Introduction
When you use our services, you're trusting us with your information. We understand that this is a big responsibility and we work hard to protect your information and put you in control.
Why Leetify collects Personally-Identifying Information
Leetify collects certain Personally-Identifying Information (PII) which is necessary to carry out our business. Below we will tell you what PII we collect, why we need it and how we use it, as well as which other organisations have access to your data.
What kind of Personally-Identifying Information do we collect?
We ask users for an email address when you sign up, which we use to communicate important information regarding your account. For example, we might communicate information regarding a purchase you made or updates about compensation to our paid subscribers due to a site outage. You can unsubscribe from non-essential communications (such as product updates) at the bottom of any email message we send.
Who has access to your Personally-Identifying Information?
We take the protection of your PII very seriously, and only ever share your information if we have very good reason to do so. Below is a list of partners and times when your PII is shared.
We share your e-mail address with Amazon Web Services (AWS) and Sendgrid in order to send out e-mails to you. These parties only save your e-mail address for as long as is necessary to send out the e-mail for us.
Google Analytics has access to your IP address, but anonymizes and deletes your IP address as soon as it reaches their system, per our request.
We use Stripe for payment processing. This means we don’t actually receive or store payment info. Please refer to Stripe’s privacy policy to learn how they process your payment information, if you choose to pay for services on Leetify.
Non-Identifying Information
We also collect some non-personally identifying information such as browser type, language preferences and referring site. This is simply to understand our visitors' interactions with our site better and improve the quality of our service. We may at times present aggregated reports of non-personally identifying information.
We work with two partners, Allstar.gg and SCL.gg, to provide Highlights and Training Server benefits to paying users. These companies are told whether or not someone is paying for a premium subscription on Leetify, so that they can service the appropriate users. PII is not shared with these third parties, just SteamIDs and game data required to carry out the partnerships.
Leetify keeps match-event logs generated by the game itself (CS2 Replay files) including data derived from them and each player’s public Steam ID, alias and avatar. Because those identifiers are already public on Steam, the Leetify profile does not constitute personal data under the GDPR. Here is our lawful basis for processing this game data:
Performance of a contract (Art. 6 (1)(b)) – Our registered users explicitly ask us to import and analyse their matches, and we only import matches they give us access to. To fulfil that contractual service, the complete event data for all ten players in each match must be retained.
Legitimate interest (Art. 6 (1)(f)) – When a non-user appears in a match that a registered user has consented to analyse, we must also process that non-user’s match data; otherwise the report delivered to our user would be inaccurate. Our assessment shows that there is minimal or even absolutely zero privacy impact as the data is already public, gaming-related and non-sensitive, and the analytical benefit to our users is significant.
For these reasons, the right to erasure under Article 17 does not apply. The right to erasure under Article 17 is not absolute; a controller may refuse when an exemption in Article 17 (3) applies or when it can show compelling legitimate grounds that override the data subject’s interests (Article 21 (1)). Because the performance data remains necessary to deliver the service promised to other users—and because its publication is limited to information that Valve already makes public—we have such overriding grounds and may lawfully continue processing. Guidance from the UK ICO and similar authorities confirms that the right to object/erasure is not absolute where legitimate interests prevail.
If you believe there to be any sensitive information on your Steam profile that we import, change your Steam alias or avatar – Leetify mirrors whatever is public on Steam; changes propagate automatically.
Deleting Your Leetify Account
You can delete your account at any time via our Account Settings page. This will remove all PII from our systems. You can always sign up again after your account has been deleted.
When an account is deleted, profile privacy controls are automatically set to the strictest setting, and data for that SteamID is no longer made available in Leetify’s Public API.
Hiding Your Leetify Profile
You can choose to hide your profile completely. You must create a Leetify account to prove that you own the SteamID in question, and then visit this page to hide your profile. Hiding your profile also deletes your Leetify account. You can sign up for another account with the same SteamID if you wish to un-hide the profile in the future.
Privacy Policy Changes
Although changes are likely to be minor, our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (for example email notification of Privacy Policy changes).
We will also keep prior versions of this Privacy Policy in an archive for your review. We want to be as transparent as possible about the changes we make to our Privacy Policy. In this archive, you can see the previous versions of the policy: