Privacy Policy

Last updated: May 23, 2026

This policy explains what CSReplays collects, how we use it, and the choices you have. CSReplays provides automated Counter-Strike 2 coaching reports generated from demo files you upload.

What we collect

• Steam identity — your steamid64, persona name, and avatar from Steam OpenID and the Steam Web API.
• Email — collected at Stripe checkout for receipts and account recovery.
• Demo files — what you upload. Stored in private, encrypted object storage scoped to your account.
• Generated artifacts — the digest, round details, and coaching report we produce from each demo.
• Billing data — handled by Stripe. We never see your card numbers.
• Operational telemetry — request logs and error reports (Sentry). Anonymized where possible.

How we use it

• To produce your coaching reports.
• To send transactional email (analysis ready, payment failed).
• To enforce free-tier rate limits.
• To debug failures and improve the product.

How we don't use it

• We don't sell or share your personal information, and we don't share your data with third parties beyond the processors listed below.
• We don't use your demos to train AI models without explicit permission.
• We don't profile non-account-holding players from demos beyond what your individual report requires.

Processors

We rely on the following third parties to operate the service. Each processes only what it needs and has its own privacy policy:

• Vercel (hosting), Cloudflare R2 (demo storage), Supabase (database + authentication).
• Modal Labs (worker compute), Anthropic (LLM inference for reports).
• Stripe (billing), Resend (transactional email), Inngest (job queue), Sentry (error reporting).

Cookies & tracking

• We use a single session cookie (cs2aidb_session) to keep you signed in. It is signed, HttpOnly, and expires after about 30 days.
• We don't use advertising or cross-site tracking cookies, and we don't serve targeted ads.
• Because we don't track you across other websites, we don't respond to browser "Do Not Track" signals.

Retention

• Demo files: kept while your account is active. We may delete older demo files periodically to manage storage.
• Generated reports and parsed data: kept while your account is active.
• Deleting an analysis removes its report and parsed data from our database. The original demo file is kept so the analysis can be re-run, and is removed when you close your account or on request.
• When you close your account, we will remove your personal data and stored demo files, except records we are required to keep for legal or accounting purposes.

Your rights

You can delete any analysis at any time from your dashboard. To make any other request — including to access, correct, or delete your personal information, or to close your account — email privacy@csreplays.com.

California residents

If you live in California, you have the right to know what personal information we collect, to request access or deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information. To exercise any of these rights, contact privacy@csreplays.com.

Children

CSReplays is not directed to anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Contact

Privacy questions: privacy@csreplays.com. General questions: hello@csreplays.com.