LOCUS GRIDLocus Grid ("the service", "we") is a CS2 matchmaking platform with anti-cheat. We respect your privacy and process your personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and applicable law. This policy clearly explains what we collect, why, how long we store it, and what rights you have.
// 1. DATA CONTROLLER
Service: Locus Grid | Website: www.locus-grid.se
The data controller is the natural person operating Locus Grid.
Contact: [email protected]
We respond to data subject requests within 30 days.
// 2. DATA WE COLLECT
We only collect what is necessary to provide the service:
| DATA | PURPOSE | STORED AS |
|---|---|---|
| Username | Identification within the service, visible to other users | Plaintext |
| Password | Authentication | Cryptographic hash (bcrypt) — never in plaintext |
| Email address | Account verification, password reset, and important notifications | Plaintext |
| Steam ID & game data | Matchmaking, ranking (ELO), match history, statistics, and anti-cheat | Plaintext, linked to your account |
| Anonymous visit counter | Aggregate traffic statistics — no individual tracking | SHA-256 hash of IP address — irreversible, no personal data stored |
> ANTI-CHEAT: To protect matches from cheating, LocusAC analyzes gameplay telemetry (shots, movement, hits, etc.) server-side during live matches. This data is used solely for cheat detection and fair ranking — it is never sold and never shared with third parties.
We derive a coarse country code (e.g. SE) from your IP solely to display a flag and ranking context — no precise location is stored. We do not collect behavioral data outside the service or third-party information beyond Steam (matchmaking). Visit statistics use an irreversible hash — individual IP addresses are never stored in plaintext.
// 3. LEGAL BASIS FOR PROCESSING
- Contract (Art. 6.1b GDPR) — the data is necessary to provide the matchmaking service you requested.
- Legitimate interest (Art. 6.1f GDPR) — protection against unauthorized access and misuse of the service.
- Consent (Art. 6.1a GDPR) — you actively accept this policy at registration.
// 4. RETENTION PERIOD
Your data is stored for as long as your account is active and you use the service.
> IMPORTANT: Deleting your account means that all your personal data is permanently and immediately deleted from all our systems — username, email address, and password hash. This action cannot be undone. You can delete your account at any time via your profile page.
// 5. COOKIES AND LOCAL STORAGE
We use only necessary session cookies:
| COOKIE | PURPOSE | LIFETIME |
|---|---|---|
| Session cookie (PHPSESSID) | Keeps you logged in during the browser session | Until you close the browser |
| Remember me token | Keeps you logged in for 30 days if you choose | 30 days (can be disabled) |
Necessary cookies required for the basic function of the service are exempt from the consent requirement under the ePrivacy Directive and GDPR. We use no tracking cookies, analytics tools, or marketing cookies.
// 6. SHARING WITH THIRD PARTIES
We do not sell, rent, or share your personal data with third parties. The data is used exclusively to operate the Locus Grid service.
- No social media integrations
- No analytics services (Google Analytics etc.)
- No ad networks
- Servers located within the EU/EEA
> LAW ENFORCEMENT: We may disclose data to competent authorities (police, courts, or other public bodies) if required to do so by law, court order, or other legally binding obligation. We will only provide the minimum data required and will inform the affected user where legally permitted to do so.
// 7. SECURITY MEASURES
We take technical and organizational measures to protect your data:
- Anti-cheat processed server-side — game data used solely for cheat protection and fair ranking
- Game servers authenticate players via Steam ID whitelist
- Passwords hashed with bcrypt — the original password cannot be recovered
- HTTPS/TLS 1.3 for all communication
- CSRF protection on all forms
- Rate limiting against brute-force attacks
- Strict HTTP security headers (HSTS, CSP, X-Frame-Options)
- Limited access — email addresses are masked in the admin view and never shown in plaintext to regular administrators
// 8. YOUR RIGHTS UNDER GDPR
As a registered user you have the following rights. Contact us to exercise them — we respond within 30 days.
Right to know what data we hold about you and how it is processed.
Right to have inaccurate data corrected without undue delay.
Right to have your data erased ("right to be forgotten"). Done immediately via the profile page.
Right to request that we restrict the processing of your data.
Right to receive your data in a machine-readable format.
Right to object to processing based on legitimate interest.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe we process your data in violation of GDPR. Website: www.imy.se
// 9. DELETE YOUR ACCOUNT
You can delete your account and all your data at any time directly via your profile page — the button is at the bottom of the page.
> NOTE: Account deletion is immediate and permanent. Username, email address and all account-related data are deleted directly from the database. There is no undo function and no backup that can restore the data. Your username is released and can be registered by someone else.
You can also contact us directly if you wish to request deletion without logging in.
// 10. CHANGES TO THIS POLICY
We may update this privacy policy. For material changes, registered users will be notified by email to the address associated with the account, at least 30 days before the change takes effect. Continued use of the service after changes take effect constitutes acceptance.
// CONTACT
> Service: Locus Grid
> Website: www.locus-grid.se
> Email: [email protected]
> Data protection inquiries answered within 30 days.
> Supervisory authority: IMY — imy.se
> This policy applies from 2026-06-16 and supersedes any earlier versions. Locus Grid reserves the right to update the policy in accordance with new legislation or service changes.
Waiting for Steam
Finish signing in in the window that opened. If you cannot see it, your browser may have blocked it.
Switching Steam account? Sign in to Steam in the window — the login continues here on its own afterwards. Having the Steam client running is not enough; the browser has its own session.