Dota Addiction (“we”, “us”) is an app that recognises Dota 2 heroes from a photo of the
draft screen and suggests picks, counters and item builds. This policy explains what data the
app handles and the choices you have. We keep it short because the app collects very little.
Dota Addiction is an independent app and is not affiliated with, endorsed by, or sponsored by
Valve Corporation.
The short version
There are no accounts — we identify your install with an anonymous
device identifier, not your name or email.
Linking your Dota profile is optional. If you do, we read your public
match history, and the public profiles of the other players in your matches, from Dota
data services. Players who hide their match data are not shown.
The camera frames you scan are sent to our servers — that is how the
heroes get recognised — and are never stored. Each one is read and then
discarded.
Both optional features — contributing draft photos and
sharing crash & usage diagnostics — are off by default
and only start after you say yes. You can withdraw either at any time in Settings.
We do not run ads, do not profile you, and do not sell data.
1. Who is responsible for your data
The controller of the personal data described below is:
Email is the fastest way to reach us and we answer every request that arrives there; if
you need a postal address for a formal notice, ask and we will provide it. We have not
appointed a Data Protection Officer, and are not required to.
2. Information we collect
Anonymous device identifier. A value that identifies your installation:
on iOS a random identifier we generate and keep in the system keychain, on Android an
identifier scoped to this app. We use it to apply the free-tier limit, to recognise your Pro
subscription, and as the user identifier for our payment provider. It is not linked to your
real-world identity. It deliberately survives reinstalling the app — otherwise
deleting and reinstalling would reset the free tier. It changes if you factory-reset the
device (Android) or erase the device (iOS), and you can ask us to delete the data held
against it (see section 7).
Camera frames you scan — read, then discarded. Hero recognition runs on our
servers, so while the scanner is open the app sends the camera frame to us over an encrypted
connection. Because these are camera frames, they may incidentally capture your surroundings.
We use each one for a single purpose — reading which heroes are in the draft — and for as long
as that one request takes. The image is held in memory, is never written to disk, and is gone
once we have answered. We do not keep it, we do not use it to train anything, and we do not
share it. If you want to give us a picture to keep and learn from, that is the separate opt-in
feature below.
Optional: contributed draft photos. If, and only if, you enable
“Contribute draft photos” in Settings (off by default), then when you confirm a recognised
draft the app uploads that photo together with the hero names it read, the recognition model
version, your app version, and your platform (iOS/Android). Because these are camera photos,
they may incidentally capture your surroundings. We use them to review, label and improve our
recognition models. Turning the setting off stops all future uploads.
Optional: crash and usage diagnostics. If, and only if, you allow it
(off by default; you are asked once on first launch and can change it in Settings), the app
sends crash reports, screen views, performance timings, your app version, device model and
operating system version to our error-monitoring provider. These reports never include your
photos and never include your device identifier.
Optional: your linked Dota profile. If you link your Dota profile with its
Friend ID (a public number — there is no Steam login and we never see a password), we store
that ID and your public Dota nickname against your device identifier, and fetch your public
match history from STRATZ and OpenDota to show your results, statistics and match details.
Unlinking the profile in the app deletes the link, your match list and the player cards
described below.
Other players in your matches. Match details show the public data every
Dota 2 match already carries: each player's hero, statistics, items and, unless they
have hidden it, their Dota nickname. For the other players in a match you open, the app also
shows a player card built from their public match history: rank medal, recent results and
heroes, positions played, lifetime games and win rate, and the games you have played together.
A card can flag an account as a possible smurf when its recent wins, performance and account
size stand out together. That is an estimate from public statistics, shown as a question, and
we never take any action about a player because of it. Players who hide their match data in
Dota get no card and no nickname; the only thing shown about them is which of your own
earlier matches they also played in.
Purchase information. If you buy Dota Addiction Pro, your purchase is processed
by Apple or Google and managed through RevenueCat. We receive your subscription status linked
to your anonymous device identifier. We never receive your full payment-card details.
Technical and log data. When the app contacts our server (for pick
recommendations, item builds and subscription status) our servers automatically receive
standard request information such as your IP address, timestamps and the hero names in the
draft you asked about, used to operate, secure and debug the service.
We never collect your photo library, contacts, location, or an advertising identifier.
3. How we use information
To provide the app's features — reading the draft you point the camera at,
recommendations, item builds, and enforcing free vs. Pro access.
If you link a Dota profile: to show your match history and statistics, and who you
played with.
To improve hero recognition, using contributed photos only (see above).
To find and fix crashes and slow screens, using diagnostics only (see above).
To operate, secure, and troubleshoot the service.
We do not sell your data, we do not use it for advertising,
and we make no automated decisions with legal or similarly significant effects about you.
4. Who we share it with
We share data only with service providers that help us run the app, each under a data
processing agreement:
Hetzner Online GmbH (Germany) — hosting for our server, which reads your
camera frames without keeping them, and holds the device identifier, request logs, any
contributed photos, and the linked-profile and match data described above.
RevenueCat, Inc. — subscription management (receives your anonymous
identifier and subscription status).
Sentry (Functional Software, Inc.) — crash and usage diagnostics, only if
you have allowed them, processed in Sentry's EU region.
Apple App Store / Google Play — app distribution and payment processing.
They act as independent controllers for the purchase itself, under their own policies.
For recommendations, match details and player cards we query third-party Dota 2 data
sources (STRATZ and OpenDota). Those requests carry hero identifiers and, when you use the
statistics features, your Friend ID, match IDs and the account IDs of the players in the matches
you open. They never carry your device identifier, or anything that is not already public
Dota 2 match data.
5. Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on:
Performance of a contract (Art. 6(1)(b)) — providing the app, the
statistics features you turn on by linking a profile, and the Pro features you purchase.
Legitimate interests (Art. 6(1)(f)) — operating and securing the service,
and preventing the free tier from being reset by reinstalling.
Legitimate interests (Art. 6(1)(f)) — showing the public profiles of the
other players in your matches. The interest is knowing who you played with; the other
players are protected by our showing only public match data, skipping anyone who has hidden
theirs, and keeping player cards for 30 days at most.
Consent (Art. 6(1)(a)) — contributed draft photos, and crash and usage
diagnostics. You can withdraw either at any time, without affecting anything done before
you withdrew it.
6. How long we keep it
Data
Retention
Camera frames sent for recognition
Not kept at all — held in memory for the one request and discarded when it is answered
Server request logs, including IP addresses
Only as long as needed to operate, secure and debug the service, then deleted
Device identifier, free-tier counter, subscription status
While the app is in use, and up to 24 months after the last request
Your linked Friend ID, nickname and match list
Until you unlink the profile in the app, or ask us to delete it
Player cards (other players' public profile data, and your games together)
30 days after they were last fetched, and deleted when you unlink
Match details (the public data of one match, all ten players)
Kept, because a finished match never changes; removed on request
Contributed draft photos
Up to 24 months, or until you ask us to delete them
Crash and usage diagnostics
90 days
7. Your rights and choices
Under the GDPR you can ask us to give you a copy of your data (Art. 15), correct it
(Art. 16), delete it (Art. 17), restrict or object to how we use it (Arts. 18 and 21), and
provide it in a portable form (Art. 20). Where we rely on your consent you can withdraw it at
any time in the app: Settings → Improve recognition for contributed photos, and
Settings → Your data for diagnostics.
Because there is no account, we can only find your data if you tell us your device
identifier. Open Settings → Your data in the app, tap the row to copy the
identifier, and email it to support@maxk0123.com saying what
you would like us to do. We respond within one month.
If you are a Dota 2 player who appears in someone's match, you can
object to our showing your data or ask us to delete it: email us your Friend ID at
support@maxk0123.com. You can also turn off
Expose Public Match Data in Dota 2's settings; once the data sources reflect that,
new player cards and match details no longer show your nickname or statistics.
You may also lodge a complaint with the data protection authority of the country where you
live or work.
8. Children
Dota Addiction is not directed to children and we do not knowingly collect data from anyone
under 16.
9. Security & international transfers
Data sent between the app and our servers is encrypted in transit (HTTPS). No method of
storage or transmission is perfectly secure, but we take reasonable measures to protect your
data. Our servers are in Germany and diagnostics are processed in the EU. Where a provider
processes data outside the EEA — RevenueCat, in the United States — that transfer is covered by
the European Commission's Standard Contractual Clauses; write to us for a copy of the
safeguards in place.
10. Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date above
when we do, and where a change concerns something you consented to we will ask you again in
the app.