PRIVACY NOTICE · PRE-RELEASE

Data processing

Revision dated August 24, 2026

Data we use

SteamID64 and the derived account ID, public Steam display name and avatar, selected contracts, final statistics for linked matches, verification states, XP, technical audit records and server-side sessions. We do not request your Steam password, payment data, Steam email or private messages.

Purposes

Authentication, daily-board creation, locating the first eligible match after a case is locked, evaluating structured conditions, preventing duplicate rewards, troubleshooting and protecting the service.

Sources and processors

Identity is verified through Steam OpenID. Public name and avatar may be retrieved through the Steam Web API. Final match statistics come from a community-operated Deadlock API. The service runs with the hosting provider selected by the project owner.

Companion telemetry

The Overwolf Companion transmits your own supported GEP signals, Match ID, mode, phase and bounded diagnostic statistics. Client telemetry is provisional and cannot independently complete a contract or grant XP. Diagnostic output redacts roster and Steam identifiers.

Retention and deletion

Data is retained until account deletion or the end of testing unless longer retention is required for security or dispute handling. Account deletion is available in Data & Account. Backups may remain until scheduled rotation completes.

Security and contact

Controls include HTTPS, HttpOnly/Secure/SameSite cookies, CSRF protection, hashed sessions, access control, raw-data minimization, internal PostgreSQL and container isolation. No system can guarantee absolute security. Questions: contact loading….