1. Data controller
The controller responsible for your personal data is Pausiar, operating ProStack CS2. Privacy requests can be sent to pausilvest@gmail.com.
A postal address is available on request from the contact email. Add a full operator address before commercial launch if your jurisdiction requires one.
2. Data we collect
- Steam account data: Steam ID64, display name, avatar, profile URL and public profile information returned by Steam OpenID.
- CS2 statistics: public game statistics retrieved through the Steam Web API, such as kills, deaths, headshots, accuracy, wins, hours and weapon usage.
- Stack data: stack names, descriptions, invite codes, membership, roles and any notes or strategies you create.
- AI review data: the stack, player names, statistics and prompts needed to generate an optional AI review, plus the generated result.
- Subscription data: plan, status, renewal dates and Stripe customer/subscription identifiers. We never receive or store full card numbers.
- Technical data: IP address, request timestamps, user agent, request identifiers and error logs used for security, rate limiting and debugging.
- Consent data: your cookie choices, the consent version and the time you made your choice.
3. Why we use data and our legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Sign you in with Steam and maintain your session | Steam account data, session cookie | Performance of a contract (Art. 6(1)(b) GDPR) |
| Provide analytics, stacks, strategies and notifications | Steam data, CS2 stats, stack data | Performance of a contract |
| Generate optional AI reviews | Stack data, player names, statistics | Performance of a contract or your consent when you trigger the feature |
| Process subscriptions and payments | Subscription data, billing metadata | Performance of a contract, legal obligations |
| Secure the service, prevent abuse and rate-limit requests | Technical data, IP address | Legitimate interests (Art. 6(1)(f) GDPR) |
| Measure product usage (optional) | Pseudonymous event data | Consent (Art. 6(1)(a) GDPR) |
| Show affiliate links and measure marketing (optional) | Consent state, click data on the partner site | Consent where required |
| Comply with legal claims and applicable law | Relevant records | Legal obligation, legitimate interests |
4. AI-assisted reviews
AI reviews are optional. When you request one, we send the stack name, player display names, aggregated/public CS2 statistics and your selected analysis focus to Groq, our AI inference provider. Groq processes the request to return generated text. We do not use your data to train public AI models, and we do not make decisions with legal or similarly significant effects about you based solely on automated processing. AI output can be incomplete or wrong; you decide whether to use it.
7. International transfers
Some providers are located outside the European Economic Area. Where required, transfers rely on an adequacy decision or Standard Contractual Clauses and supplementary safeguards. You can ask us for more information about the safeguards used for a specific provider.
8. How long we keep data
- Account and stack data: until you delete the relevant stack or request account deletion, then for a short period in backups.
- AI reviews: until deleted by you or your account is deleted, unless a shorter retention period is configured.
- Billing records: as long as tax and accounting law requires (normally 6–10 years depending on jurisdiction).
- Security and request logs: normally up to 90 days, unless needed to investigate an incident.
- Consent records: for as long as the consent is relied on, plus a reasonable evidence period.
9. Security
Sessions are signed and stored in HTTP-only cookies. We apply same-origin checks to state-changing requests, rate limits, input validation and security headers. No online service is perfectly secure; if you believe your account or our service has been compromised, contact us immediately.
10. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data (right to erasure).
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting prior processing.
- Lodge a complaint with a supervisory authority.
You can exercise these rights by emailing pausilvest@gmail.com. We may need to verify that the request relates to your Steam account. EU/EEA users can complain to Agencia Española de Protección de Datos (AEPD) (https://www.aepd.es) or their local authority.
11. Age limit
The service is not intended for children under 16. If you are below the digital-consent age in your country, you may not create an account. If we learn that we hold data from a child below this age, we will delete it.
12. Changes to this policy
We may update this policy when the service or the law changes. The version and date at the top of this page show the current text. Material changes will be announced in the product or by email where appropriate.
13. Contact
Privacy questions and requests: pausilvest@gmail.com. Security reports: pausilvest@gmail.com.