Privacy Policy
Effective: 13 October 2026
In short: MetaPick has no user database, no ads, no analytics and no tracking. It uses your Steam ID only to show your Dota 2 statistics. Our server keeps technical logs (including IP addresses) for at most 14 days.
1. Who is responsible
The MetaPick app and its server (api.metapick.app) are run by Agamyrat Erlekow, an independent developer. Contact for any privacy question or request: privacy@metapick.app.
2. What data we process and why
| Data | Why | Where and how long |
|---|---|---|
| Your Steam ID (SteamID64 and the matching Dota 2 account ID), after you sign in | To show your profile, rank, recent matches and match details | Inside a sign-in token stored in your phone's secure storage (Keychain / Keystore). The token is valid for 30 days and is deleted when you sign out. The server does not save it. |
| Your public Dota 2 data from OpenDota: name, avatar, rank, recent matches | To answer your requests faster and to stay within OpenDota's limits | Server memory only (no database): profile up to 30 minutes, match list up to 10 minutes, match details up to 2 hours. Cleared on every server restart. |
Server logs: IP address, time, requested path (e.g. /v1/me), response code,
response time |
Security, abuse prevention (rate limiting) and fixing errors | On our server, deleted automatically after at most 14 days |
| Your email address and message, if you write to us | To answer you | In our mailbox, only as long as needed to handle your request |
The meta tier list and draft suggestions do not use any personal data. You can use them without signing in.
3. What we do not do
- We never see your Steam password: with “Sign in with Steam” you enter it on Steam's own page, and Steam tells us only your Steam ID.
- No ads, no analytics or tracking SDKs, no advertising identifiers.
- We do not sell or share your data for marketing.
- We do not create an account for you and keep no user database.
4. Other services involved
- Steam (Valve Corporation) — sign-in page; your phone also loads hero images directly from the Steam image CDN (cdn.cloudflare.steamstatic.com), so Valve and its CDN provider see your IP address. See the Steam Privacy Policy.
- OpenDota — source of statistics. Our server sends your Dota 2 account ID to the OpenDota API; OpenDota sees our server's address, not yours. If you open a match on opendota.com, its own policy applies.
- Our hosting provider — runs the rented server (VPS) where the API works.
- Cloudflare — DNS for metapick.app and forwarding of email sent to privacy@metapick.app.
5. Legal basis (GDPR)
Processing your Steam ID and Dota 2 data is necessary to provide the features you ask for (Art. 6(1)(b) GDPR). Server logs are kept on the basis of our legitimate interest in keeping the service secure and working (Art. 6(1)(f) GDPR).
6. Your rights and how to delete your data
Sign out in the app (Profile → «Выйти из аккаунта»): this deletes the token with your Steam ID from your phone. Uninstalling the app removes it on Android; on iOS the system may keep Keychain items after an app is deleted, so sign out first. Cached data disappears from server memory within 2 hours at most, and logs within 14 days. Since we keep no account for you, there is nothing else to delete.
If you live in the EU/EEA or the UK you have the right to access, correct, delete, restrict or object to the processing of your data and to data portability. Write to privacy@metapick.app; we answer within one month. You can also complain to the data protection authority of your country.
7. Children
MetaPick is not intended for children under 13, and we do not knowingly process their data.
8. Changes
If this policy changes, we will update it on this page and change the date at the top.
MetaPick is not affiliated with or endorsed by Valve Corporation. Dota 2 is a trademark of Valve Corporation.