Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains what information Rank Up Dota ("we", "us") collects, how we use it, and the choices you have. Rank Up Dota is a Dota 2 coaching tool at rankupdota.com, operated by an independent individual. We aim to collect as little personal data as possible.

1. Information we collect

When you just use the free tools

You can use the draft simulator, matchup database, and itemization coach without an account. In that case we do not collect information that personally identifies you. Our hosting and security provider processes your IP address and basic request metadata to deliver the site, prevent abuse, and apply rate limits, and to estimate your country so we can show approximate local pricing.

When you sign in with Steam

Steam login is optional. We use Steam's OpenID system, so we never see your Steam password and do not request a Steam Web API key from you. When you log in, we obtain your public Steam account identifier and read publicly available Dota 2 data associated with it (such as your profile summary, recent matches, and hero statistics) via OpenDota. If your Dota profile is private, the data we can show is limited accordingly.

When you subscribe to Pro

Payments are handled entirely by our third-party payment processor. We do not receive or store your full card number or bank details. We do store subscription information linked to your account (for example: plan tier, whether it is active or cancelling, the current period end, a subscription/membership reference, and invoice metadata such as amount, currency, and a receipt link) so we can grant and manage your access.

Stored on your device

We use one strictly necessary session cookie to keep you signed in (HttpOnly, Secure, SameSite=Lax). Your browser's local storage may hold non-identifying preferences such as your chosen language, currency, and current draft.

2. How we use information

• To provide and operate the Service and your logged-in session.
• To generate your personal stats dashboard from public Dota data.
• To process and manage Pro subscriptions and access.
• To secure the Service, prevent abuse, and enforce rate limits.
• To display approximate pricing in your local currency.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Third-party services (sub-processors)

We rely on a small number of trusted providers to run the Service. Each processes only what its function requires:

• Steam / Valve — OpenID login (authentication).
• OpenDota — public Dota 2 match and profile data.
• Stratz — public meta / tier-list data (not tied to your identity).
• Payment processor — subscription checkout, billing, and receipts.
• Cloudflare — content delivery, security, and abuse prevention.
• Hosting provider — runs our servers and database.
• Google Fonts — serves web fonts and may receive your IP as part of loading a page.

4. Data retention

We keep account and subscription records for as long as your account is active or as needed to provide the Service and meet legal or accounting obligations. Public Dota data we fetch is cached temporarily to reduce load and is refreshed over time. Expired sessions are purged automatically. You can ask us to delete your account data (see "Your rights").

5. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing. Because we store very little, most of what concerns you is either public Steam data or your subscription record. To exercise any right, email [email protected] and we will respond within a reasonable time. You may also log out and stop using the Service at any time.

Your Dota 2 match history is public because of Valve's own settings, not ours. You can limit what any third-party tool — including Rank Up Dota — is able to read by turning off "Expose Public Match Data" in your Dota 2 settings. Note that this controls Valve's public data going forward and does not delete data Valve has already made public.

6. Children's privacy

The Service is not directed to children under 13 (or the minimum digital-consent age in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

7. International users

The Service is operated from, and data may be processed in, the Philippines and the countries where our providers operate. By using the Service, you understand that your information may be transferred to and processed in countries other than your own.

8. Security

We use reasonable technical measures to protect data, including HTTPS everywhere, HttpOnly/Secure session cookies, and delegating card handling to a specialized payment processor. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above, and material changes take effect when posted.

10. Contact

Questions about your privacy or this policy? Email [email protected].