Privacy

Last updated 2026-08-24.

What signing in with Steam does

Signing in verifies your identity with Steam, then signs your Steam ID into a cookie (lp_session) stored in your own browser for up to 30 days. That cookie — HTTP-only, so no script on this or any other page can read it — is how the site recognises you on later visits. There is no database behind it: nothing about you is stored on our servers at all. The cookie itself is the only record, and it exists only in your browser.

Your rank

Your rank bracket comes from OpenDota, a public, no-key API for your own public Steam profile. Your browser fetches it directly from OpenDota — that request never passes through our servers, and we never see the response.

Live draft

If you set up live draft, a second token is generated — one that only allows Dota to write picks and bans to one draft session. It is not a login and grants no access to your account. You can rotate it at any time from the live draft panel.

What we don't do

No analytics, no advertising, no third-party trackers, and nothing about you is sold or shared with anyone. The site currently runs no analytics of any kind — we do not know how many people visit, what they click, or where they came from.

Cloudflare

This site is served through Cloudflare, which — like any host — logs standard request metadata (IP address, rough location, request timing) for security and performance, under Cloudflare's own privacy policy. That logging happens for every visitor, signed in or not, and is not something this site's own code controls or has access to.

Removing your data

Sign out, or simply clear your cookies — either removes the session immediately and completely, since nothing is retained anywhere else.

Questions

Contact support@thoughtgears.co.uk.