Privacy notice
Last updated 2 October 2026
This notice explains what CSGrind stores about you, why, where and for how long, whether or not you have signed up. CSGrind is run from Denmark, so the EU General Data Protection Regulation (GDPR) and Danish law apply. Questions and requests: the contact address that will be published on this page before public launch.
In short
- We store the minimum needed to show Counter-Strike 2 profiles and analyse matches.
- There are no ads, no analytics or tracking scripts, and no third-party cookies.
- All data is stored with Hetzner Online GmbH, data centres in Germany (EU).
- You can hide your public profile or delete your account at any time.
If you sign in with Steam
- Account: your SteamID64, Steam display name and avatar, when you first and last signed in, and whether you have hidden your profile. Steam sign-in never gives us your password or e-mail address.
- Session cookie: one strictly necessary, encrypted cookie (
csg_session) keeps you signed in for up to 30 days. It holds your SteamID64 and account number only. - Match import (if you connect it): your Steam match-history authentication code, encrypted at rest, and your latest match share code. We use them only to ask Steam for your next match share codes. We also store the import status and the list of matches found.
- Uploads: demo files you upload, with file name, size and checksum.
If you never signed up for CSGrind
You can appear on CSGrind without an account, because a match you played was imported by another player, or because someone looked up your public Steam or FACEIT profile. In that case we process:
- From match demos: your SteamID64, in-game name, team, per-match statistics, Premier rating at the time of the match, and the per-match values of Neok's checks.
- From Steam: public profile data (display name, avatar, profile visibility, account creation date and country if your profile shows them) and the ban counters Steam publishes.
- From FACEIT: public profile data (nickname, avatar, country, level, Elo, recent match statistics) and ban records FACEIT publishes.
We rely on our legitimate interest (GDPR Art. 6(1)(f)) in showing match statistics and integrity checks to the players who share those matches. We use publicly available or match-recorded data only, and we don't publish lists of players, numeric scores or unreviewed Neok results.
Why we use the data
| Purpose | Legal basis |
|---|---|
| Sign-in, match import, uploads and your account settings | Providing the service you asked for (Art. 6(1)(b)) |
| Player profiles, match pages and search | Legitimate interest (Art. 6(1)(f)) |
| Neok checks and human review | Legitimate interest (Art. 6(1)(f)) in fair play, with the safeguards described on How Neok works |
| Security, abuse prevention and rate limiting | Legitimate interest (Art. 6(1)(f)) |
Automated checks and human review
Neok runs automated checks on match demos. No automated result is shown publicly: a finding becomes visible only after two people have reviewed the evidence, and the account owner can ask for a new review. CSGrind takes no automatic action against anyone: no bans, reports or notifications to third parties.
Where data is stored and who receives it
- Servers and databases: Hetzner Online GmbH, data centres in Germany (EU). Nightly database backups are kept for 7 days.
- We request data from the Steam Web API (Valve) and the FACEIT Data API. Those requests contain SteamIDs or FACEIT IDs; we don't send them anything else about you.
- Fonts are bundled with the site, so loading a page doesn't contact Google or any other third party.
- We don't sell or share personal data with anyone else.
How long we keep it
- Demo files: deleted after analysis, unless the match is part of an open Neok review or a reviewer-confirmed finding.
- Match statistics and Neok check values: for as long as the match page exists.
- Cached Steam and FACEIT data: refreshed automatically, from minutes to hours.
- Review records: up to 24 months after the review is closed.
- Your account: until you delete it. Deleting it removes your stored authentication code and match-import link at once and closes your account.
- Backups: 7 days.
- Recent searches: only in your own browser (local storage), never on our servers.
Your rights
You can ask for access to your data, a copy of it, correction, deletion or restriction of its use. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Right to object. You can object at any time to our use of your data based on legitimate interest, including profiles and Neok checks. If you have a Steam account, sign in and hide your profile on the account page. Otherwise contact us at the contact address that will be published on this page before public launch.
Hiding your profile removes your profile page and takes you out of search. You still appear, without a link to your profile, in the scoreboards of matches other players imported.
Changes
We update this notice when what we do changes, and change the date at the top.