01 Data from Steam sign-in
When you sign in through Steam OpenID we receive your SteamID64. We then read your public Steam profile (persona name, avatar and profile URL) through the Steam Web API. We never receive your Steam password or payment details. Purpose: creating and securing your account (contract).
02 Account and gameplay data
We store your A.C.E profile, optional contact email, team memberships, rating points, rank, wins and losses, match statistics (such as kills, deaths, assists, damage and MVPs), queue and ready-check activity, reports you file or that concern you, and moderation records. Purpose: running ranked matches, leaderboards, tournaments and fair-play enforcement (contract and legitimate interest in fair competition).
03 Match servers, demos and GOTV
Matches are played on game servers hosted by DatHost. The server sees your IP address while you are connected, and server logs may contain it. Matches are recorded as GOTV demo files when GOTV is enabled (they contain player names, SteamIDs, chat and in-game movement) and may be broadcast through GOTV with a delay. Demos stay on the game server for up to 14 days; only the owner and, for an open anti-cheat case, eligible Overwatch reviewers can download them through A.C.E. They are used to review disputes and cheating reports. The match server also reports its own security settings (for example sv_cheats) once per map so we can verify that the server configuration was not changed. Purpose: fair play and dispute resolution (legitimate interest).
04 A.C.E desktop app and anti-cheat
The A.C.E desktop app (Windows) includes a user-mode anti-cheat (no kernel driver). It runs only after you agree to it on a consent screen in the app, and you can turn it off at any time in the tray menu (you then cannot play ranked). Start with Windows is off unless you turn it on.
While you are signed in it sends a signed heartbeat about every 15 seconds. Checks run only while CS2 (cs2.exe) is running. On your PC it compares running program names, window titles (titles of browsers, chat, media and office apps are skipped) and modules loaded into cs2.exe with our list of disallowed programs; reads the CS2 launch options; hashes key CS2 game files and the app's own files; checks the app's own security settings and digital signature, whether something is debugging the app, processes holding memory access to CS2, debuggers, virtual machines and Windows test-signing.
We receive only results: the list entry that matched (never the window title itself), the matched program or module name with the Windows user folder removed from any path, the offending launch option, file hashes and yes/no indicators. We do not receive your full process list, files, screenshots, keystrokes or browsing data. We do not collect your Windows username or computer name.
Hardware: the app sends one-way SHA-256 hashes of hardware identifiers made on your PC: one combined fingerprint and one hash per component (motherboard, system disk, Windows installation ID, BIOS and baseboard). Generic factory values are dropped before hashing, and the identifiers themselves never leave your PC. Our server re-hashes every value with a secret key before storing it. These hashes are used only to enforce bans: to apply a confirmed hardware ban, and to show the owner, for human review only, that an account uses the same PC (at least two matching parts) as an account with a confirmed ban or cheating decision. Several players sharing a family or public PC is taken into account; a shared PC alone never bans or holds anyone.
Match integrity: during matches on A.C.E servers the server checks about every 30 seconds that each connected player's anti-cheat session is still active (time since the last heartbeat, whether CS2 is running, and a one-time match code that the app confirms). We store the resulting state for each match. A short interruption never counts against you. If the session stays silent for several minutes you may get a chat warning and, where the owner has enabled it, be removed from that match. This never bans you.
On A.C.E game servers the AceBridge plugin records, for every kill, attacker and victim positions, the attacker's view angles, the distance, whether the kill went through a wall or smoke or while the attacker was flashed, and a short (under one second) trace of view angles before the kill. It also records, about four times per second while you are alive, the angle between your crosshair and enemies in front of you and whether the game considers them visible to you, and a short crosshair trace around the first shot of each burst (hits and misses), and per round how many of your chained jumps were taken on the first tick after landing. We use these only to compute fair-play statistics, such as aim snapping, following hidden players, aiming at players before they become visible, or automated jumping.
Review, not automatic decisions: these statistics, the anti-cheat results, match checks, player reports, owner decisions and a trust score are combined into an internal review priority (a risk score) that only the owner sees, so the most serious cases are reviewed first. The trust score (from account age, number of A.C.E matches, reports, owner decisions and, when your Steam profile is public, Steam level, CS2 hours and Steam account age) is also used to pair players of similar trust in matchmaking; it never stops you from queueing. None of these scores bans, holds, removes or restricts anyone on its own: every enforcement decision is made by a person. Some cases are shown to eligible veteran players (A.C.E Overwatch) as anonymised evidence, without names, SteamIDs or match IDs; their votes are advice for the owner.
Nothing bans you automatically. A match against our list of disallowed programs or modules, a disallowed launch option or modified game files puts your queue access on hold and opens a case for the owner, who reviews the evidence and either releases you or confirms a violation. Tools that also have legitimate uses (such as debuggers or system monitors) are recorded only as a suspicion. You can appeal a hold, ban or decision on the page /appeal while signed in (one open appeal at a time), or ask about any decision at ace.platform.official@gmail.com.
Evidence records: when the owner decides a case, and when you appeal, we save a dated copy of the evidence the decision is based on, sealed with a SHA-256 checksum so that any later change is detectable. It contains the review results, anti-cheat results, match checks and reports listed above, and never hardware or IP hashes. Your appeal message and the answer are stored with your account.
Retention: anti-cheat sessions, heartbeat results, match checks, server statistics, hardware hashes, risk scores, appeals and evidence records are deleted after 90 days unless they are part of an open case or a confirmed ban. Purpose and legal basis: fair competition and preventing cheating (your consent for the desktop checks, and our legitimate interest and contract for server statistics, match checks and review).
05 Payments
Paddle.com is our Merchant of Record. Paddle collects and processes your payment details, billing address and tax information as an independent controller under its own privacy policy (paddle.com/legal/privacy). We receive from Paddle only what we need to run your plan or order: a customer ID, subscription or transaction ID, plan or item, status, dates and amounts. We never receive your full card number.
06 Cookies and local storage
We use a small number of strictly necessary cookies (sign-in session, language, admin security) and local storage for your cookie choice and interface settings. Details are in the Cookie Policy at /cookies.
07 Who we share data with
Processors that help us run A.C.E: our hosting and database providers (Vercel and Neon), DatHost (game servers), Paddle (payments, as Merchant of Record), and Valve (Steam sign-in and profile data). Public profile, leaderboard and match data are visible to other visitors by design. We do not sell personal data and do not use it for third-party advertising.
08 International transfers
Some providers process data outside your country, including in the United States. Where required, transfers rely on adequacy decisions or the European Commission's Standard Contractual Clauses.
09 How long we keep data
Account data is kept while your account exists. Match results and rating history are kept for the integrity of leaderboards and may be kept in anonymised form after account deletion. Anti-cheat data (sessions, match checks, server statistics, hardware hashes, risk scores, appeals and evidence records) is deleted after 90 days; case files, evidence records and confirmed bans are kept as long as needed to enforce the ban or answer an appeal. Security audit records (who opened evidence or a match demo, and changes to anti-cheat settings or the game-server configuration) are kept for 12 months. Payment records are kept by Paddle and by us for as long as tax and accounting law requires.
10 Your rights
Depending on where you live (including under the GDPR and UK GDPR) you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. To delete your account, use the page /account/delete while signed in with Steam (this removes your profile and anonymises your match history), or email ace.platform.official@gmail.com with your SteamID64 for any other request (access, export, correction). We confirm your identity through Steam sign-in and answer within 30 days. You may also complain to your local data-protection authority.
11 Children
A.C.E is not directed at children under 13 (or the higher age required in your country). If you believe a child has given us personal data, contact us and we will delete it.
12 Changes
We will publish any change here with a new effective date and, for material changes, tell signed-in users on the site.