What CS2Assist actually stores, why, and for how long
Last updated: 20 September 2026
Controller of this local build: the administrator of the CS2Assist project. Legal identity details have not been configured yet.
Privacy contact: cs2assist@gmail.com or Telegram @CS2Assist. This policy covers cs2assist.ru and cs2assist.pro. Cookies are not shared between these domains, so a choice must be made separately on each domain.
| When | Data | Purpose |
|---|---|---|
| Every request | IP address, date/time, HTTP method and path without the query string, response status, and processing time. | Deliver the service, rate-limit requests, diagnose errors, and prevent abuse. |
| Preferences | Language, light/dark theme, and analytics choice. | Remember the interface and avoid asking for the same choice on every visit. |
| After optional consent | Random analytics session ID; section; language and theme; mobile/tablet/desktop class; active time; scroll depth; allow-listed actions such as calculate, copy, tab, map/finish/card navigation, and Telegram opening. | Learn which sections are useful, where the interface causes friction, and which factual content to improve. Analytics records do not contain a SteamID, name, email, or full IP address. |
| Steam sign-in | SteamID64, display name, avatar, profile URL, vanity name, random public profile ID, account creation date, and last sign-in date. | Authenticate the account, display a profile, and enforce permissions. |
| Account features | Bio, bookmarks, likes, and the selected map, category, position, and lineup variation. | Provide profiles, saved lineups, reactions, and popularity counters. |
| Lineup submission | Author SteamID/name, text, coordinates, difficulty, images, MP4 files, moderation state/note, timestamps, and moderator SteamID. | Review and publish a submitted lineup. |
| Calculator and prices | Selected item names, wear values, and requested price keys. | Calculate outcomes and return prices. These requests are not attached to a Steam profile. |
We do not ask for a legal name, email, phone number, payment details, or precise location in dedicated fields. A Steam display name or voluntary bio may contain information supplied by the user.
Choosing “Essential only” does not restrict site features: analytics stops, analytics_sid is deleted, and matching events for that analytics session are removed from the server. Security logs and essential cookies remain.
Consent covers only CS2Assist first-party analytics. The current code contains no advertising cookies, behavioural advertising profile, or sale of data.
Fonts, Three.js, and GLTFLoader are served by CS2Assist itself. There is no Google Analytics, advertising pixel, or embedded social widget. We do not make automated decisions producing legal or similarly significant effects.
For EU/EEA users, account and requested-feature data is processed to provide the service; technical logs rely on the legitimate interest in service security and reliability; optional analytics relies on consent. Refusal causes no loss of site functionality. For users in Russia, processing is limited to requested service functions, while optional analytics relies on consent. The operator must assess the Roskomnadzor notification, localisation of the initial collection of Russian citizens' data, and submit a separate cross-border-transfer notice before such a transfer begins. The CIS has no single supranational data-protection regime.
Subject to applicable law, you may request access, correction, erasure, restriction, or portability, object to processing, withdraw consent, and complain to your supervisory authority. The account can be deleted in profile settings. “Essential only” above removes the analytics cookie and the current session's matching analytics history. Contact us on Telegram for other requests; account ownership may need to be verified through Steam.
Production transport must use HTTPS. Cookies use SameSite=Lax and HttpOnly, and Secure in production. Server-side permission checks restrict access. No measure removes all risk; the operator will communicate a confirmed incident and required steps where and when applicable law requires it.
Telegram @CS2Assist. A material change to purposes, data categories, or recipients requires this notice to be updated and, where consent is the basis, consent to be requested again.