What we collect, and what we never touch.
Last updated 26 July 2026. Short version: your Steam identity, your public match data, and the reports we generate for you. No passwords, no payment details, no advertising.
Signing in
Hindsight uses Steam's own OpenID sign-in. You authenticate with Valve, not with us, and Valve tells us one thing: that you own a particular Steam ID. We never see your Steam password, we cannot act on your account, and we have no access to your inventory, your friends list, your wallet, or your private profile details.
Signing in sets one cookie, which holds an encrypted session identifying your account. It lasts 30 days and is used for nothing but keeping you signed in. It is not an advertising or tracking cookie, and there are no third-party cookies on this site.
What we store
| What | Why |
|---|---|
| Your Steam ID and Dota account id | To know whose matches to fetch and whose reports to show you. |
| Your Steam persona name and avatar | So the app can address you by name. Read from Valve, never edited by us. |
| Your public Dota match data | The games themselves — the same data anyone can look up. This is the product. |
| Parsed replay data for your games | Positions, combat events, wards. What makes death reconstruction possible. |
| Reports we generate for you | So you can re-read them, and so later games can be graded against their assignments. |
| A per-game metric record | The numbers an assignment is checked against. Small, and derived from the above. |
| Your plan and credit balance | To know what you're entitled to, with an audit trail of every credit movement. |
| Basic product analytics | Which pages and features get used. Signed-out page views are keyed by a coarse, non-reversible hash — not by you. |
| Your email, if you join the waitlist | To send you an invite. Nothing else — no newsletter, no drip campaign. |
What we don't do
We don't sell your data, and we don't share it with advertisers — there is no advertising business here for it to be shared with. We don't handle payment card details ourselves. We don't use your data to train models sold to anyone else.
Match data in Dota 2 is public by design, and other people can already look up your games. Hindsight doesn't change that — but your reports are private to you unless you choose to share one, and your visibility settings control what other Hindsight users can see about you.
Who else is involved
Valve, for sign-in, match data and replay files. Our own servers, for everything else — the parsing, the database, and the site you're reading. Report generation uses a third-party language-model provider, which receives the summarised facts of the match being reviewed; it does not receive your email address or your Steam credentials.
Your control over it
You can ask us to delete your account and everything tied to it, and we will. Public match data will still exist at Valve and on every other Dota stats site, because it isn't ours to remove — but your Hindsight account, your reports, and your metric history go.
Email hello@hindsight.gg from the address on your account, or from any address if you tell us your Steam ID. Data & privacy goes into more detail on what exists and what deletion covers.