Privacy Policy
Last updated: January 2026
1. Introduction
The protection of your personal data is important to us. This Privacy Policy explains what data we collect, how we use it, and your rights.
Data Controller:
Christoph Amrein
Switzerland
Email: dotachadz@proton.me
2. Data We Collect
2.1 Steam Authentication
When you log in via Steam, we receive:
- Steam ID (unique identifier)
- Display name
- Profile picture URL
- Profile visibility status
2.2 Dota 2 Data (via OpenDota API)
We retrieve publicly available match data:
- Match history and statistics
- MMR estimates (if public)
- Hero statistics
- Win/loss records
This data comes from OpenDota's public API and is only available if your Dota 2 profile is set to public.
2.3 Platform Usage Data
We store data you create on our platform:
- Teams you create or join
- Leagues you participate in
- Match results and statistics
- Virtual currency balance (Coins)
- Betting history (virtual currency only)
2.4 Donation Data (Stripe)
If you make a donation, Stripe processes:
- Payment information (handled entirely by Stripe)
- Email address (for receipt)
- Transaction amount and date
We do not store credit card numbers or full payment details. See Stripe's Privacy Policy.
3. How We Use Your Data
We use your data to:
- Provide and operate the platform
- Authenticate your identity via Steam
- Display your profile and statistics
- Organize matches, leagues, and tournaments
- Calculate rankings and ratings
- Process donations
- Prevent abuse and enforce our Terms of Service
4. Legal Basis (GDPR)
We process your data based on:
- Contract: Processing necessary to provide our services (Art. 6(1)(b) GDPR)
- Consent: When you log in via Steam, you consent to us accessing your public profile (Art. 6(1)(a) GDPR)
- Legitimate Interest: Platform security and abuse prevention (Art. 6(1)(f) GDPR)
5. Data Sharing
We share data with:
- Other Users: Your public profile, team memberships, and match statistics are visible to other platform users
- Stripe: Payment processing for donations
- Hosting Provider: Our servers are located in Germany (EU)
We do not sell your data to third parties.
6. Data Retention
We retain your data as follows:
- Account data: Until you request deletion
- Match statistics: Indefinitely (for historical records)
- Donation records: As required by law (typically 10 years)
You can request account deletion at any time by contacting us.
7. Your Rights
Under GDPR and Swiss data protection law, you have the right to:
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Objection: Object to certain processing
- Withdraw Consent: At any time
To exercise these rights, contact us at: dotachadz@proton.me
You also have the right to lodge a complaint with a supervisory authority.
8. Cookies
We use only essential cookies:
- Session Cookie: Keeps you logged in
- CSRF Token: Security protection
We do not use tracking cookies or analytics services that track individual users.
9. Security
We protect your data through:
- HTTPS encryption for all connections
- Secure password hashing (where applicable)
- Regular security updates
- Access controls and authentication
However, no system is 100% secure. Use the platform at your own risk.
10. Children's Privacy
This platform is not intended for children under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be announced on the platform. Continued use after changes constitutes acceptance.
12. Contact
For privacy-related questions or to exercise your rights, contact us at: dotachadz@proton.me