wdid.gg privacy notice

This notice says what wdid.gg holds about you, why, who else touches it and what you can ask for. It covers the closed beta.

Who is responsible

wdid.gg is run by Ulrik Gammelby, Denmark. Contact: [email protected]

That is the data controller under the GDPR. There is no company behind it and no data protection officer; questions go to the address above.

What is held

From your Steam account: your SteamID, your persona name and your avatar.

To fetch your matches: your Counter-Strike 2 match share code and your game authentication code. The authentication code is a real credential. It is encrypted before it is stored and is never shown again, not even to you.

From the matches themselves: the demo file, the events in it, the positions and actions of everyone in the match and the coaching written from them.

While you use the site: the usage records described in the beta terms under "What we record while you use the beta". They are tied to your account and nothing else.

Why, and on what legal basis

To provide the service (GDPR Article 6(1)(b), performance of a contract): the Steam identifiers, the match data and the coaching. Without these there is no service to provide.

To run and improve the beta (Article 6(1)(f), legitimate interests): the usage records. The interest is finding what is broken and what nobody uses in software that is explicitly a beta. A written assessment of that interest against your rights is kept and can be requested. You can object to this processing at any time, and rather than weighing your objection we simply stop: the switch under Account does it immediately.

Who else handles it

Model providers. Coaching text is generated by a large language model. The providers that may be used are xAI, OpenAI and Anthropic. What is sent for a given moment includes the map, the positions and actions in that moment, and the names and SteamIDs of the players involved, which means players other than you.

Steam. wdid.gg signs in to the Counter-Strike 2 game coordinator to turn your share code into a match, using your game authentication code. This is automation of your own access, done on your behalf.

Hosting. The database, the demo files and the analysis run on a server in the European Union, provided by Hetzner. The web front end and the API run on Cloudflare.

Other players in your matches

A match has ten players. wdid.gg stores the SteamID and name of all ten, because that is what a demo file contains and what makes the analysis mean anything. Those nine other players did not sign up. If you are one of those players and want your data removed, write to [email protected] and it will be removed.

This is a known gap in the beta and it is being worked on rather than explained away.

The wait list

wdid.gg is invite-only. If you asked for an invite without holding one, what is kept is your email address, the day it was given, the door it came through, whether an invite has been sent, the code that was sent and a short note the owner may add about the request. That is the whole record.

The address is held because you gave it for this one purpose (Article 6(1)(a), consent): being written to once, by hand, when there is room. There is no newsletter, no automated mail and no other recipient.

The row is deleted once the invite has been used, and sooner whenever you ask: write to [email protected].

What is stored in your browser

A sign-in token, so you stay signed in. That is necessary for the site to work at all, so it is not something you are asked to consent to separately.

The usage records use no browser storage of any kind. The identifier that ties one visit together lives only in the page's memory and is gone when you close the tab or reload.

How long things are kept

  • Usage records: 90 days.
  • Your account, matches and coaching: until you ask for them to be deleted.
  • The encrypted game authentication code: until you unlink or delete your account.
  • A wait list address: until the invite is used, or until you ask for the address to be removed.

Your rights

You can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, object to the usage records or complain to Datatilsynet, the Danish data protection authority.

For the usage records specifically, the Account switch is the fastest route and needs no request.

Write to [email protected]. There is no automated export yet, so a request is answered by hand.

Changes

The version at the top of this notice changes when the text does. If a change matters, you will be asked to read it before carrying on.

Version 2026-09-04. See also the beta terms.