Dota 2 Counter Picks & Draft Analysis Engine

Who we are

DotaCounters (“we”, “us”) operates www.dotacounters.com and the DotaCounters Desktop Client. For any question about this policy or about your data, write to triruotediesel@gmail.com.

What we collect

• Account data — only if you create an account: your email address, your password (stored only as a bcrypt hash, never in clear text), your subscription status and expiry date, the Stripe customer and subscription identifiers, and the temporary codes used to verify your address or reset your password.
• Server logs — every request to our API is recorded with the date and time, the IP address it came from, the mode (Draft Picking or Analysis), how many heroes were involved, and the random token of the share link that was generated. When the request comes from the Desktop Client while signed in, the account email is recorded as well. These logs exist to detect scraping, automated data extraction and abuse of the service, and they are how we identify repeat offenders.
• What the Desktop Client sends us — the hero picks and filters you submit, and your team side, so that we can compute recommendations for you.
• Match lookups — if you ask for the analysis of a finished match, the match identifier is sent to us and we retrieve the data through public match data providers (OpenDota and STRATZ). Public match records may include player names. We use them only to answer the request you made.
• Share links — when an analysis is generated we store it (hero identifiers, filters, team side, timestamp) under a random token, so that the link can be reopened by whoever holds it. The entry is deleted when we refresh the hero data, so it does not live forever.
• Payments — card payments are processed by Stripe, and the in-app channel by Telegram. Your card details go to Stripe directly: we never receive or store them. We only keep the identifiers needed to know whether a subscription is active.

What the Desktop Client does on your computer

To recognize heroes, the Desktop Client reads Dota 2’s Game State Integration data and captures parts of your screen. The captured frames are processed locally, in memory, and are never uploaded or stored by us. The only things that leave your computer are the picks needed to compute a recommendation and, optionally, the data behind a share link you choose to create.

What we do not do

• No advertising, no analytics, no profiling.
• No selling or renting of personal data to anyone.
• No third-party tracking cookies or pixels on this website.
• No access to your Dota 2 or Steam credentials: the Desktop Client only observes game state locally.

Why we are allowed to process it

• To perform our contract with you — creating and keeping your account, managing your subscription, and delivering the analysis you ask for.
• Legitimate interest — keeping the service secure and available: detecting scraping, automated extraction of our data and abuse, and rate limiting. This is the purpose of the server logs.
• Legal obligation — keeping payment and accounting records as long as the law requires.
• Consent — only where we ask for it explicitly, and you can withdraw it at any time.

How long we keep it

• Server logs: 12 months, after which they are deleted.
• Account data: until you delete your account or ask us to delete it.
• Share-link entries: until the next refresh of our hero data.
• Payment records: as long as tax and accounting rules require.
• Emails: we send transactional messages only (address verification, password reset) — no newsletters.

Who we share it with

• Stripe — card payments and subscription management.
• Telegram — in-app purchases.
• Brevo — sending transactional emails.
• Render and PythonAnywhere — hosting of the website, the API and the data files.
• OpenDota and STRATZ — public match data used for match analysis.

Page assets are served from third-party content networks: the web fonts come from fonts.cdnfonts.com and jQuery from code.jquery.com. Those providers see your IP address as part of delivering the file to your browser.

Some of these providers are based outside the EU/EEA, which means data may be transferred there. Write to us if you want details about the safeguards applied to those transfers.

Cookies

We use a single technical session cookie, set when you sign in, which is what keeps you logged in. We use no analytics or advertising cookies. If you pay by card, Stripe may set its own cookies on its own pages while you complete the payment.

Your rights

You can ask us to access, correct, delete or restrict the processing of your data, to receive it in a portable format, or to object to processing based on legitimate interest. You can also withdraw any consent you gave. To exercise any of these rights, write to triruotediesel@gmail.com; we answer within one month.

If you are in the EU, you also have the right to lodge a complaint with your national supervisory authority.

Children

The service is not directed at children, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, write to us and we will delete it.

Changes to this policy

If we change how we handle personal data, we update this page and the date at the top. Substantial changes will also be announced in the application.