Privacy Policy

Our Privacy Commitment

DotaSense is built with privacy as a core principle. We believe in transparency and minimal data collection. This privacy policy explains what data we collect, how we use it, and your rights regarding your information.

What Data We Collect

1. Local Storage (Browser Only)

The web version of DotaSense stores your core timer preferences locally in your browser using localStorage. This browser-local data includes:

• User Preferences: Your selected theme, volume settings, and notification preferences
• Custom Settings: Timer configurations, hotkey preferences, and custom sounds
• Application State: Current timer values and active events (cleared when you close the app)

Note: localStorage data is stored entirely on your device. We have no access to this information.

2. Website and Product Analytics

We use first-party server analytics and Vercel Analyticsto understand visits, downloads, and product usage. Analytics may include:

• Page Views and Paths: Which DotaSense pages you visit and the path flow during a session
• Download Events: When the app download button is clicked or a download redirect starts
• Interaction Events: Link and button labels clicked on the website; we do not collect form field values for this
• Session Context: Session duration, page count, interaction count, landing page, and exit page
• Request Context: IP address, approximate IP-based city/region/country, user agent, browser, OS, device type, referrer, and UTM parameters

We use this analytics data internally to understand where users are coming from, what they download, and where the website or app experience can be improved. We do not use it for third-party ad targeting or cross-site tracking.

3. Desktop Application

The desktop application stores settings locally on your computer. This includes:

• Application Settings: Saved in your system's application data folder
• Custom Audio Files: Stored locally if you upload custom sounds
• Window Position: Your preferred window location and size
• Optional Local Game State: If you enable match-aware setup, Dota 2 sends selected match, map, player (including Steam ID/name where exposed), hero, ability, item, all-player, and draft fields to DotaSense over localhost
• Optional Local Screen Capture: Draft and scoreboard assistance can capture selected on-screen regions for visual recognition on your computer

GSI payloads and captured screen regions are processed locally and are not uploaded by product analytics. They may leave your device only when you deliberately submit diagnostic material or use an online feature whose interface says that it sends data. The desktop app may also connect to backend services for analytics you opt into, premium licensing, subscriptions, collaboration, authentication, support, and update checks.

4. Optional Desktop Product Analytics

Desktop product analytics are off by default. If you enable “Share anonymous product analytics” in Settings → Privacy, DotaSense creates a pseudonymous installation identifier and sends session and feature-usage events. These can include app version, platform and user agent, language, timezone, screen and viewport dimensions, feature names, timer actions, GSI connection/setup outcomes, and limited match context such as hero, team, game phase, duration, and aggregate end-of-match stats.

Product analytics do not send raw GSI payloads, Steam IDs, match IDs, Dota installation paths, screen captures, custom audio, license keys, or payment details. Turning analytics off stops new collection, clears queued events, and removes the local analytics identifier.

5. Payment, License, and Support Data

If you buy DotaSense Pro Monthly or Pro Annual, Stripe handles checkout, payment method details, invoicing, taxes, and subscription billing. We do not store full card numbers. We may receive and use limited Stripe checkout, customer, subscription, plan, and status identifiers so we can issue licenses, validate active subscriptions, open the billing portal, prevent abuse, and help with support or license recovery.

Support requests may include contact details you choose to provide, order or checkout references, license status, device/app version, screenshots, or diagnostic details needed to resolve the request.

What We DON'T Collect for Core Timer Use

How We Use Your Data

The minimal data we collect is used exclusively for:

• Providing the Service: Storing your preferences to deliver a personalized experience
• Improving the App: Understanding visits, downloads, session flow, and feature usage through internal analytics
• Performance Optimization: Identifying performance issues and improving load times
• Bug Fixes: Understanding where errors occur to improve stability
• Pro Access: Issuing, validating, recovering, and supporting paid Pro subscription licenses

We do NOT use your data for advertising, marketing, or selling to third parties.

Data Sharing & Third Parties

We do NOT sell or rent your data. We use a small number of service providers only to operate the app:

• Vercel Analytics: Privacy-friendly analytics service that does not use cookies or track individuals. See Vercel's Privacy Policy.
• Supabase: Used by desktop features such as analytics, authentication, collaboration, or backend-powered app services. Website analytics may be stored in Supabase for internal review.
• Discord: Used for internal analytics and support alerts, including website visit, session, download, and feedback notifications sent to private team channels.
• Stripe: Used for optional Pro Monthly and Pro Annual subscriptions, checkout, billing, invoices, taxes, the billing portal, and payment-related workflows.

Core timer localStorage data stays on your device. Optional online features may send limited data to DotaSense, Stripe, Supabase, or hosting providers as described above.

Data Security

We take data security seriously:

• HTTPS Encryption: All web traffic is encrypted using industry-standard TLS/SSL
• Minimal Server Data: Core timer settings are local; optional service data is limited to the feature being used
• Backend License Validation: license signing secrets stay on the web backend and are never shipped in the desktop app
• Regular Updates: We keep dependencies updated to address security vulnerabilities

Your Rights & Control

Since we collect minimal data, you have full control:

• Clear localStorage: You can clear your browser's localStorage at any time through your browser settings to remove all saved preferences
• Opt Out of Analytics: Use browser extensions like uBlock Origin or Privacy Badger to block analytics, or enable Do Not Track in your browser
• Delete Desktop App Data: Uninstalling the desktop app or clearing app data removes local preferences
• Desktop Analytics Choice: Product analytics are off by default. Enable or revoke consent at any time in Settings → Privacy
• Payment, License, or Account Requests: Contact us for service data tied to optional online features

Children's Privacy

DotaSense is designed for Dota 2 players, who must be 13 years or older according to Steam's Terms of Service. We do not knowingly collect data from children under 13. Since we don't collect personal information for core timer use, we have no way to verify age. Optional payment, license, support, or account features may process limited personal data.

Transparency

We document privacy-sensitive behavior so you can understand what the app does:

• Release Notes: Changes are published through the release history and website changelog
• Privacy Documentation: This policy describes what stays local and what online services are used
• Security Review: Security-sensitive licensing code is kept server-side instead of embedded in the desktop app
• Support Channel: Questions and requests can be sent through the repository or support link

International Users & GDPR

DotaSense is available worldwide. For users in the European Union:

• GDPR-Aware: Our minimal data collection approach is designed to reduce personal data processing
• Limited Personal Data: Core timer use does not require an account, while optional analytics, premium, support, or authentication features may process limited personal data
• Right to Access: Local timer data is stored on your device; payment, license, account, or support data can be requested through the contact channel below
• Right to Erasure: Clear browser localStorage or app data for local data; contact us for payment, license, account, or support-related requests
• Data Portability: Export localStorage data through browser developer tools, and contact us for service data tied to optional online features

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Major changes that affect your privacy will be prominently announced on our homepage.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

• GitHub Issues: github.com/Shjabbour/dota-releases/issues
• GitHub Repository: github.com/Shjabbour/dota-releases

We typically respond to privacy inquiries within 48 hours.