Privacy Policy

1. Introduction

This Privacy Policy explains how DotaPrime collects, uses, stores and shares personal data when you visit our website, use the DotaPrime application or contact us.

DotaPrime is operated under the name DotaPrime.

For privacy-related questions or requests, contact DotaPrime by email at [email protected]. For support requests you can also use the contact form on our website.

2. Data we collect

2.1 Website

When you visit our website, we may process:

• basic request information, such as your IP address, requested page, browser type and request time;
• website usage statistics, including pages visited, referring website, browser, device type, country and interactions with download links;
• information you voluntarily submit through contact or problem-report forms.

We use Umami Cloud for cookieless website analytics. Umami does not set analytics cookies or store your IP address.

Cloudflare provides website security, DNS, proxying and content delivery. It may process standard connection information and use strictly necessary security cookies.

The account page may use essential authentication cookies. Creem’s checkout may use its own cookies and similar technologies for payment processing and fraud prevention.

2.2 Account information

When you create or use a DotaPrime account, we may process:

• your email address, if you sign in using an email code;
• your Steam ID, Steam profile name and avatar, if you sign in using Steam;
• an internal account identifier;
• your account language and preferences;
• your device name and public device key;
• authentication session information, with session tokens stored as hashes;
• your Free or Premium status, trial dates and subscription events;
• your marketing preference, if you choose to provide it;
• your usage statistics preference.

We do not receive or store your Steam password.

2.3 Information stored locally by the application

The application processes Dota 2 Game State Integration data locally on your computer.

It may also:

• read limited on-screen control areas in memory;
• store numeric hero-portrait features, not screenshots;
• store settings, caches, logs and recordings of up to your last 100 matches, subject to a storage limit of approximately 2 GB;
• store your AI provider API key encrypted using your operating system’s facilities.

Local match recordings may contain your Steam ID and profile name.

We do not receive this locally stored information unless it is specifically described in this Policy or you choose to send it to us.

2.4 Information sent to our servers

When you use DotaPrime, the application communicates with our servers to provide account, access and Premium functionality.

This may include:

• your account identifier and device signature;
• application version and platform;
• your Premium entitlement and subscription status;
• information required to calculate Premium features, such as selected hero IDs, rank group, position and the hero you request information about;
• one active-day record per account per UTC day, including date, application version and platform.

Our servers are hosted by Contabo in the EU. Cloudflare provides proxying and content delivery.

2.5 Match analysis and third-party game data

When you use match review, the application may send the match ID of a completed match to OpenDota to retrieve match statistics.

DotaPrime also retrieves aggregated game statistics from STRATZ for its own data processing. These build processes do not send player account information or personal match data to STRATZ.

The application may request game images and patch information from Valve-operated services.

2.6 Usage statistics

If usage statistics are enabled or otherwise permitted under the rules applicable to your location, the application may send events such as:

• application starts and updates;
• setup steps and settings pages opened;
• feature and settings usage;
• match-end information, such as game mode, result and duration;
• counts of certain in-app reminders and draft interactions.

These events use your internal account ID while signed in, or a random installation ID when signed out. They may also include application version, operating system, CPU architecture, application language and country.

Usage statistics do not include your email, Steam ID, Steam name, match ID, screen contents, file paths or text you type.

Usage statistics are sent to PostHog. Our project is hosted in the EU. PostHog receives IP addresses as part of network requests, but our project is configured to discard IP data rather than store it with events.

Where consent is required, the application asks for your choice before sending usage statistics. You can change your choice in the application settings.

2.7 Error and crash reports

To diagnose technical problems, the application sends error and crash diagnostics to PostHog.

These may include error messages, stack traces, application process exit information, failed update information and failed data-download information.

Diagnostics are sent independently of the optional usage-statistics setting. Before transmission, the application removes or redacts information such as email addresses, IP addresses, Steam IDs, tokens and personal home-folder paths.

Native crash dump files themselves remain on your computer.

2.8 Problem reports

If you use the Report a Problem feature on our website or in the application, we receive:

• the message you submit;
• an optional contact address;
• application diagnostics;
• relevant application log information;
• your internal account ID, if you send the report from the application while signed in, so that we can find your account.

The application may include its last 200 log lines. Before transmission, sensitive information such as email addresses, IP addresses, Steam IDs, account IDs, home-folder paths and Game State Integration tokens is removed from the log.

Reports are passed to our team’s private Telegram workspace so that we can review and respond to them. The server does not retain the report text as a server log.

2.9 Payments

Payments are handled by Creem (Armitage Labs OÜ, Estonia), which acts as the merchant of record and contractual reseller.

Creem independently processes payment information, including billing details and payment card information. We do not receive or store your full payment card details.

Creem shares certain purchase information with us, such as your name, email address, country, purchase history and subscription events, so that we can provide Premium access and manage your account.

Creem’s processing is also subject to its Privacy Policy.

2.10 AI features

If you choose to use an AI feature, the application sends relevant match figures to the AI provider you select using your own API key.

The information may include hero, match result, K/D/A, GPM and similar match statistics.

Your API key is stored encrypted on your computer. DotaPrime does not receive or store that key.

The AI provider processes the submitted information under its own terms and privacy policy.

3. How we use personal data

We use personal data for the following purposes:

• to create and manage accounts;
• to authenticate users and bind devices;
• to provide Free and Premium features;
• to process match reviews and account requests;
• to manage subscriptions and access entitlements;
• to provide application updates;
• to secure the Service and prevent fraud, abuse and repeated trial use;
• to diagnose errors and maintain application reliability;
• to review problem reports and provide support;
• to understand aggregate website and application usage;
• to comply with legal and accounting obligations.

4. Legal bases for processing

Depending on the activity, we rely on the following legal bases under the GDPR:

Performance of a contract: account creation, authentication, access to the application, Premium functionality, match review and related support.

Legitimate interests: securing the Service, preventing fraud and abuse, enforcing account and device restrictions, handling support requests and claims, diagnosing errors, maintaining service reliability and producing cookieless website statistics.

Consent: optional usage statistics where consent is required, and any optional marketing communications. You can withdraw consent at any time.

Legal obligation: retaining records where required by tax, accounting or other applicable laws.

Where usage-statistics consent is required, the application does not send those statistics before you make your choice. In other locations, we may rely on legitimate interests, subject to your right to object.

5. Who receives personal data

We share personal data only where necessary to operate the Service, provide requested functionality or comply with legal obligations.

Service providers

• Contabo GmbH (Germany): hosting our servers, account services and databases in the EU.
• Cloudflare, Inc. (USA): DNS, website protection, proxying, content delivery and storage of installers, update files and database backups.
• Amazon Web Services / AWS EMEA SARL: sending account sign-in codes by email through Amazon SES.
• PostHog Inc. (USA): application usage statistics, error diagnostics and crash reports. Our project is hosted in the EU.
• Umami Software Inc.: cookieless website analytics hosted in the EU.
• Telegram FZ-LLC: delivery of problem reports to our private team workspace.

Independent services

• Creem / Armitage Labs OÜ (Estonia): merchant of record, checkout, payments, invoices, refunds and subscription administration.
• Valve Corporation: Steam sign-in, Steam profile information, game images and patch information.
• OpenDota: match statistics and match analysis using match IDs.
• GitHub, Inc.: source code, release information and a fallback source for certain application data when our primary delivery service is unavailable.
• Your selected AI provider: match figures submitted when you choose to use an AI feature with your own API key.

These providers may process information under their own privacy policies and terms.

6. International data transfers

Some service providers are based outside the European Economic Area or may process data in other countries.

Where personal data is transferred outside the EEA, we rely on an applicable legal transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, where required by law.

PostHog hosts our project in the EU. As a US company, PostHog may also process data in other countries to provide its services. Further information about its subprocessors and safeguards is available in PostHog’s subprocessor information.

You may contact us at [email protected] for further information about relevant transfer safeguards.

7. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy.

Our current retention periods include:

• Server logs containing IP addresses: up to 30 days.
• Account data: until you delete your account.
• Hashed identifiers after account deletion: up to 30 days, to enforce trial and device restrictions.
• Database backups: data deleted from our database, including deleted accounts, is removed from backups within 7 days.
• Active-day records: until account deletion.
• Payment records: for the period required by applicable tax and accounting laws.
• Problem reports: in our private team workspace until the report has been handled. You may request deletion.
• PostHog usage statistics and error reports: up to 1 year.
• Umami website statistics: up to 6 months.

Local application data, including match recordings and settings, remains on your computer until you delete it or uninstall or otherwise remove the relevant files.

8. Your rights

Depending on applicable law, you may have the right to:

• access your personal data;
• correct inaccurate or incomplete data;
• request deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive data in a portable format;
• withdraw consent at any time;
• lodge a complaint with a data protection authority.

To exercise these rights, contact:

[email protected]

We will respond within the time required by applicable law, normally within one month under the GDPR.

You may lodge a complaint with the data protection authority in your country of residence.

Some information may need to be retained where required by law or where necessary to establish, exercise or defend legal claims.

9. Children

DotaPrime is not intended for children under 13. We do not knowingly collect personal data from children under 13.

If you believe a child has provided us with personal data, contact us at [email protected].

10. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Changes to this Policy

We may update this Privacy Policy to reflect changes to the Service, our data practices or applicable law.

The latest version will be published on our website with an updated date. Where required, we will notify users of material changes.

12. Contact

For privacy questions or requests, contact DotaPrime by email at [email protected]. For support requests you can also use the contact form on our website.