Privacy Policy

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Christian Küsters (Analyseboard)
Escheln 90c
47906 Kempen
Germany

Contact: support@analyseboard.com. Further details in the imprint.

2. General Information

We process personal data only as far as necessary to provide the Warcraft III analysis and its features. The legal bases are Art. 6(1)(b) GDPR (terms of use, account features) and Art. 6(1)(f) GDPR (legitimate interest in secure operation and in analysing publicly available game data). Warcraft III accounts are fully separate from all other accounts on the platform: separate registration, separate sign-in, no linking of the data sets.

3. Hosting and Email Delivery

The application runs in a container environment at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Emails (address confirmation, password reset, account notices) are sent via lima-city (Bereich Internet) GmbH, Mannheim, Germany. Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.

4. Cookies and Local Storage

We only use technically necessary cookies (§ 25(2) no. 2 TDDDG); no consent is required for them.

• Session cookie — keeps you signed in between page views.
• CSRF protection — protects forms and actions against cross-site request forgery.
• localStorage "dt_lang" — your display language (DE/EN).
• localStorage "dt_being_accent" — your accent colour in the Being area.

We do not use tracking, marketing or analytics cookies, and there is no third-party tracking.

5. Warcraft III Account

When you register and use a Warcraft III account, we process:

• Username and email address
• Password (stored only as a BCrypt hash, never in plain text)
• Battletag (required in the Being area, optional otherwise) — used to match you to your league or ladder games
• Timestamps of registration, acceptance of the terms, email confirmation, last sign-in and last activity
• Access status (Being league, pro area, requests) and a change log for it

To secure sign-in, we log sign-ins, sign-outs and failed sign-in attempts with time, IP address and browser identifier. To prevent abuse (e.g. mass registrations, mail bombing, password guessing), we briefly count requests per IP address and per target address. Legal basis: Art. 6(1)(b) and (f) GDPR.

Access to the Being league is granted by the league team; for this, your account may be linked to your player profile at BeingEsports. Unconfirmed accounts are deleted automatically after a few days. You can delete your account yourself at any time on the account page; this also removes your uploaded replays and anonymises the change log.

6. Replay Uploads (Pro Area)

When you upload a replay file, we store the file, its file name, its checksum and the game data read from it (including the other players' battletags, races, build orders and actions). Your uploads are visible only to you. They are kept until you delete them or your account. Legal basis: Art. 6(1)(b) GDPR.

7. Data Sources and External Services

W3Champions

Purpose: retrieving public ladder, profile and game data (rankings, match history, replays) for the pro views, player search and scouting.
Data transmitted: the requests are made by our server; only the requested battletags or game IDs are transmitted, no data from your account.
Legal basis: Art. 6(1)(f) GDPR.

BeingEsports

Purpose: importing the league data (seasons, divisions, schedule, results, player names, battletags) and league replays for the Being area.
Data transmitted: no data from your account; data only flows from BeingEsports to us. League data is visible only in the Being area.
Legal basis: Art. 6(1)(f) GDPR (running and analysing the league).

Liquipedia

For pro players we link to their Liquipedia page. The external page is only loaded when you click the link; Liquipedia's privacy policy applies there.

8. Public Player Data

The analyses show players' game names (battletags), results and play styles as they appear in public rankings, league tables and replays. Scouted players nobody requests any more stop being updated after a while; scout requests are deleted after 30 days. If you object to how you are shown as a player, write to support@analyseboard.com (objection under Art. 21 GDPR).

9. Storage Periods

• Account data: until the account is deleted; unconfirmed accounts after a few days.
• Replay uploads: until you delete them or your account.
• Scout requests: 30 days.
• Abuse counters (IP address, target address): at most one day.
• Session cookie: until you sign out or the session expires.

10. Your Rights

Under the GDPR you have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

An informal message to support@analyseboard.com is sufficient. Without prejudice to other remedies, you may lodge a complaint with a data protection supervisory authority; the authority competent for the controller's seat is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

11. Changes

We update this privacy policy whenever legal requirements or features change. The version available at this address applies.