1. Data controller
OVERSKILL.gg operates this service and processes the personal data described in
this policy as the service operator. The privacy contact channel is in
section 12.
2. Data we process
- Steam identity: when you sign in with Steam (OpenID) we process your
SteamID, your public profile, your VAC status, your CS2 hours, your account
age, and your persona name (including the name-benefit tag, if you activate
it).
- Email address (optional): if you verify it, we use it for claiming prizes,
account recovery, service communications, and legal obligations.
- Wallet address: the address of the wallet you connect; it is public
on-chain.
- Steam trade URL: collected only when you claim a skin prize (from a
raffle win or a redeem code) so we can deliver it via a Steam trade offer.
- IP and technical data: for security, fraud prevention, and latency
measurement.
- Gameplay and match data: demos, logs, and match events, stored on Amazon
Web Services.
- Elo and rank: your rating per format and season.
- Analytics: via Google Analytics 4, only with your consent (see the
Cookie Policy).
3. Purposes and legal bases
- Performance of the contract: playing, matchmaking, and settling matches.
- Legitimate interest: security, anti-cheat, and fraud prevention.
- Consent: analytics and, where applicable, optional marketing
communications.
- Legal obligation: compliance with applicable law.
4. Processors and recipients
The following process data on our behalf:
- Google — Google Analytics 4;
- Valve / Steam — authentication;
- CSRep — reputation (Trust Rate) derived from your SteamID;
- Alchemy and Infura —
RPC node providers;
- Amazon Web Services — demo and log storage;
- Render — hosting;
- DatHost — CS2 servers.
On-chain operations are public by the very nature of the blockchain.
5. On-chain data
Your wallet address, your entries, and settlements are recorded publicly,
permanently, and immutably on the BASE network. As a result, the rights to
erasure and rectification are limited for on-chain data. Match history is
anonymized (the wallet is replaced by a hash), not deleted, because deleting
it would affect your opponents’ history.
6. Analytics data minimization
We never send third-party analytics the exact amounts of entries or prizes,
wallet addresses, or individual payouts.
7. International transfers
Some processors (for example, Google) may process data outside the European
Economic Area. In those cases, appropriate safeguards apply, such as the European
Commission’s Standard Contractual Clauses.
8. Retention
We keep data while your account is active and for the applicable legal periods.
Audit records (audit_events), match events (match_events), and on-chain
records are never deleted; all other data is deleted or anonymized.
9. Your rights
You have the right to:
- access your data;
- rectify it;
- erase it;
- object to its processing;
- restrict its processing;
- data portability;
- withdraw your consent at any time;
- lodge a complaint with the competent supervisory authority.
These rights are subject to the on-chain limitation described in section 5.
10. The right to be forgotten: how to exercise it
Deletion is requested through the official Discord. The account is marked for
deletion for 30 days, and after that period personal data is permanently deleted.
11. Minors
The service is for adults (18 or older). We do not knowingly process minors’
data.
Privacy requests are handled through the official channels of OVERSKILL.gg
(including the official Discord and the support paths published on the site). If
a dedicated privacy contact or Data Protection Officer is designated, it will be
communicated through those same channels.
13. Changes
We may update this policy. Material changes are communicated and the current
version is identified at the top of this document.