Who we are and what this covers
Rozterz collects only what it needs to run Dota 2 tournaments and its player community, and never sells it or shows ads. This policy covers the Rozterz website and its services: what personal data we collect, why, who sees it, and what you can ask us to do.
Rozterz ("we") is based in Hyderabad, India. We are the data fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
This is version 1.1, in effect from [date]. Parts in square brackets are still to be filled in, and a lawyer should review the whole before it is published.
What we collect
We collect what you give us, what Steam and OpenDota publish about your account, and a few records our servers keep.
| Data | What it is | Where it comes from |
|---|---|---|
| Account | Your email address, and the six-digit sign-in codes we email you | You |
| Sessions | When you signed in, your IP address and your browser's name (user agent) | Your browser |
| Profile | Gamer name, real name, phone number | You |
| Games and ratings | The games you play, your rating in each (such as Dota MMR), where it came from and which admin verified it | You, your Dota medal, Rozterz admins |
| Steam account | SteamID, Steam name, profile link, picture, country, whether the profile is public, when the account was made, Dota medal, leaderboard rank, Dota Plus | Steam and OpenDota, when you connect or refresh Steam |
| Picture | A picture you upload in place of your Steam one | You |
| Agreements | Which of our documents you accepted, which version, when, and your IP address and browser at that moment | You |
| Communities | Communities you submit or help run (name, address, tagline, description, games, icon and Discord invite), the communities you're in and your role in each, your requests to join with any note, and invitations you send or get | You, and the owners and managers of communities |
| Notifications | What we tell you on Rozterz and when you read it, whether we emailed it, and your choices about email and news, with when you made them | Rozterz, and you |
| Server records | Request logs (the address asked for, the answer's status and time) and a log of our calls to Steam, OpenDota and Eusend. Neither holds your name or contact details | Our servers |
We don't collect payment details, your precise location, your contacts, or anything on your device beyond what your browser sends with each request.
How we use it
We use your data to run your account, verify who you are as a player, and run fair tournaments, on the consent you give when you register.
- Sign you in and keep you signed in: your email, the codes we send to it, and your sessions.
- Show you to other players: your gamer name, picture, games and Dota medal.
- Verify players and ratings: one Steam account per Rozterz account, your medal to estimate your MMR, and an admin's check of it.
- Run tournaments by the Rozterz Rulebook: sign-ups, team formation (the auction uses MMR), check-ins, results, disputes and penalties.
- Run communities: list the communities Rozterz admins approve, show a community's owner and admins who asks to join, and show its members who else is in it.
- Contact you: on Rozterz about your account and your communities, by email only for the kinds of notification you turn on, and by phone when a tournament you're in needs you, for example when a match is about to start.
- Send you news: Rozterz news and product updates, only if you asked for them, on the site and by email.
- Keep Rozterz fair and safe: spotting shared, duplicate or smurf accounts, cheating and abuse, and enforcing the Terms and the Rozterz Rulebook.
- Meet legal duties: answering lawful requests and keeping records the law asks for.
We don't sell your data, show ads, or build marketing profiles. We use data for a new purpose only after asking you.
Who can see what
Your real name, phone number and email are private to you and Rozterz admins. Other players see your player identity.
| Who | What they can see |
|---|---|
| Other players and visitors | Your gamer name, picture, games, ratings and Dota medal, wherever Rozterz shows players: rosters, auctions, brackets and results |
| Anyone, on a listed community's page | The community's details, and the gamer names and pictures of its owner and managers |
| A community's members | Who else is in it, each member's role, and when they joined |
| A community's owner and managers | Requests to join it, with any note, and the invitations it sent |
| You | Everything on your profile, your Steam details, and your notifications |
| A tournament's Organising Team | What their role needs to run the tournament you play in, such as your verified MMR and availability |
| Rozterz admins | Everything, including your real name, phone number, email, sessions, agreements and notification choices, and every community, including ones waiting for review, to verify players and run the platform |
Tournament records stay inside the community that runs the tournament. Under the Rozterz Rulebook, rosters, evidence and integrity records are seen only by that community's Organising Team, never by other communities or on your public profile (RR-D2-2.7 and RR-D2-10.7).
Services we share data with
Four kinds of service handle parts of your data for us, each only for the job below, and some of them work outside India.
| Service | What it does for Rozterz | What it receives |
|---|---|---|
| Eusend | Sends our emails, such as sign-in codes and the notifications you chose to get by email, from servers in the EU | Your email address and the email's content |
| Valve (Steam) | Confirms your Steam sign-in on Steam's own page, and returns your Steam profile | Your SteamID. You sign in on Steam, so we never see your Steam password |
| OpenDota | Reads your public Dota profile, medal and leaderboard rank | Your Dota account number, which comes from your SteamID |
| [Hosting provider] | Runs the website, its services and database, in [region] | Everything we store |
Each service handles your data under its own privacy policy. We share data with the police, courts or regulators only when the law requires it, and we tell you when the law allows.
Cookies
Rozterz sets three cookies, all needed for the site to work, and no analytics, tracking or advertising cookies.
| Cookie | What it does | How long it lasts |
|---|---|---|
rozterz.session_token |
Keeps you signed in | 7 days, renewed while you use Rozterz |
rozterz.session_data |
A signed copy of your session, so pages load without looking it up each time | 5 minutes |
rozterz.after_register |
Remembers the page you were heading to while you connect Steam | 30 minutes |
On the secure site the two session cookies' names start with __Secure-. Blocking them signs you out.
How long we keep it
We keep your account data until you delete your account, and shorter-lived data only as long as it is useful.
| Data | How long |
|---|---|
| Account, profile, Steam details, ratings and picture | Until you delete your account |
| Sign-in codes | 5 minutes, or until 3 wrong tries |
| Sessions | 7 days after you last use Rozterz, or until you sign out |
| Agreements | Until you delete your account |
| Notifications, and your choices about them | Until you delete your account |
| Your place in communities: memberships, requests and invitations | Until you leave or are removed, the community is deleted, or you delete your account |
| Communities you run | Until its owner or Rozterz deletes it |
| Tournament results and integrity records | For as long as the community keeps its tournament history, under the Rozterz Rulebook (RR-D2-10.7) |
| Log of calls to Steam, OpenDota and Eusend | 90 days |
| Request logs | [30 days] |
When you delete your account, we remove your profile, Steam details and picture within [30 days]. Results of tournaments you played stay in their community's history under your gamer name, unless the law requires otherwise.
Your rights and choices
You can see, correct and delete your data, withdraw your consent, and complain if we get it wrong, as the DPDP Act and similar laws give you.
- See your data: ask for a summary of the personal data we hold about you, what we do with it, and who we share it with.
- Correct it: change your gamer name, real name, phone, games and picture yourself under Edit profile. Ask us to fix anything else, such as a rating you think is wrong.
- Delete it: ask us to delete your account and data. Some records stay as the section above says.
- Choose your emails: turn email on or off for each kind of notification, and Rozterz news on or off, in your notification settings, at any time.
- Withdraw consent: you can withdraw it at any time, as easily as you gave it. Without it, you can't take part in tournaments, so we will delete your account.
- Nominate someone: name a person who can use these rights for you if you die or can no longer act.
- Complain: raise it with VectoR (see Contact and concerns, below). We reply within [30 days]. If you are unhappy with the reply, you can complain to the Data Protection Board of India.
To use any of these, email support@rozterz.com from the address on your account, so we know it's you.
Children
Rozterz is for people aged 18 and over. The DPDP Act requires a parent's verifiable consent before we handle the data of anyone younger, and we don't collect it. If we learn that someone under 18 has an account, we delete it and its data. A parent or guardian who thinks this has happened can write to support@rozterz.com.
Security
We protect your data with encryption in transit, sign-in without passwords, and access limited to the people who need it.
- Every connection to Rozterz uses HTTPS.
- You sign in with a single-use code that expires in 5 minutes, so there is no Rozterz password to steal. You sign in to Steam on Steam's own page.
- Session cookies are signed, and can't be read by the site's scripts.
- Only Rozterz admins can see real names, phone numbers and emails.
- [Database encryption at rest and backups, once the hosting is chosen.]
If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires, with what happened and what you can do.
Changes to this policy
Each version of this policy has a number and an effective date, shown at the top. When we change what we collect or how we use it, we publish a new version and ask you to read and accept it before you next play. Smaller changes, such as clearer wording, take effect when published. Earlier versions are available on request.
Contact and concerns
Write to support@rozterz.com with any question about this policy or your data.
| Concerns and complaints | VectoR, vector@rozterz.com |
| Address | Hyderabad, India |
VectoR is our Grievance Officer under India's Information Technology Rules, 2021.