Who this notice covers
JUMPTHROW LTD is the UK controller for the processing described here.
This notice applies to jumpthrow.gg, related JumpThrow pages, accounts, uploads, and services that link to it. JUMPTHROW LTD decides why and how the personal data described here is used.
It does not cover Steam, FACEIT, Valve, or other independent services. Their own privacy notices apply when you use them.
Data & sources
We receive data from you, your device, connected platforms, public records, and uploaded demos.
We receive data directly from you and your device; from Steam, FACEIT, and public platform records; and from people who upload demos. A demo or match record may therefore contain information about players who did not upload it.
Account, contact & security
Name, email address, profile image, authentication credentials in protected form, verification status, account preferences, sessions, IP address, user agent, and support or privacy messages.
Connected platforms
Steam and FACEIT identifiers, profile names, avatars, profile and match information, rankings, and the credentials or game-auth details needed to keep a connection working.
Matches, demos & derived results
Demo files, match and team details, player identifiers and names, gameplay events, statistics, rankings, visualizations, clips where available, and processing status or error information.
Device, service & analytics data
Requests, pages viewed, browser or device summaries, security signals, performance measurements, and bounded fault reports. We do not use product analytics identities or session replay.
Required account, connection, security, and upload information is needed to provide the feature you request; without it, that feature may not work. Profile preferences are optional.
Why we use data
Each use has a stated purpose and lawful basis under UK GDPR.
Provide requested features
Create and secure accounts, connect platforms, accept demos, process matches, and return statistics or visualizations. Basis: contract, or steps you ask us to take before a contract.
Publish CS2 records and statistics
Maintain useful match history, player pages, rankings, and demo-derived results. Basis: our legitimate interests in operating a reliable CS2 statistics and analysis service.
Protect and maintain JumpThrow
Prevent abuse, investigate faults, enforce limits, protect accounts, and keep audit records. Basis: our legitimate interests in service security and reliability, and legal obligation where law requires action.
Communicate with you
Send verification, security, service, support, and privacy-request messages. Basis: contract, legitimate interests in responding and operating the service, or legal obligation.
Measure and improve the service
Measure aggregate audience and performance with cookie-free Cloudflare Web Analytics, and diagnose faults using identifier-free operational telemetry. Basis: our legitimate interests in understanding basic service use and keeping JumpThrow reliable.
We do not use this data to make solely automated decisions that have legal or similarly significant effects on you.
Public match & player data
Gameplay identities, match records, rankings, statistics, and visualizations may appear publicly.
Public match, player, ranking, and visualization pages may show platform identifiers, profile names or avatars, teams, match history, scores, gameplay statistics, and demo-derived events. Public pages can be viewed, shared, and indexed by search engines.
We use this information from platform APIs, public records, and uploaded demos to provide historical and comparative CS2 statistics. If public information about you is inaccurate or you object to its use, contact us using the rights process below.
When we honour a player erasure or objection, we suppress the player from profiles, rankings, search, provider lookups, and future tracking. A shared match may remain only after a fresh privacy-sanitised version removes that player’s name, identifiers, avatar, links, analytics, relationships, clips, and replay or heatmap evidence. It uses only the match-local label “Player hidden for privacy”, generalises time and source details where needed, and is withdrawn when the remaining context could still identify the player.
Retention
We use fixed periods where practical and necessity-based criteria elsewhere.
Accounts & connections
Kept while the account or connection is active. Sessions normally expire after 30 days. Account-linked data is deleted when the account is deleted, except a minimal suppression record that prevents erased public data from being recreated and limited records needed for security, disputes, or law.
Upload sessions & demo files
Upload authorizations normally expire after one hour and temporary transfer copies are removed after settlement. Demo archives are kept while needed to verify, reproduce, or provide the associated match analysis, subject to a valid deletion or objection request and legal exceptions.
Generated media
Match visualizations expire after 365 days. Where clips are available, guest clips are retained for 3 days and account clips for 90 days.
Platform caches & public match records
FACEIT cache fields are pruned on schedules between 30 and 365 days. Match-linked and public gameplay records remain while needed to provide accurate history, subject to valid deletion and objection requests. A shared match is then sanitised or withdrawn under the policy below.
Support, security & legal records
Kept until the issue is resolved and for any further period reasonably needed to establish, exercise, or defend legal claims, meet legal duties, or investigate repeat abuse.
Analytics & diagnostics
Kept only while needed to compare aggregate usage trends, diagnose faults, and improve reliability, then deleted or aggregated.
A longer period applies only where law, a dispute, security, or a valid legal claim requires it. We may keep de-identified or aggregated information that no longer identifies a person.
After an erasure, we retain a minimal suppression record so deleted public data is not recreated by later platform imports or a later sign-up. Signing up again does not restore erased history or enable tracking. Once erasure is complete, an authenticated user may separately choose to enable collection for future matches only.
Your rights
UK data-protection law gives you rights that depend on the purpose and lawful basis.
Depending on the processing, you may ask for access, correction, deletion, restriction, or portability of your data, or object to its use. You may withdraw consent at any time without affecting earlier lawful processing.
Right to object: you may object to processing based on legitimate interests, including public gameplay records and cookieless measurement. We will stop unless we demonstrate compelling legitimate grounds or the processing is needed for legal claims.
Email privacy@jumpthrow.gg to exercise a right. We normally respond within one calendar month and may request proportionate information to verify identity. Some rights have legal exceptions.
Children, security & decisions
The service is for adults, uses proportionate safeguards, and makes no legally significant automated decisions.
JumpThrow is intended for adults. You must be at least 18 to create an account, connect a platform, or upload a demo. We do not knowingly invite children to provide account data. Public platform or demo data may still relate to a player under 18; a parent, guardian, or affected player can contact us.
If we know or reasonably suspect that public player-specific data concerns someone under 18, we restrict it while we assess the child’s best interests and safety. We do not delay an urgent restriction while verifying the request.
We use technical and organisational safeguards appropriate to the risks of the processing. No internet service can guarantee absolute security; please tell us promptly if you believe an account or data has been compromised.
Complaints & contact
Contact us first about privacy concerns; you may also complain to the ICO.
Send privacy requests or data-protection complaints to privacy@jumpthrow.gg. For a complaint, explain what happened and the outcome you want. We will acknowledge it within 30 days, investigate without undue delay, keep you informed, and provide an outcome.
You may also complain to the UK Information Commissioner’s Office. We ask that you contact us first so we have an opportunity to resolve the concern.