Downloads and copies of this site are only permitted for private, non-commercial use.
Insofar as the content on this site was not created by the operator, the copyrights of third parties are observed. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please inform us accordingly. Upon becoming aware of legal violations, we will remove such content immediately.