Privacy notice

Who we are

Ferdinand Christiaan Relling, trading as Dota Drafter operates Dota Drafter and is the data controller for the personal data described here. Questions or requests: support@nu-wave.tech.

What we collect and why

• Account data — email address and authentication identifiers (including a Google account ID if you sign in with Google). Used to create and secure your account and to link your Pro unlock. Legal basis: performance of our contract with you.
• Purchase records — an order reference, invoice number, amount, currency and the email used at checkout, received from our reseller. Used to grant, restore and revoke Pro access and to answer billing queries. Legal basis: contract performance and legal obligation. We never see or store your card details.
• Draft data — the heroes, bans and lane locks in your current draft are stored on your own device, not on our servers.
• Technical and security data — IP address, device and browser information and error logs generated when you use the site. Used to keep the service running, prevent abuse and fix faults. Legal basis: legitimate interests.
• Support messages — the content of emails you send us, used to answer you. Legal basis: legitimate interests.

We do not sell your personal data and we do not use it for advertising profiling.

Who we share it with

• Paddle.com — our reseller and Merchant of Record, for the sale of the product, payment processing, tax compliance, invoicing and refunds. Paddle processes your payment data under its own privacy notice.
• Hosting and infrastructure providers — who run our application, database and authentication on our behalf as processors.
• Public game-data sources — we fetch aggregated Dota 2 statistics from third parties such as OpenDota. These requests contain no personal data about you.
• Professional advisers and authorities — legal or accounting advisers, and public authorities where we are required by law.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account and purchase records are kept while your account exists and for as long as needed to meet tax and accounting obligations (typically up to seven years for purchase records). Technical logs are kept for a short period, usually up to 90 days. When data is no longer needed we delete or anonymise it.

Security

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials handled by our authentication provider, and access controls restricting who can reach production data.

Cookies and local storage

We use essential storage only: a sign-in session token so you stay logged in, and local storage for your current draft and preferences. We do not use advertising or tracking cookies. Our checkout provider sets its own cookies necessary to complete a payment. You can clear this data at any time in your browser settings, which will sign you out.

Your rights

Depending on where you live you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where we rely on it. Email support@nu-wave.tech and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

Children

The service is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect their data; contact us and we will delete it.