Privacy Policy
Last updated: April 3, 2026
1. Data We Collect
- Profile information from Steam OAuth: Steam ID, display name, avatar.
- Profile information from Faceit OAuth: Faceit ID, nickname, ELO, level.
- Profile information from Discord OAuth: Discord ID, username, avatar.
- CS2 match authentication code (stored encrypted, used only to fetch your CS2 Premier ELO).
- Crosshairs you create and publish, collections, and vote history.
- Your profile settings (visibility, banner, custom URL) and support ticket content.
2. How We Use Your Data
- To display your public profile, crosshairs, and stats on ConfigLab.
- To link your Discord account for PRO role assignment.
- To update your CS2 Premier ELO from Valve's match history API.
- To manage your PRO subscription and send transactional emails via Stripe.
- To investigate abuse reports and enforce our Terms of Service.
3. Payments (Stripe)
- All payments are processed by Stripe, Inc. We are PCI-compliant through Stripe's certified infrastructure.
- ConfigLab never stores your credit card number, CVV, or billing details.
- Payment history and invoices are available directly from Stripe via your customer portal.
- Stripe's privacy policy: https://stripe.com/privacy
4. Cookies & Sessions
- We use a single session cookie to keep you logged in (via Auth.js).
- No advertising cookies. No third-party tracking pixels.
- Session cookies are deleted when you sign out.
5. Data Sharing
- We do not sell, rent, or share your personal data with third parties.
- Your profile data is shared publicly only if your profile is set to Public.
- Aggregate, anonymised statistics (e.g. crosshair usage trends) may be used internally.
6. Data Retention & Deletion
- Your data is retained for as long as your account is active.
- You may request full account deletion by contacting matthias@hermanny.fr.
- Upon deletion: your profile, crosshairs, collections, and vote history are permanently removed.
- Stripe billing records are retained as required by financial regulations (typically 7 years).
7. Your Rights
- Access — you may request a copy of all data we hold about you.
- Rectification — you may correct inaccurate data in your settings.
- Erasure — you may request deletion of your account and all associated data.
- Portability — your crosshair data is exportable via share codes.
- To exercise any right, contact: matthias@hermanny.fr
Contact: matthias@hermanny.fr