Privacy Policy

1. Who is responsible

The controller for the processing of your personal data is the operator named in the Imprint. For any privacy request, contact [email protected].

2. What we collect

• Steam account data — your SteamID, public display name, and avatar, received when you sign in with Steam (Steam OpenID) and via the Steam Web API.
• Gameplay data — matches you play, in-game statistics (kills, deaths, assists, etc.), your ELO rating and history, and any team or tournament participation.
• Technical data — standard server logs and, for security and abuse prevention, IP addresses of connections to the service and to game servers you join.

We do not use analytics, advertising, or third-party tracking, and we do not process special categories of data.

3. Why and on what legal basis

• To provide the matchmaking service you sign in for — account, queue, matches, leaderboard, teams, tournaments. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
• Security and operation — logging, abuse and cheat prevention, keeping the servers running. Legal basis: legitimate interests, Art. 6(1)(f) GDPR.

4. Cookies & local storage

We store only what is strictly necessary to keep you signed in:

• lan_session — an httpOnly cookie holding your session token.
• lan_token — the same token in your browser's localStorage, used for the live match connection.
• lan_cookie_ack — remembers that you dismissed the cookie notice.

These are exempt from consent under the ePrivacy Directive. There are no advertising or analytics cookies.

5. Recipients & third parties

• Valve Corporation (Steam) — sign-in and public profile lookup. Your avatar is served from Steam's servers, so your browser contacts Valve directly and your IP is visible to them. See Valve's privacy policy.
• Cloudflare — routes and secures traffic to the site (acting as our processor); it processes connection data such as your IP address.
• Game servers — when you join a match your IP is visible to the CS2 server, as is normal for online multiplayer.

Some of these providers are located outside the EU (e.g. the USA); such transfers rely on the providers' own safeguards (e.g. standard contractual clauses / adequacy).

6. How long we keep it

Account and gameplay data are kept while your account exists. We delete or anonymise your data on request, subject to any legal retention duties. Security logs are kept only as long as needed for that purpose.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests.

You can act on most of these yourself: while signed in, visit Account & data to download a copy of your data (portability) or delete your account (erasure). For anything else, email [email protected].

You also have the right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (dsb.gv.at).

8. Automated decisions

Matchmaking and ELO are automated but serve only to organise games; there is no automated decision-making producing legal or similarly significant effects on you.