Privacy Policy

01Who processes your data

The controller under the General Data Protection Regulation (GDPR) is [to fill in: company name], [to fill in: street and number]. For any privacy question and to exercise your rights, write to [to fill in: email]. More details about the operator are in the legal notice (Impressum).

02Which data we process

Steam sign-in

Your Steam ID (SteamID64), which Valve sends us after you sign in. From the Steam Web API we fetch public profile data: your Steam name (only as a nickname suggestion), avatar and country, if they are public.

Profile

The nickname and country you choose, the date and version of the terms you accepted, the date of your last nickname change, your role (player, moderator…).

Game

Matches (teams, map, region, result, time), ELO and level, per-match stats (kills, deaths, assists, damage, headshots, rounds), map veto, the regions you chose and your time in queue, parties and invites.

Communication and moderation

Party and match chat messages, reports you file and reports about you, suspensions (reason, duration) and records of moderator actions.

ZENTRA Guard

Linked PCs (device tokens are stored only as a hash), app version, time of the last signal and the check results described in the ZENTRA Guard EULA: whether CS2 is running, names of programs found from a list of known cheating tools, debugger, Windows version, TPM, Secure Boot, test mode, kernel debugging, virtual machine.

Technical data

IP address and browser data in server logs (security and troubleshooting). When you link ZENTRA Guard we compare the IP address of the request with yours to warn you about someone else's linking attempt. The CS2 server sees your IP address like any online game server.

03Why, and on which legal basis

• Account, matchmaking, match servers, stats, leaderboard, chat and notifications: performance of our contract with you (Art. 6(1)(b) GDPR).
• Anti-cheat (ZENTRA Guard), fair play, moderation, reports, abuse prevention and platform security: our legitimate interest, and every player's, in fair matches (Art. 6(1)(f) GDPR).
• Keeping data the law requires (e.g. bookkeeping for prize payouts): legal obligation (Art. 6(1)(c) GDPR).

Your public profile is part of the service: nickname, avatar, flag, ELO, level, stats and match history are visible to everyone, including on the leaderboard. Your Steam ID, Guard data, reports and suspensions are not public.

We do not take decisions with legal effects solely by automated means (Art. 22 GDPR). Matchmaking and the system check for the queue are automatic, but a suspension for cheating is always approved by a moderator; ZENTRA Guard on its own only opens a report.

04Who else receives data

• Hetzner Online GmbH (Germany), our hosting provider: the servers for the website, the database and CS2 are in the EU. Hetzner processes data only on our instructions (Art. 28 GDPR).
• Valve Corporation (USA) for Steam sign-in: you sign in directly with Valve, under Valve's privacy policy, and we receive your Steam ID and public profile data from Valve.
• Other players see your public profile, and your chat messages in a match or party.

We do not sell data, do not use it for advertising and do not send it to analytics services.

05Transfers outside the EU

We store data in the EU. Data only goes to the USA in connection with Steam: when you sign in with Valve, and when we request your public profile data through the Steam Web API (we only send your Steam ID).

06How long we keep data

• Account data, chat messages and ZENTRA Guard devices: as long as the account exists. After a deletion request and the 30-day wait, the account is anonymised.
• Match results and stats: permanently, but after account deletion without your name (an anonymous nickname is shown), because other players' ELO and stats depend on them.
• The ZENTRA Guard “active” signal: about 30 seconds after the last heartbeat; the latest check results per device: until the device is unlinked or the account is deleted.
• Reports, suspensions and moderation records: as long as they are needed for fair play and security. While a suspension is active, your Steam ID and the suspension are kept even if you ask for deletion, so the suspension cannot be dodged with a new account (Art. 17(3) and Art. 6(1)(f) GDPR).
• Server logs: only as long as needed for security and troubleshooting, at most 30 days.

07Deleting your account

You delete your account in Settings → Privacy and data. After 30 days (you can cancel until then) we erase your Steam ID, nickname, Steam name, avatar, country, chat messages, ZENTRA Guard devices, party and invites, and the account becomes an anonymous record. Only data without your identity that others need (match results) or that security and the law require is kept.

08Your rights

• Access (Art. 15) and portability (Art. 20): download all data about your account as JSON in Settings → Privacy and data.
• Rectification (Art. 16): change your nickname and country in Settings; for anything else, write to us.
• Erasure (Art. 17) and restriction of processing (Art. 18).
• Objection (Art. 21) to processing based on legitimate interest.
• Complaint to a supervisory authority: in Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (www.dsb.gv.at); you can also contact the authority in the country where you live.

Send your request to [to fill in: email]. We answer within one month at the latest.

09Cookies and local storage

We only use cookies that the website needs to work, so no consent is required for them (§ 165(3) of the Austrian TKG 2021). There are no analytics, advertising or tracking cookies, neither ours nor anyone else's.

zentra_session

Keeps you signed in (httpOnly, signed). Valid for 30 days or until you sign out.

zentra_lang

Your language (Serbian / English). Valid for one year.

zentra_theme

Your theme (system / light / dark). Valid for one year.

zentra_nav

Whether the side menu is collapsed. Valid for one year.

Local storage

The regions you last picked for matchmaking. Stays in your browser only.

The Steam sign-in page belongs to Valve and uses Valve's cookies, under Valve's rules.

10Age

ZENTRA is for people aged 16 and over. We do not knowingly collect data from younger people; if we learn that an account belongs to someone younger, we delete it.

11Security

All traffic uses HTTPS. ZENTRA Guard device tokens are stored only as a hash on our side and encrypted for your Windows account in the app. Only authorised roles can access moderation data, and every action they take is logged.

12Changes

When what we process, or how, changes, we update this text; the effective date is at the top of the page. We announce important changes on the website.