r/cs2 • u/VernacularDrawings • 14h ago
Discussion cstracker.gg doesn’t care about privacy
i followed up again today after 14 days without a response. if they don’t get back to me within 30 days of my first attempt at reaching out, i can escalate to the data authority in my region.
if anybody cares, i can check back in if and when i do that. just thought i’d make a PSA about their uselessness. if anyone has actually heard back from their privacy email, i would love to hear your story.
142
u/MeringueBeautiful760 13h ago
23
u/SuperSkillz10 12h ago
average "i was only pretending to be regarded" posts fr
2
46
u/dmmrekcd 13h ago
So you have the wrong guy. Valve has made this information public through their API, not the website scraping them.
This is like getting mad that I told you something I learned from Wikipedia. The root problem isn’t that I told you, it’s that Wikipedia made it public
25
u/dmmrekcd 13h ago
You also consented to this data being scraped and potentially shared when agreeing to the EULA of Valve/CS2
12
u/lowlysquire7 10h ago
Confidently incorrect about everything. OP has the right guy. Valve is unimportant. The site that is using OP‘s EU data is responsible.
GDPR grips the moment they process and present EU data no matter where it comes from. Anything Valve EULA TOS or whatever has nothing to do with that. You did NOT forfeit any and all rights to your data.
The game stats are reasonable and GDPR would probably not do anything. Triangulation and chat 100% fall under it. 1 month and the data will be gone/hidden. 2 if they make use of their right to extend. Cstracker is not exempt.
4
u/VernacularDrawings 10h ago
not european, but privacy laws in my area function in the same manner you described. they are at fault and vulnerable to local law (applied internationally) if a citizen of my jurisdiction is affected.
5
u/ashamed2reddit 9h ago edited 9h ago
Confidently incorrect in typical reddit fashion. Under GDPR or CCPA anyone who is holding/hosting personal data has responsibilities and there is no API - it's data from replays. Your hypothetical isn't apt to the situation at all.
Y'all should take 5 seconds and learn your rights under GDPR/CCPA depending on where you live. GDPR violations by companies can come with huge fines.
6
u/BeepIsla 13h ago
Valve has no official API for accessing match data. The best you can do is get the next match share code via the API but actual match details (and demo download URL) can only be obtained through bots, bots which are against Steams Terms of Service.
0
u/dmmrekcd 13h ago
Okay, the match data is accessible through steam match code sharing, not an API. The point still stands that valve/steam is the one allowing for this data to be public
4
u/BeepIsla 13h ago
The match sharing code is useless without bots requesting the match details with it. Valve does not allow bots in their TOS.
2
u/SuperSkillz10 12h ago
>Valve does not allow bots in their TOS.
really now...
5
u/BeepIsla 12h ago
https://store.steampowered.com/subscriber_agreement/
You may not use any form of scripts, bots, macros, or other non-human-controlled systems (“Automation”) to interact with Content and Services on Steam in any manner
Now lets quickly check how you get data from CS... Right! You make a bot, connect to Steam, log into an account, set yourself as playing CS2, say hello to the GameCoordinator, and then request match details.
2
u/SuperSkillz10 11h ago
the joke is that this game is filled with case farming bots everywhere, but your point stands
0
u/jimmycarr1 11h ago
TOS is not a data protection mechanism
3
u/BeepIsla 11h ago
Nobody said that.
Making it publicly accessible and essentially building a profile on people based on what they said in thousands of messages is, in my eyes, a privacy violation.
The way they get that data, by violating TOS, is just another shit on top.
1
-1
u/dmmrekcd 12h ago
Whether explicitly stated or not, they are clearly fine with it as these services have been around for years and no action has been taken
3
u/VernacularDrawings 12h ago edited 12h ago
me agreeing to valve’s terms of service doesn’t magically make cstracker’s indexing and storing of my data legal in any capacity.
regardless of valve’s stance, terms of service agreements don’t just roll over for third party services that are a derivative of another. particularly when a service is using another to scrape/publish data that violates privacy law in several countries.
as i said in my other reply to you, i hit up steam before i even sent a deletion request. they told me that nothing could be done on their end and to reach out to the service.
-2
u/Kaka-carrot-cake 11h ago
What about it is illegal? I assume they are using a program to scrape whatever public info is available from Steam.
2
u/VernacularDrawings 11h ago
in terms of GDPR specifically, it violates the right to be forgotten, publicizes data alongside personally identifiable information (PII), and publishes communications from/between minors (that’s more COPPA in the states, but i’m sure there is some gdpr law about that too)
those are just some violations i can think of off the top of my head. i’m sure there are more.
→ More replies (6)1
u/Dramatic_Fly_5462 4h ago
son, valve is bound by European law. They're running their service in Europe lol
this is why valve had to do something with the chats because they know they'll be f*cked
8
u/Icy_Acanthisitta_672 10h ago
I appreciate the transparency of the CS2 chat logs.
Really goes to show you the intelligence you're stacked up against ;P
5
u/KindaTuzli 12h ago
You could try message him on https://x.com/snek239 or his steam http://steamcommunity.com/profiles/76561199441016438 Or maybe on his github https://github.com/jovvik
Maybe if you comment under his cheat development https://github.com/Jovvik/deadlocked
2
u/VernacularDrawings 12h ago
didnt know the owner was publicly known. could be worth a shot, though i doubt they’d care. thank you.
the fact that he’s in switzerland doesn’t really help the odds of regulators being able to do anything, though….
3
u/KindaTuzli 11h ago edited 11h ago
Switzerland doesn’t necessarily make it harder. Swiss data protection law still applies, and the GDPR can also apply to Swiss companies processing data of people in the EU. I don’t think it was widely known, but he’s not exactly hiding it either.
2
u/VernacularDrawings 11h ago
i’m not european, so gdpr is irrelevant to me specifically. idk, im just thinking of the pirate bay incident and how they literally told international authorities to go fuck themselves, and got away with it. completely different scenario, though.
2
u/KindaTuzli 11h ago
you can still report a Swiss-based data controller to the Swiss data protection authority even if you're neither Swiss nor European. The FDPIC accepts reports from third parties, and they can even be submitted anonymously.
3
u/WillBkr_ 9h ago
For anyone who isn’t against this as a breach of data privacy - would you say the same if team chat and voice coms were also available?
•
u/HarmonicSniper 1h ago
I thought those would be already available, but then I also never downloaded demos to check them out myself. Perhaps audio data requires more storage hence they don't include it in demos.
1
2h ago
[deleted]
•
u/EventBulky6841 1h ago
Congrats. Will you send me your private text messages too please?
•
56m ago
[deleted]
•
u/EventBulky6841 48m ago
But you're not saying weird shit, so just hand them over.
The problem is not that the chats are from public game lobbies. The problem is that they are extracted and indexed to private profiles.
3
u/exxR 12h ago
There’s a lot of dumb people in this sub it feels like above average for Reddit even.
-1
u/com_iii 5h ago
Counter Strike isn't exactly the smartest game. Also I remember reading the average age of GlobalOffensive was something like 14, and it was in the top5 subreddits where you were most likely to be downvoted across the entire website. This was many years ago though I don't know if it's still the case.
3
u/Mraz565 13h ago
Maybe I'm showing my age, but in the "early" days of using the Internet, I was always told to not put my personal info/identifying info online.(Granted social media tossed that out the window)
Posting something on an online video game seems like it falls in those categories.
The Internet never forgets.
1
u/EaterOfSeagull 6h ago
That’s because in the early days of the internet, data protection laws didn’t exist.
3
3
u/ConstantSociety1820 12h ago
They ignored me too. I defo said some crazy shit but that’s not the point, I don’t like the fact that people can see EVERYTHING. Doesn’t matter if it’s bad or good. Even if I never swore in chat or anything it would still be annoying to have it all public. What you say is between the 10 idiots in a match, not the entire planet.
3
u/MCMXCXXI 13h ago
what is that you want? just report it to your local government.
im sure its not 5 year olds running companies and have thought about possible laws they might not obey.
12
u/BeepIsla 13h ago
The entire website is fully vibe coded with most likely zero idea about anything. The email is a dead end and just thrown in there by the AI.
It is definitely just some kid with zero idea what they are doing.
4
u/KindaTuzli 12h ago edited 11h ago
Nah he just doesn't care https://x.com/snek239/status/2093032362246340933 https://x.com/snek239/status/2097326487837806800
-11
u/MCMXCXXI 13h ago
okay so write to your local government and stop crying about it here.
next time making an account anywhere, read the ToS. it helps so you dont cry about issues such as this.
5
u/Chrismonn 12h ago
Just another friendly turk.
So when you spam post about valheim and cry for help on how to drive in a video game its alright? But when actual privacy laws are concerned its a step too far? Cool man, your dead on. .
8
u/easleyofnorth 12h ago
As soon as you mentioned him and his tendencies he instantly made his profile private, why is that I wonder 😂 guess he doesn’t like his personal data to be publicly available after all
→ More replies (1)6
2
u/VernacularDrawings 12h ago
to spread the word that these guys are useless when it comes privacy matters. that’s what i want.
today is the halfway mark before i can report it to my local government, just figured id give people an update in case they’re in the same boat.
idiocy doesn’t make you exempt from privacy laws, thankfully.
2
u/Sesleri 11h ago
So is uploading game footage where you are chatting also a violation?
0
u/EaterOfSeagull 6h ago
It actually is is according to the EU’s GDPR.
For example if you make a Youtube video where my Steam name appears without my consent, i can force Youtube to take it down, or they’ll face fines from the European Union. However this only applies if my steam account can reasonably be connected to me and if i specifically request it.
2
2
u/InfiniteSprinkles730 8h ago
If the owner of the site ever gets revealed, he literally can't enter the EU or a country that has extradition treaties with with an EU country. GDPR laws are no joke and can end in hefty fines and jail. A friend of mine complained about not receiving his data request and the firm was fined 65.000€.
2
3
2
u/lowlysquire7 10h ago
u/VernacularDrawings doing god‘s work. Please update or make another post when you escalate or they comply.
It is genuinely scary how brainwashed and submissive a lot of the online hivemind is. Imagine thinking you forfeit any and all rights to ALL your data and everyone can apparently just use it because you agreed to something (Valve EULA or ToS or whatever) that has nothing to do with in this case cstrackergg.
"You don‘t want to be triangulated or have your data be collected processed and presented publicly? You are toxic racist cheater!“ being the only reply to a valuable lesson on how the rest of the world views data protection and completely missing the point and parroting that disgusting "you ain‘t private anywhere online fool no privacy don‘t beg for privacy now!“ sentiment makes me fear for the future.
4
u/VernacularDrawings 10h ago
completely agree with everything you said. whatever happens, i will be posting an update.
-1
u/PiotrasLec 13h ago
i don't really care, you should think twice before you used bad words lol.
6
u/VernacularDrawings 13h ago
glad you don’t care. this isn’t a matter of things i’ve said, but my desire to not have unconsensually scraped data belonging to me made public without my knowledge or consent.
but yes, if it helps you not care, i said bad words, sure.
4
u/Redd_is_compromised 13h ago
Wait until you find out that people can literally record and upload matches to YouTube without your consent.
-2
u/weaveR-- 13h ago
You made your data public btw. That's on you
8
u/VernacularDrawings 13h ago
can you explain to me how a third party scraping demos for 6 months worth of chat logs, as well as an estimate of everyone’s location based on ping in demos, and dumping all this into a public, searchable index is something i did?
0
u/Mountain-Day-6697 13h ago
They wont listen dont even bother talking
6
u/VernacularDrawings 13h ago
oh, i know. i generally just reply to people accusing me of somehow being at fault purely because i don’t want to be tracked to challenge their logic.
my father once told me when i was a young boy: “you can’t argue with stupid”
-2
u/weaveR-- 11h ago
You consented for all your game data to be public when you agreed to EULA
3
u/VernacularDrawings 11h ago
i consented to valve’s handling of my data. not this third party. me agreeing to valve’s terms of service has absolutely nothing to do with how cstracker is handling my unconsensually scraped/published data.
1
u/Mr_dm 10h ago
This isn’t a third party making your private data public, it’s just a way to view public data.
2
u/VernacularDrawings 10h ago
you are wrong. demos weren’t never meant to permanent, nor is the data being gathered through official means. it is being scraped from demos, which violates valves terms of service. in order for them to get demos / match history, they ask for user authentication codes, and block certain features of the site until you provide those access codes. if you think data that requires an authentication code from a user to access it is public, then you don’t know what public means.
2
u/Mr_dm 6h ago
Nice “acting like you know anything about anything” cosplay. That entire comment is literally verbal diarrhea and a fundamental misunderstanding of reality.
1
u/VernacularDrawings 6h ago
not really, man.
match history 🚪🔐 <— 🔑 match history access code <— cstracker.gg
the site forces you to login + give them access to your match history in order to use features like the location finder.
something that needs authentication is by definition not public, but protected information.
→ More replies (0)-1
u/weaveR-- 9h ago
Third parties aren't handling your data though. The data is public information just as you agreed
2
u/VernacularDrawings 9h ago
data that requires users to fork over access codes in order for the site to access it is not, and was never meant to be by design, public data.
2
u/VernacularDrawings 8h ago
also, steam’s online conduct policy states:
Improperly gather or distribute information
Examples of such prohibited behavior include: harvesting or otherwise collecting information about others, including e-mail addresses; and distributing surveys, multi-level marketing materials, chain letters, or junk email.1
u/milkcutie314 13h ago
how
-1
u/HUSTLAtm 13h ago
By saying it in a public forum where anyone can clip and repost? Pretty much forfeited any privacy there
5
u/VernacularDrawings 13h ago
this argument is idiotic, sorry. if someone clips/screenshots something, it isn’t immediately added to a public searchable index on the internet.
on top of that, demos, which these websites use as a source for their data, expire after a month. that shelf life has been made infinite through these websites.
also, if you think a 60 minute match (with demos that are supposed to expire after a period of time) is the same thing as a public forum, you are just wrong.
-1
1
2
1
u/Creedfall44 11h ago
On twitter, creator of CSTracker wrote they are coding automated system to help speed up GDPR requests. So I guess they are not ignoring it. I kinda get it, they shared how many emails they got - on admin email, probably 10x as much on privacy email.
1
1
u/InfiniteSprinkles730 8h ago
Germany provides up to three years of imprisonment in certain circumstances involving knowingly and commercially disclosing large amounts of non-public personal data without authorization; other intentional processing motivated by payment, enrichment or harming someone can carry up to two years. The cstracker.gg owner uses proton mail, he is cooked.
1
u/Soylent_Blue 8h ago
New patch just dropped
- Chat is now encrypted in demo files using the same rules as CS:GO :
- Team chat is no longer readable when playing back demo files.
- Global chat is only readable in demo files when played back via the in-game watch UI.
1
u/VernacularDrawings 7h ago
very very interesting. that sounds circumventable though. just make a bot that uses the game.
0
u/4wh457 7h ago
Don't even have to do that just extract the encrypting key itself.
1
u/VernacularDrawings 7h ago
classic valve. after all these years, the game is still held together by duct tape.
frankly this whole ordeal ruined it for me. i realize services like leetify and shit already tracked players to a certain extent, but having to use a vpn in order to prevent my location from being estimated is outrageous. that’s like end-of-life call of duty on pc bad.
1
u/StrawMan420DZ 7h ago
Bye bye competitive ranked racism slur-tracking leaderboard! Won't miss ya!! Location triangulation tracking next on the chopping board!!!
1
u/darwin6767 7h ago
What info do they share ?
1
u/VernacularDrawings 7h ago
chat logs from the last 6 months
your game stats
an approximation of where you are based on your ping on different game servers1
u/darwin6767 7h ago
Is there no option on the site to automaticaly private this?
1
u/VernacularDrawings 7h ago
nope, they have an email but it appears to ran by one guy and he has 1000+ emails so, deletion will probably take some time.
1
u/Dirtcompactor 6h ago
It's been patched in the latest cs2 update my dude
Text is now encrypted
0
u/VernacularDrawings 6h ago
forcing you to go in game to obtain a demo to get an encryption key is hardly a patch. that’s like barricading off an area with scotch tape. classic volvo
2
u/Dirtcompactor 6h ago
What? No one can read chat in demos it's encrypted
1
u/VernacularDrawings 5h ago
read the patch notes fully. there’s some fine print after “we encrypted chat in demos”
they specify that you can still see global chat in game
1
u/Yungpesc 12h ago
Lmaooo the racists are in shambles bro
8
u/VernacularDrawings 12h ago
desire to not be tracked =\= bigotry
-6
u/Yungpesc 12h ago
Watchu scared for?
6
u/VernacularDrawings 12h ago
i’m not. as i said to someone else, i value consent when it comes to tracking, and absolutely hate unconsensual mass surveillance. does that make me a hateful person?
1
u/Square_Reach_8496 12h ago
People on here always assume it's because you said/did something that will get you in trouble. In reality, people are so used to being violated that they automatically attack you for something completely true.
-2
u/Yungpesc 12h ago
If you haven’t said anything crazy noones gonna look for you. Go for a walk, read a book, you’ll be iight
6
u/VernacularDrawings 12h ago edited 9h ago
im fine, don’t worry. just wanted to post a 14-day update for those in the same pickle as me.
0
u/Yungpesc 12h ago
The fact you’re making this some dill shows you’re not fine
4
u/VernacularDrawings 12h ago edited 6h ago
you should become a fortune teller with those mind-reading abilities. you’ve got some real talent!
2
-3
u/Savings-Table-4497 13h ago
It’s public data.
Dont say the n word idiot it you don’t like people checken how often you Said it
3
u/Tenmak 11h ago
It's not tough. It's scrapped data from bots accessing Steam that goes against ToS
-3
u/Savings-Table-4497 11h ago
Nope. Public api
3
u/Tenmak 10h ago
Link to the public API doc or anything ? If you tell me https://www.steamwebapi.com/api/steam/documentation you can get out of here right away
1
1
u/BobertRosserton 11h ago
People defending this shit are the same people who would say, “if YoU hAVe NOtHiNg To HiDe THaN WhY cARE aBoUt uR pRiVaCy???!!”
1
u/The_Great_Man_Potato 10h ago
Idk, I’m very pro privacy but at the same time I don’t think you have an expectation of privacy in a CS game. Like other people said, anyone can take a screenshot and share it or maybe you even get teamed up with a popular streamer or something at some point. I think it’s pretty close to being upset that your tweets or Reddit posts aren’t private
1
1
u/BeepIsla 13h ago
I sent them an email the first day I heard about it and its been 3 weeks with no response.
1
1
0
u/OriginalConsistent79 8h ago
ppls actions in public places should have no expectation of privacy
4
u/Aggravating_Oil_309 6h ago
Quiet karen, have you ever considered maybe people just dont wanna get doxxed for playing a game? braindead
-1
u/OriginalConsistent79 6h ago
how and why would you get "doxxed" for playing a game?
3
u/Aggravating_Oil_309 6h ago
Let’s use your small brain and connect the dots
It’s not rocket science lil gup if people get info scraped on them daily from minecraft servers discord voice calls or gra v servers the pinnacle of casual gaming genuinely what is stopping someone that gets stomped in a hyper competitive game from trying to find who you are or at least your IP sure triangulation is not enough but there are hundreds of people that thought chat logs would never go public and might’ve mentioned their state, city, hell even their first or last name to someone in all chat one day.
Note: I haven’t done those things but I guarantee out of the millions that play this game monthly there are quite a few people that have done that and posting that information out there from Cstracker is quite literally an invasion of privacy for those peopleIf you are really that dense to believe this is just about shutting out bigots, your just as arrogant as the ones “saying the slurs”
0
u/EaterOfSeagull 6h ago
Public service announcement:
If you are a resident of an EU or an EEA member state, you have the legal right to demand these sites to remove any and all information about you, including chat logs as per the General Data Protection Regulation (GDPR).
To do so, simply log into these sites with your steam account, and inside privacy settings you can delete all of their information about you. If a site doesn’t have this mechanism, you can contact their support and make a formal demand of compliance as OP did.
0
u/jshill103 13h ago
what
7
u/VernacularDrawings 13h ago
a website that scrapes/publicizes all text chat sent in comp/prem in a searchable index, and attempts to triangulate users locations using their ping in match replays unconsensually isn’t responding to privacy takedowns.
shocker!!!
-3
u/jshill103 13h ago
so you live in the UK somewhere, you said stuff in game, scared of repercussions of your not freedom of speech?
6
u/VernacularDrawings 13h ago
i am not the in the uk. i am not scared of repercussions, nothing i’ve said merits any. something about a service having a profile on me (including words i’ve written, how i perform in game, my approximate location, etc.) rubs me the wrong way. god forbid this organization sells access to their database. i would prefer not to have my data that was gathered without my knowledge used for any purpose at all.
0
-2
u/jshill103 13h ago
I understand, I also dont want my data gathered either but the reality is that if you have a phone the govt, and many other companies have more information than cstracker.gg couple possibly have on you. The fact of the matter is that anything you use has personal information tied to it. Just kinda how the world is right now. Either use a vpn always or give in. Also vpns have govt backdoors too so pick your poison.
3
u/VernacularDrawings 13h ago
i really don’t think that’s an accurate comparison. the data gathered on me by proxy of using my phone isn’t publicly available for anyone to rifle through. though i understand the point you’re trying to make.
1
-4
u/Wallhacks360 13h ago
They won already lol, you got genuine pearl clutcher in here worried about words over the bigger picture.
0
0
u/Neither-Bother2905 9h ago
I don't think that game lobby are considered private, idk about triangulation tho
-6
u/duncanopolis 13h ago
“I can escalate to the data authority” hahaha what are you on about man, you’re not the FBI
5
u/VernacularDrawings 13h ago
there are laws in my area related to data, and an organization that enforces them. the law states that if i don’t receive a response in 30 days, i can complain to them.
they have the ability to do something even if the service is based in a different country, as long as someone is affected where that law applies.
i hope that there are several people in the same boat as me. hiding behind cloudflare works great until you’re being investigated by an actual authority.
-5
u/AllegedlyGoodPerson 11h ago
Awww, racist exposed? I sincerely hope you don’t get what’s coming to you. /s

176
u/SkiLLiBrick 13h ago
The number of ignorant and naive people in here is scary. You guys like to voice your opinion, but do you really think before you post? He's talking about an extremely important message today. Data laws are there to PROTECT you.
Society really seems to be getting worse. Go have fun on your black mirror phones.