Privacy Policy

1. Controller

CS2 Coach is operated by an independent individual developer, reachable at admin@cs2-coach.com — the data controller for the personal data described here.

2. What we collect

We collect only what the service needs to function. Specifically:

• Steam identity: your SteamID64 and public Steam profile (persona name, avatar) via Steam OpenID — we never see your Steam password.
• Match data: match sharecodes, your Steam match-history auth code (which you can revoke in Settings or at Steam any time), demo files, and the per-round and per-player stats derived from them. Demos inherently contain in-match data about the other players in your lobby.
• Email: optional; used for analysis notifications, billing receipts, and account notices.
• Billing: handled by Stripe — we store Stripe customer and subscription identifiers and usage counts, never card numbers.
• Technical: server logs and privacy-friendly, cookieless analytics (Vercel Web Analytics).

3. Why we use it (lawful bases)

We process your data on the following lawful bases under UK and EU GDPR:

Contract — providing the analysis service you signed up for, and billing.

Legitimate interests — service security, abuse prevention, and improving the product.

Consent — where required, such as optional email features.

4. Who processes your data (sub-processors)

We use the following third-party processors to deliver the service:

• Supabase — database, file storage, authentication.
• Vercel — hosting, analytics.
• Stripe — payments.
• Resend — transactional email.
• Anthropic (Claude API) — generates the match analyses from derived match data.
• Modal — demo parsing compute.
• Valve / Steam Web API — source of match history and profile data.

Some processors are US-based; international transfers rely on standard contractual clauses or equivalent safeguards.

5. How long we keep it

Analyses and match data are kept while your account exists — that’s the product promise, and past analyses stay accessible for as long as you’re a member. On account deletion (by request) we remove your profile, match views, analyses, and stored demos. Stripe retains billing records as the law requires.

6. Your rights

Under UK and EU GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. You can complain to the ICO (ico.org.uk) or your local supervisory authority. Exercise any of these by emailing admin@cs2-coach.com.

7. Cookies

We use essential session cookies only — specifically your Supabase auth session. There are no advertising or cross-site tracking cookies. Analytics is cookieless.

8. Children

The service isn’t directed at children under 13, and Steam’s own minimum-age rules apply.

9. Changes

Material changes will be announced in-app or by email.

10. Contact

admin@cs2-coach.com. Put [security] in the subject line for security reports.