The data controller for dotapicker.com (the "Site") is Adrian Toma, a private individual based in Iași, Romania ("we", "us"). You can reach us through the contact page or at contact@dotapicker.com.
Like any website, our server records technical data about each page request: IP address, browser and device type, the page requested, the referring page and the time. Google Analytics and Google AdSense, described in section 5, collect similar data through cookies.
Login uses Steam OpenID: you enter your Steam user name and password on Steam's own website, and Steam only tells us your Steam ID. We then read your public Steam profile: profile name, avatar, profile link and, if you made it public, your real name. We also keep your account's creation date, your last login and last visit times, and the number of logins.
When you log in, we download your match history from OpenDota, a public Dota 2 statistics service. This only works for matches that are already public because Expose Public Match Data is turned on in your Dota 2 settings. From it we build summaries (games, wins and statistics per hero and per month, records, and the players you played with most, as listed by OpenDota) for your player stats and Personal scores. The full match list is kept on a server we operate, separate from the website.
Because this data is public, player stats pages can be opened for any Steam ID, as on OpenDota or similar sites. In Settings you can choose who may see your personal hero scores. The list of players you played with most is only shown to you.
Personal used to be a paid service, and the Site accepted donations through PayPal. Card and bank details went only to PayPal and never reached us. We keep the records of past payments (name or Steam account, amount, date) for our own accounts.
We do not use your data for automated decisions that have legal or similarly significant effects on you.
We don't sell or rent your data. It is processed by these services, only as far as needed for the purposes above:
Some of these providers are based outside the European Economic Area, mainly in the United States. They rely on the safeguards required by EU law, such as the EU-US Data Privacy Framework or standard contractual clauses.
dotapicker-session), a security token against forged requests, and, after logging in, a "remember me" cookie that keeps you logged in.You can block or delete cookies in your browser. The Site still works without them, except for logging in and remembering your preferences.
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its use, receive a copy in a portable format, and withdraw any consent you gave. To use these rights, write to us. We may ask you to confirm that the Steam account is yours, for example by contacting us while logged in. You also have the right to complain to the Romanian data protection authority, ANSPDCP, or the authority in your own country.
The Site uses HTTPS, we never receive Steam passwords, and access to the server and database is restricted. Still, no website or transmission over the internet can be guaranteed to be completely secure. To the extent permitted by law, we are not responsible for unauthorised access that happens despite these reasonable measures, or that is caused by third-party services or by your own devices and accounts.
The Site is not intended for children under 16, and we don't knowingly collect data about them. If you believe a child has given us personal data, contact us and we will delete it.
We may update this policy when the Site changes; the date at the top shows the latest version. If a change is significant, we will point it out on the Site.
Adrian Toma, Iași, Romania · contact@dotapicker.com · contact page