Privacy Policy

Last updated: July 24, 2026

1 Information We Collect

We collect information you provide directly, such as:

Account information (name, email address) when you register
Your password is securely hashed and never stored in plain text
Team name, tag, and branding details you choose to set
Your timezone, auto-detected from your browser on registration and profile edit
Messages you send through our messaging system
Screenshots uploaded with bug reports or suggestions — these may contain game data such as team names, player stats, match history, and budget information. Screenshots are stored securely and visible only to administrators and moderators for review purposes.

If you register via Google OAuth, we receive your Google-provided name and email address. We do not access your Google account beyond what is required for authentication.

2 Information Collected Automatically

We automatically collect the following technical data:

IP address and approximate location for activity tracking and security
Browser type, device information, and last-seen timestamp (used for online status indicators)
Session data — encrypted for your security
API token usage — tokens expire after 7 days of inactivity

3 How We Use Your Information

We use the information to:

Provide, maintain, and improve our services
Process your team management data and game statistics
Facilitate communication between users (friend requests, messages)
Send service-related notifications (match results, tournament updates)
Detect and prevent abuse, fraud, and security threats
Comply with legal obligations

4 Cookies and Advertising

We use cookies and similar technologies to:

Maintain your session and preferences
Analyze site usage and improve user experience
Serve advertisements through Google AdSense

We use a cookie consent banner that lets you accept or decline tracking cookies. Regardless of your choice, ads are always shown. If you accept, Google Consent Mode v2 grants ad personalization and storage signals, allowing Google to serve more relevant ads. Third-party advertisers may also use cookies; please review their respective privacy policies for more information.

5 Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

Service providers who assist in operating our platform (hosting, database management)
Google AdSense for advertising — Google may collect cookies and device identifiers to serve relevant ads
Google OAuth when you choose to sign in with your Google account
Law enforcement when required by law or to protect the rights and safety of users
Other users (team names, match statistics, public profiles) — this is game data that is inherently shared within the platform

6 Security

We use industry-standard security measures to protect your account and data, including password hashing, encrypted sessions, input sanitization, and secure database backups.

No security measure is perfect. While we strive to protect your data, we cannot guarantee absolute security.

7 Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Object to processing of your data
Data portability — request a copy of your personal data in a structured, machine-readable format (such as JSON or CSV)

8 Data Retention

We retain your data for as long as your account is active or as needed to provide services. Match history and game statistics are preserved even if you delete your account, as they are part of the shared game world. When you delete your account, your team reverts to bot control — all matches, history, and statistics remain intact.

9 Children's Privacy

CSM is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

10 Contact Us

For privacy-related inquiries, email us at: [email protected]