1. Controller

The controller responsible for data processing on this platform within the meaning of the General Data Protection Regulation (GDPR) is:

Dean Glöckner
Germany
E-Mail: support@crossfirecsgo.eu

2. Data We Collect

When you use this platform, the following personal data is collected and processed:

• Steam Profile Data: Steam ID (SteamID64), display name, and profile avatar — transmitted via Steam OpenID authentication at login.
• Game Statistics: Elo rating, wins, losses, kills, deaths, assists, and full match history generated through your participation in matches.
• Loadout Preferences: Your selected weapon skins and in-game cosmetic settings stored to personalise your experience on our game servers.
• Technical Access Data: IP address, browser type, operating system, and timestamps of requests — recorded in server logs as part of standard web server operation.
• Session Data: A session cookie is set upon login to maintain your authenticated session.

3. Purpose and Legal Basis of Processing

We process your data for the following purposes:

• Authentication (Art. 6(1)(b) GDPR): To identify you on the platform via Steam OpenID and provide you with a personalised account.
• Matchmaking & Game Operation (Art. 6(1)(b) GDPR): To calculate Elo ratings, arrange balanced matches, and manage game server sessions.
• Leaderboards & Statistics (Art. 6(1)(f) GDPR): To display competitive rankings and match history — a legitimate interest of the platform and its users in transparent competitive play.
• Server Security & Logging (Art. 6(1)(f) GDPR): IP addresses and access logs are retained to detect abuse, ensure platform integrity, and fulfil legal obligations.

4. Data Retention

Your account data (Steam profile, statistics, loadout) is stored for as long as your account remains active. If you request deletion of your account, all associated personal data will be erased within 30 days, except where retention is required by law.

Server access logs are automatically deleted after 30 days.

5. Hosting & Data Processors

This platform is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes technical data (IP addresses, server logs) on our behalf as a data processor pursuant to Art. 28 GDPR. A data processing agreement is in place.

Authentication is handled via Steam (Valve Corporation, PO Box 1688, Bellevue, WA 98009, USA). By logging in with Steam, you agree to Valve's Privacy Policy. We only receive the Steam ID, display name, and avatar URL from Valve.

6. Cookies

We use only technically necessary cookies:

• A session cookie to maintain your authenticated login state.
• A SignalR connection cookie required for real-time matchmaking updates.

These cookies are strictly necessary for the platform to function and cannot be disabled without breaking core functionality. We do not use tracking, analytics, advertising, or any third-party cookies.

7. Third-Party Services

We do not use Google Analytics, Meta Pixel, or any other tracking or profiling services. No data is shared with advertisers or data brokers.

8. International Transfers

Your data is processed within the European Union. Authentication data passes through Valve's Steam servers (USA) solely for the purpose of identity verification. No other transfers to third countries take place.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — Art. 15 GDPR: Request a copy of the data we hold about you.
• Right to rectification — Art. 16 GDPR: Request correction of inaccurate data.
• Right to erasure — Art. 17 GDPR: Request deletion of your data ("right to be forgotten").
• Right to restriction — Art. 18 GDPR: Request that processing of your data be restricted.
• Right to data portability — Art. 20 GDPR: Receive your data in a structured, machine-readable format.
• Right to object — Art. 21 GDPR: Object to processing based on legitimate interest.
• Right to lodge a complaint — You may file a complaint with the supervisory authority in Baden-Württemberg: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstr. 20, 70173 Stuttgart.

To exercise any of these rights, contact us at: support@crossfirecsgo.eu

10. Changes to this Policy

We reserve the right to update this Privacy Policy to reflect changes in the platform or applicable law. The current version is always available at /privacy. Last updated: March 2026.