Legal
Privacy policy
What we store about you, why we are allowed to, how long we keep it and how to make us delete it.
Last updated: 5 August 2026
Who is responsible
The controller of your personal data is the KLR operator. Questions about your data go to info@klr.gg. We are a small private project and have not appointed a data protection officer, because we are not required to.
What we store and why
| Data | Why | Legal basis |
|---|---|---|
| Steam ID (steamid64), display name, avatar URL | Identify you when you sign in and show who you are in your lobby | Performance of the service you asked for (Art. 6(1)(b) GDPR) |
| Email and password hash (admin accounts only) | Sign in without Steam and administer the site | Performance of a contract / legitimate interest in running the site (Art. 6(1)(b), (f)) |
| Sign-in timestamps (first seen, last sign-in) | Show admins who uses the site and spot suspicious sign-ins | Legitimate interest in security (Art. 6(1)(f)) |
| Session cookie (signed token, no personal data inside beyond your account id) | Keep you signed in between pages | Strictly necessary for a service you requested |
| Match statistics from the game server (kills, deaths, damage, rounds, per map), linked to a Steam ID | Compute the lobby ratings — the point of the site | Legitimate interest of the lobby and its players (Art. 6(1)(f)) |
| Public Steam profile data: CS2 playtime, number of owned games, CS2 inventory size, friend list, account creation date | Show your profile, and let your Steam friends find the lobbies they can join | Legitimate interest in a useful profile (Art. 6(1)(f)) — the data is what Steam already publishes |
| Acceptance of the terms: version, time, IP address, browser user agent | Prove which version of the rules you agreed to | Legal obligation / legitimate interest in provable consent (Art. 6(1)(c), (f)) |
We do not collect analytics, we do not run ads, we do not profile you for advertising, and there is no automated decision-making with legal effects. Ratings are statistics about a game, not a decision about you.
What Steam tells us
When you sign in we read what your Steam profile already makes public: display name and avatar, when the account was created, CS2 playtime, how many games you own, the size of your CS2 inventory and your friend list. If your profile or inventory is private, we get nothing and the fields stay empty — that is your setting to make, on Steam.
Your friend list is used for one thing: if a Steam friend of yours also uses this site, you see their name and the lobbies they play in, and they see yours. Statistics stay closed — opening a lobby still requires being in it.
Where the match data comes from
Match statistics are produced by the CS2 game server your lobby plays on (MatchZy result files and server logs). The lobby administrator uploads or connects that data. If you play on that server, your Steam ID appears in it. You can ask the lobby administrator, or us, to remove you from a lobby’s statistics.
Who else sees it
Nobody outside your lobby. There is no public leaderboard: a lobby is visible only to its administrator, to the super administrators of the site, and to players whose Steam ID appears in that lobby’s statistics.
Technical recipients: a hosting provider in the EU (stores the database and serves the site) and Valve Corporation (only during Steam sign-in — Steam tells us your Steam ID; we never see your Steam password). Nothing is sold or shared for marketing.
How long we keep it
Account data (Steam ID, name, avatar, sign-in times) is kept while your account exists and is erased immediately when you delete it. The session cookie expires after 30 days, or when you sign out. Match statistics stay with the lobby for as long as the lobby keeps them, because they are records of games that were played.
Your rights
Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to info@klr.gg.
You can delete your account yourself at any time on the account page.
You also have the right to lodge a complaint with a data protection supervisory authority.
Is providing data required
Signing in with Steam is required to use the site, because the whole service is built around matching your Steam ID to your lobby. If you do not sign in, you can read the public pages and nothing else. There is no contractual obligation to provide anything beyond that.
Changes
If this policy changes, the date at the top changes with it. Material changes will be announced on the site before they take effect.