Privacy policy
HomeUpdated 2026-04-23 · Covers the DEMOttU service (demot.berg-it.fi).
Data controller
What we collect
- Steam profile (at sign-in via Steam OpenID): SteamID64, display name, and profile avatar URL.
- Optional settings: your Steam authentication code and last-known sharecode if you use the Valve match history walk. Stored in
UserSettingsand visible only to you. - Match history: share codes (Valve) or match_ids (FACEIT) you fetch are saved as
MatchHistoryEntryrows so you can come back to them later. - Demos you import: the file itself, parsed metadata (map, tickrate), and the kill events inside it. Kill rows also contain other players' SteamIDs and names — that's demo content, not personal data we collect about you.
- Clips generated by the recorder (
ClipJobrows + mp4 files). If you share a clip through the public/s/{token}URL, the token is random and does not reveal your identity. - Cookies: one authentication cookie (
.AspNetCore.Cookies) that expires after 30 days. No tracking, no analytics, no third-party cookies.
Purpose of processing
- Authenticate you via Steam OpenID.
- Fetch match history from Steam's and FACEIT's APIs on your request.
- Parse demos and generate POV clips you queue.
- Operate the service and diagnose issues from server logs (contain at most your SteamID64 and request timestamps).
Legal basis is GDPR Art. 6(1)(b) — performance of the service you request — and 6(1)(f) — legitimate interest in operating and securing it.
Third parties
- Valve / Steam: Steam OpenID (sign-in) and Steam Web API (profile name & avatar, optional match history). On your request, the service downloads demos from Valve's CDN (
replayN.valve.net). - FACEIT: Data API (optional match history + signed demo URLs) and their CDN, from which demos are fetched server-side for parsing.
- Google Fonts: the landing page loads Outfit, Space Grotesk, and JetBrains Mono from Google's CDN. Your IP address is exposed to Google for the duration of the font request.
We don't sell your data. We don't use advertising or analytics services.
Retention
Your data is kept as long as your account exists. When you delete your account, the demos you own, clips, match-history rows, and settings are removed from the server on the next request. Server logs rotate within 30 days.
Your rights
Under GDPR Arts. 15–22 you have the right to:
- receive a copy of your data (contact us by email);
- correct inaccurate data;
- request erasure (“right to be forgotten” — self-serve below);
- restrict or object to processing;
- data portability;
- lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Sign in with Steam to see the self-serve erasure option.