Legal
Privacy Policy
This Privacy Policy explains what information DotaBoard collects, how it is used, and how it is protected. By using DotaBoard you agree to the practices described here.
1. What We Collect
When you log in via Steam, we collect and store the following information:
- Steam ID — your 64-bit Steam identifier, used to uniquely identify your account.
- Display name — your public Steam persona name.
- Avatar URL — a link to your public Steam profile picture.
- Dota 2 match data — match history, hero selections, in-game statistics, and performance metrics fetched from OpenDota and Stratz on your behalf.
- MMR — if you choose to set your MMR manually, that value is stored in your account.
We do not collect passwords, payment information, or any personal data beyond what is listed above.
2. How We Use Your Data
The data we collect is used exclusively to:
- Display your match history, statistics, and performance dashboards.
- Compute your estimated MMR progression over time.
- Identify you across sessions via a JWT stored in your browser's local storage.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Third-Party Services
DotaBoard retrieves match data from the following external services:
- OpenDota (opendota.com) — an open-source Dota 2 data platform. Your account ID is sent to their API to retrieve your match history.
- Stratz (stratz.com) — a Dota 2 analytics platform. Your account ID may be sent to their GraphQL API as an alternative data source.
- Steam Web API — used at login to retrieve your public profile information. Governed by Valve's Privacy Policy.
- Google Analytics — used to understand how visitors interact with DotaBoard (page views, session duration, general usage patterns). Google Analytics sets cookies in your browser and may process your IP address. IP anonymisation is enabled. Google's data processing is governed by the Google Privacy Policy. Analytics is only activated after you give consent via the cookie banner.
4. Data Storage
Your data is stored in a PostgreSQL database hosted on AWS infrastructure in the EU (Frankfurt, eu-central-1 region). Access is restricted to the DotaBoard application only — the database is not publicly accessible.
A JWT authentication token is stored in your browser's localStorage. It expires after 30 days. You can remove it at any time by logging out or clearing your browser storage.
5. Data Retention
Your account and associated match data are retained for as long as your account exists. You may request deletion of your account and all associated data by contacting us at contact@dotaboard.com.
6. Cookies
DotaBoard uses cookies only for analytics purposes. Authentication state is managed via localStorage, not HTTP cookies.
On your first visit, a banner asks for your cookie preference. If you accept, Google Analytics will set the following cookies:
- _ga — distinguishes unique users. Expires after 2 years.
- _ga_<ID> — persists session state. Expires after 2 years.
If you decline, no analytics cookies are set and Google Analytics is not loaded. You can change your preference at any time by clearing your browser's localStorage for this site (the key is cookie_consent) and reloading the page.
7. Your Rights
Under applicable data protection law (including GDPR where applicable) you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict processing of your data.
To exercise any of these rights, contact us at contact@dotaboard.com.
8. Children's Privacy
DotaBoard is not directed at children under the age of 13. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the service after an update constitutes acceptance of the revised policy.
10. Contact
If you have any questions or concerns about this Privacy Policy, please contact us at contact@dotaboard.com.