Privacy & analytics

Who is responsible

The CSXP website operator is responsible for the analytics described here. For privacy questions or requests, email [email protected].

This notice describes website analytics. Public Steam game data, feedback you choose to send, and hosting security logs are separate from analytics. Contact us about those uses too.

Your choice comes first

Optional analytics are available. Nothing is counted before you choose “Allow analytics.” Declining does not affect any site feature.

Our legal basis for optional analytics is your consent (GDPR Article 6(1)(a)). You can withdraw consent at any time using “Analytics preferences” in the footer, then “Decline analytics.” Withdrawal stops future collection and does not affect the lawfulness of earlier processing.

We also respect Do Not Track and Global Privacy Control, even if you previously allowed analytics. With JavaScript disabled or analytics blocked, nothing is counted.

Your browser stores only your analytics choice and when you made it, under csxp.analytics-consent.v1. It expires after 180 days and contains no unique identifier. We use this preference only to remember your privacy choice. If storage is unavailable, your choice lasts for this page.

What we count

We count page loads and selected actions such as navigation, opening a player profile, sharing a link, submitting a search, comparing players, opening feedback, and zooming a chart. Counts are grouped by a fixed page category and UTC calendar day.

We do not collect IP addresses, device or browser details, referrers, full URLs, search terms, Steam IDs, form contents, visitor identifiers, or session histories into analytics. The web server necessarily receives network metadata to answer requests; analytics never reads it for visitor identification or stores it.

There are no analytics cookies, fingerprinting, advertising profiles, session recordings, third-party analytics scripts, or cross-site tracking.

Storage, access & retention

Only daily totals are saved in a separate database on the CSXP server. The dashboard and data feed are password protected. Analytics data is not sent to an external analytics provider or sold.

Daily totals are kept for 90 calendar days, including today, and expired totals are deleted at startup and hourly. We do not maintain individual event records or a way to link totals back to a person.

Once an action has been added to a total, we cannot identify or remove one person’s contribution from that total. We do not collect extra identifying data to do so.

Questions & rights

Where applicable, you may request access, correction, erasure, restriction, or portability of your personal data, object to processing, and lodge a complaint with your local data protection authority. Email [email protected] for help.