Privacy Policy

From Steam, when you sign in: your 64-bit Steam ID, your public display name and your avatar image URL. We never receive your Steam password or email address from Steam.

Match data: the public record of your recent Dota 2 matches — match IDs, hero played, kills, deaths, assists, result, duration, and, for Pro reviews, the parsed replay timeline (item purchases, deaths, fights, objectives, gold over time). All of this is data Valve already makes public for accounts with “Expose Public Match Data” enabled.

Verdicts: the coaching verdicts produced for you, stored so you can revisit them, so the Council can remember previous advice, and to count free-tier usage.

Email address (optional): only if you type one in on your account page to receive the weekly digest, or when you write to support.

Billing: if you subscribe, Stripe gives us a customer ID, a subscription ID, its status and renewal date. Card numbers, your billing address and the email you give at checkout go directly to Stripe and its Link service, which sells the subscription as merchant of record; they never reach our servers.

Technical: a session cookie to keep you signed in, and standard server logs (IP address, browser, time, page) kept by our hosting provider for security and debugging.

To sign you in and keep you signed in; to fetch and review your matches; to produce, store and show verdicts; to enforce free-tier limits and run subscriptions; to send the weekly digest if you opted in; to answer support requests; and to keep the Service secure. We do not use your data for advertising and we do not sell or rent it.

Under GDPR-style laws, the legal bases are performance of our contract with you (the Service and billing), your consent (the digest email, share links), and our legitimate interest in keeping the Service secure and working.

We set one strictly necessary cookie, session, which is an opaque random token that identifies your signed-in session. If you arrive through one of our own links (for example from our Instagram page), a second first-party cookie, d2c_src, remembers that source label for up to 30 days so we can count which channel brought you here; it holds no personal data, is deleted when you sign in, and is stored with your account as a single word such as “instagram”. Neither cookie is used for tracking across other sites and there are no third-party advertising or analytics cookies, so no consent banner is shown.

We use a small number of service providers, each acting on our instructions and under their own privacy terms:

• Valve / Steam — sign-in and the source of match data.
• OpenDota — a public Dota 2 match database we query for match details and replay parsing. Requests carry your Steam account ID and match IDs.
• Anthropic — the language-model provider that turns match data into written verdicts. We send match statistics and your display name, never your email or payment details. Anthropic does not use API data to train its models.
• Stripe (including its Link service) — payments and subscription management. As merchant of record it also handles tax, receipts, refunds and disputes for Council Plus, and acts as an independent controller for the data it collects at checkout under its own privacy policy.
• Resend — delivery of the weekly digest and support emails.
• Vercel and Neon — hosting and the database (servers in the EU/US depending on region).

We do not share your data with anyone else, except if the law requires it.

A share link is public by design: anyone with the URL can see that verdict, the hero, the score and your Steam display name. Nothing is shared unless you press Share. To take a shared verdict down, email us the link.

Your account, matches and verdicts are kept while your account exists. Sessions expire automatically. Billing records are kept for as long as tax and accounting law requires (typically several years) even after your account is deleted. Server logs are rotated within weeks.

You can see and change your email and digest setting on your account page at any time. You can ask us to export or delete everything we hold about you — email support@dota2council.com from the address on your account, or include your Steam ID, so we can verify it is you. Deletion removes your account, matches, verdicts and share pages; an active subscription is cancelled first. If you are in the EU/UK you can also complain to your local data-protection authority.

The Service is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

If we change this policy in a way that matters, we will note it here and, where we have your email, tell you. Questions go to support@dota2council.com or the support page. The data controller is the Dota2Council team.