01Who we are
onevsx (the “Service”) turns Counter-Strike 2 demo files into stats and multi-POV video clips. It is run by the onevsx team (“we”, “us”), which decides how the personal data described here is used and is its controller.
For any privacy question or request, write to hello@onevsx.gg. This policy complements our Terms of Service.
02What we collect
When you sign in
- Steam (“Sign in through Steam” and the public Steam Web API): your SteamID64, public persona name and avatar.
- FACEIT (“Log in with FACEIT”, scopes openid email profile, and the public FACEIT Data API): your FACEIT id, nickname, avatar, email address and the SteamID linked to your FACEIT account. We also read your public FACEIT stats (such as level and elo) to show them to you; we cache them briefly in memory and do not store them in our database.
- Account record: the above, your access tier, timestamps, and which version of our Terms you accepted and when. We use the SteamID to join a Steam and a FACEIT sign-in into one account.
When you use the Service
- Demo files you upload, the stats we derive from them and the clips we render (see section 3).
- Bug reports you send through the in-app form: your message plus the page address and title, the referring page, browser and screen details, language, time zone, recent JavaScript errors, a short outline of the page (such as which element had focus), the names (not the contents) of our cookies, your visitor and session ids, your username and your IP address. No screenshots.
- Usage analytics: a random visitor id kept in your browser, a session id, the pages you open, the site that referred you, your browser and device type, and your approximate country.
- Server logs: IP address and request metadata, used for security, abuse prevention and keeping the Service running.
03Uploaded demos and other players
A CS2 demo records the whole match, so a demo you upload contains data about every player in it, not only you: their SteamIDs, in-game names, teams, ranks and in-game actions. We extract exactly that, plus a player’s public FACEIT avatar where one exists, and only to compute statistics and render clips. We do not extract chat messages or voice.
Clips are private to your account and are delivered through links that expire after two hours. A clip of a professional match that we publish on the Service may also be shown to a signed-in account whose SteamID matches the player whose view the clip shows.
If you appear in someone else’s demo and do not want it processed, contact us with your SteamID. We will stop processing it and delete the data tied to your SteamID, unless we have to keep it to comply with the law. You have this right whether or not you have an account.
04What we never access
Because we use the official Steam and FACEIT sign-in systems, we never receive and never store:
- your Steam or FACEIT password, or your Steam Guard codes;
- access to your Steam inventory, items, skins, trades, wallet or purchases;
- a Steam Web API key or trade link; or
- any payment information.
The temporary access token we receive during sign-in is used once to read your public profile and is then discarded. Even if our database were breached, it could not be used to access or move anyone’s items.
05Why, and on what legal basis
Where the GDPR or a similar law applies, we rely on:
- Performance of our contract with you — creating and running your account, processing the demos you upload, rendering your clips, showing your stats.
- Legitimate interests — processing the other players who appear in a demo you upload (gameplay data that is already shared with everyone in that match), keeping the Service secure, preventing abuse, handling bug reports and measuring how the Service is used. We have weighed these interests against your rights; you can object at any time (section 10).
- Legal obligations — where the law requires us to keep or disclose data.
- Consent — only where the law requires it; you can withdraw it at any time without affecting earlier processing.
We do not sell personal data, do not use it for advertising, and do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our stats (such as Win Chance or xFrags) describe gameplay; they are not decisions about you.
07International transfers
Our servers are in the EU. Some providers above may process data in other countries, including the United States. Where data leaves the EEA or the UK, we rely on an adequacy decision or on Standard Contractual Clauses with the provider.
08How long we keep it
We keep personal data only while we need it to run the Service, for the reasons below. We do not promise to keep anything for any minimum time: we may delete any of it earlier, at any time, without notice.
| Data | Kept until |
|---|---|
| Account record | You delete your account, or we close it |
| Uploaded demo files | You or we delete them. Failed uploads are removed automatically |
| Rendered clips | You or we delete them |
| Stats derived from demos | They are no longer needed to show stats, or you ask us to delete them (section 3) |
| Analytics | They no longer help us understand how the Service is used |
| Bug reports | The report is dealt with and no longer helps us fix similar problems |
| Server logs | They are no longer needed for security and keeping the Service running |
We keep data longer only where the law requires it. We are not a backup service: keep your own copy of any demo or clip you care about.
10Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent. To delete your account or exercise any right, write to hello@onevsx.gg from the address linked to your account, or tell us your SteamID. We may ask you to confirm the account is yours. We answer without undue delay, within the time the law requires.
You also have the right to complain to a data-protection supervisory authority, in particular in the country where you live or work. We would appreciate the chance to fix the issue first.
11Security
We use encrypted connections (HTTPS), access controls, and short-lived links for clips, and we keep as little data as we can. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities where the law requires.
12Children
The Service is not directed to children and is not for anyone under 16 or under the age of digital consent in their country, whichever is higher. If we learn we hold data from a child, we delete it.
13Changes and contact
We may update this policy. When a change is material, we will ask you to accept the new version the next time you sign in; the date and version at the top always show the current one. Questions or requests: hello@onevsx.gg.