← apps
ForceBuy
Windows macOS Linux Web

a CS2 inventory and market ledger: what you paid, where it went, what it is worth today, for every item. every purchase and sale on the steam market, csfloat and buff163 is read and tied to its item automatically. it runs on your machine and opens in your browser, or as a closed beta at forcebuy.net: sign in with steam to join the waiting list, or try the demo without signing in. ForceBuy is an independent fan project and is not affiliated with Valve or Steam.

what it does

it only reads

adding an inventory by SteamID, vanity name or profile URL reads a public inventory. to read more you connect the account, and there is no password field, ever. you paste one cookie (steamLoginSecure) from a browser you are already signed in to. ForceBuy checks it against steam, checks that it belongs to the account you pasted it into, and stores it apart from everything else. marketplaces work the same way: a csfloat API key or a buff163 login, next to the account it belongs to.

with that it reads private inventories, inventory history, market history, storage unit movement and your marketplace trades. it reads: that is the whole list. nothing here lists an item, accepts a trade, sends a trade, buys, sells or changes a price. every outbound request is a GET, the steam cookie only ever travels to steamcommunity.com over https, and it is never carried across a redirect. every login can be revoked on the inventories page whenever you want.

local or on the web

the download runs entirely on your machine. the local API binds to 127.0.0.1 and refuses requests from any web page that is not served from this machine, so a website you have open cannot reach into your ledger. no account, no analytics, no crash reporting.

the web version at forcebuy.net is the same app with a steam sign-in in front. access is by invitation during the closed beta. every account's data is kept apart in the database itself, not only in the app, and what is stored there is described in its privacy policy.

where your data lives

locally you pick the folder during setup. it holds the database with your items, prices, history and dashboards, a config file, a separate secrets file for the steam cookie and marketplace logins, cached images and catalogue, and the sync logs. defaults are %APPDATA%\ForceBuy on windows, ~/Library/Application Support/ForceBuy on macos and ~/.local/share/forcebuy on linux. updating is replacing the app folder with the new one, the data folder is untouched.

under the hood

a react UI on top of a node API, with an embedded postgres database locally and postgres on the web, a job queue, and a core covered by about 1,240 tests. the catalogue comes from the public ByMykel/CSGO-API dataset and refreshes as a delta: ETags on every source file, per-row fingerprints, and unchanged files come back as a 304 with no body at all. every figure in the app that is not calculated locally says where it came from.

beta

portable, no installer: download the zip, unpack it, run ForceBuy.cmd on windows or ./forcebuy.sh on macos and linux, and it opens in your browser at http://127.0.0.1:8787. node.js 20 or newer has to be installed; the start script says so if it is not there. a self-contained build is on the list.

what does not work yet

licence

ForceBuy is released under the PolyForm Noncommercial License 1.0.0. private, academic and non-profit use is free, including changes and passing it on, as long as the licence and the copyright notice travel with it. commercial use or distribution needs an agreement first: licence, commercial terms, [email protected].

privacy

the local app collects no user data. read the full privacy policy. the web version has its own at forcebuy.net/privacy.