BULKA13

Security

Account and trade security

Impersonation and lookalike destinations are common marketplace risks. This page lists what this website never asks for and what to check before accepting any trade offer.

Steam credentials should only be entered on official Steam services. This informational website does not need them.

What we never ask for

Your Steam password

BULKA13 does not provide account access or transaction services. Nobody from BULKA13 will ask for it in any email or on any page.

Steam Guard or recovery codes

We never ask for a Steam Guard code, a mobile confirmation or a recovery code. These exist to protect your account from exactly this kind of request.

Session cookies or API keys

We do not ask you to paste a session cookie, an API key or an authentication token, and we never ask you to install anything.

Remote access to your device

Support is by email only. We will not ask to control your computer, screen-share or run commands on your behalf.

Check the domain before you type anything

The domain used by this website is bulka13.com, over HTTPS. Look at the address bar before entering anything into a form: an extra word, different ending or swapped character can identify a lookalike destination.

Email from us is sent only from [email protected]. If you receive a message that appears to come from us on another address, treat it as unrelated to this service and report it to that address.

Check the trade offer itself

  • Open the offer inside Steam. Go to your own trade offers in the Steam client or on the Steam website instead of following a link from an email or a chat message.
  • Read both sides of the offer. Confirm every item that would leave your inventory and every item that would arrive, including wear, pattern and any stickers.
  • Compare with the marketplace terms. The offer must match the listing and transaction you selected. If it differs in any way, decline it.
  • Do not confirm unknown operations. If you receive an offer you did not expect, or a confirmation request you did not start, decline it and write to us.
  • Take your time. Unexpected urgency is a warning sign. Stop and verify the destination and offer independently.

How we protect the data you send

  • The site is served over HTTPS, with HTTP Strict Transport Security enabled.
  • Forms are protected by a signed anti-forgery token, server-side validation, length limits and rate limiting.
  • Contact messages are stored in a protected application directory, with access denied at the server level.
  • The site loads no third-party scripts, fonts or trackers, so the data you enter is never exposed to another provider.
  • The only cookie used is a strictly necessary session cookie, set when a form is submitted and never for tracking.

We describe these measures rather than claiming that any system is perfectly secure. If you believe you have found a security problem on this site, please report it to [email protected] and we will look into it.

If something has already gone wrong

If you think your Steam account has been compromised, act through official Steam services first: change your password, revoke other sessions and contact Steam Support. BULKA13 cannot access, recover or modify a Steam account.