Privacy policy

CSMIX is run by Ruslans Vasiļjanovs, a self-employed person (saimnieciskās darbības veicējs) registered with the State Revenue Service of Latvia. For any question about your data, write to csmixcs2@gmail.com.

• From Steam: your SteamID and the name and avatar of your public profile - we receive them from Valve through Steam sign-in and your public profile. We never receive your Steam password: you sign in on the Steam website.
• On the game servers: statistics (experience, level, kills, deaths, assists, shots, hits, headshots, rounds, playtime, join dates), your IP address when you connect, punishments (type, reason, duration, who issued and removed them), your chosen skins and menu language.
• Server chat: all chat messages (the author's SteamID and name, team, text, time, server) - for moderation.
• Server voice chat: voice chat recordings (what a player says, SteamID, time, server) - for moderation; players are told about recording when they join a server. Recordings of the reported player from the 5 minutes before a report are attached to the report. Recordings are automatically converted to text on our own server to find insults.
• Discord (if you link it): Discord ID and name, link time, whether the joining bonus was received - to give subscription roles on our Discord server and the MIX Pro bonus. You can unlink it in your profile settings.
• In-game reports (!report): the SteamID and name of the reporter and of the reported player, the reason, server, map, time and a snapshot of the match: score, round, stats of the reporter and the reported player (kills, deaths, assists, headshots, damage, ping, money, health, weapon, level, Prime) and a list of all players on the server (name, SteamID, team, kills, deaths, assists, ping). When a moderator takes a report, the site saves the part of the chat around it. The reported player never sees who reported them.
• Tickets on the website (question, complaint about an admin, moderator application): messages, server, time and, if you choose, your Discord name and screenshots (up to 5 MB, up to 4 per message); in a moderator application - your age, hours in CS2, free time, experience and motivation. When handling a ticket, a moderator sees your level, playtime, kill/death ratio, number of punishments and past tickets.
• From FACEIT: your FACEIT level, which the game server requests using your SteamID.
• MIX shop and subscription on the servers: your MIX balance, the log of MIX earned and spent, items bought in the shop and which of them are equipped (prefix, colours, grenade trail, parachute), your subscription (MIX+ or MIX Pro, the date it runs until, which bonuses you have turned off).
• Subscription purchases: from Tebex we receive the order number, what was bought, the amount, currency, country, the buyer's email address and the payment status (paid, refunded, disputed). We take your SteamID from your sign-in on the website. Bank card details are received only by Tebex.
• On the website: your session after sign-in (a random identifier, IP address and browser), the time of your first and last sign-in and last visit, number of sign-ins, site settings, skin collections and likes, technical web server logs (IP address, time, page, browser), anonymised visit statistics (where you came from, e.g. a search engine, the landing page, number of pageviews).
• Admin action log: who issued or removed a punishment, to whom, when and why.

Without a SteamID you cannot play on the servers or sign in on the website; everything else (Discord name, screenshots, moderator application) is optional.

We do not collect your phone number or bank card details (only Tebex receives them), we do not show ads, we do not sell data, and we do not use third-party analytics services or cross-site tracking. We only receive your email address and name if you write to us by email, give them in a ticket yourself or buy a subscription (Tebex passes on your email address).

• Running the website and servers (sign-in, profile, statistics, skin changer, collections, settings) - performance of a contract, i.e. our Terms (Art. 6(1)(b) GDPR).
• MIX shop and subscriptions (crediting MIX, shop purchases, activating a subscription and its bonuses, questions about orders and refunds) - performance of a contract: the Terms and the Terms of sale (Art. 6(1)(b)).
• Sales records (records of orders and refunds) - legal obligation under Latvian accounting and tax law (Art. 6(1)(c)); protection against payment fraud and payment disputes - legitimate interest (Art. 6(1)(f)).
• Tickets - performance of the Terms (Art. 6(1)(b)); moderator applications - steps taken at your request before you may join the team (Art. 6(1)(b)).
• Fair play (anti-cheat, punishments, preventing ban evasion) - legitimate interest: fair games for everyone (Art. 6(1)(f)).
• Chat log, player reports, admin action log - legitimate interest: moderation, handling reports and overseeing the work of moderators (Art. 6(1)(f)).
• Voice chat recordings - legitimate interest: moderation and handling reports of verbal abuse (Art. 6(1)(f)).
• Discord linking (subscription roles, joining bonus) - performance of the contract at your request (Art. 6(1)(b)).
• Security (protecting accounts, preventing attacks and abuse) - legitimate interest (Art. 6(1)(f)).
• Visit statistics (how many people visit the site and where from, e.g. search engines) - legitimate interest: improving the website (Art. 6(1)(f)). Only daily totals without personal data are kept. To count unique visitors per day, we use a daily hash of your IP address and browser: it cannot be reversed to your IP and is deleted after 2 days. No cookies or browser storage are used for this.
• Public profiles, the leaderboard, punishments shown in profiles and the list of players online on server pages (including FACEIT level) - legitimate interest: competition, transparent moderation and letting people see who is playing right now (Art. 6(1)(f)).
• Legal compliance (requests from authorities) - legal obligation (Art. 6(1)(c)).

You can object to processing based on legitimate interest - see "Your rights".

Your name, avatar and SteamID, level, statistics, leaderboard position, punishments with reason and duration, equipped skins and public collections. Profiles of players who have not played for a long time or have played very little are hidden from search engines.

Server pages show the players online in real time: name, SteamID (a link to the profile), team, kills and deaths, headshots, ping, time on the server, Prime, level and FACEIT level. Chat, reports and tickets are never shown publicly.

The anti-cheat on our servers automatically detects signs of cheating and can issue a ban. Automatic filters also look for insults and advertising in text and voice chat: the chat filter hides advertising and masks insults without any punishment; for repeated insults in voice chat the system gives a warning and then a temporary voice mute (from 10 minutes to 2 hours). You have the right to have the decision reviewed by a person, to explain your point of view and to contest it - create a ticket or write to csmixcs2@gmail.com.

We do not sell data. It is shared only with those the Service cannot run without:

• OVH - hosting of the website and database, attack protection (Germany, EU);
• Hostika - hosting of the game servers and the website's protective entry point (Lithuania, EU);
• Cloudflare - domain DNS (EU and USA; transfers under the EU-US Data Privacy Framework and EU Standard Contractual Clauses);
• Tebex (Tebex Limited, United Kingdom) - the official seller (Merchant of Record) of subscriptions: it takes payments, issues receipts, pays taxes and protects against fraud. Tebex processes the data you enter at checkout (email address, country, card details) as an independent controller under its own privacy policy; we pass only your SteamID to Tebex to link the order to your account (EU adequacy decision for the United Kingdom);
• Valve (Steam) - Steam sign-in and profile data; Valve is responsible for data in Steam under its own policy. When the site shows avatars, your browser loads them from Steam servers, so Valve sees your IP address;
• FACEIT - the game server sends your SteamID to find out your FACEIT level (United Kingdom; EU adequacy decision);
• Discord (Discord Inc., USA) - Discord sign-in when linking and adding you to our Discord server; Discord is responsible for data in Discord under its own policy (transfer to the USA under the EU-US Data Privacy Framework);
• Google - the csmixcs2@gmail.com mailbox: emails you send us are stored in Gmail (transfer to the USA under the EU-US Data Privacy Framework);
• CSMIX moderators - see reports, tickets, chat, voice recordings from reports and player statistics to the extent needed for moderation and are obliged to keep them confidential.

Discord and the Steam group are external communities with their own rules and policies. Data is disclosed to authorities only where the law requires it.

• website session - 30 days after it was last used;
• technical sign-in cookies - 10 minutes;
• web server logs - 14 days;
• daily hashes for counting visitors - 2 days; visit totals without personal data - kept indefinitely;
• statistics, website account data (sign-ins and visits), settings and collections - while you use the Service; after 24 months of inactivity they may be deleted or anonymised;
• your IP address when connecting to a server - as long as it is needed to prevent ban evasion, no longer than 12 months after your last connection;
• server chat - 7 days;
• voice chat recordings - 7 days; recordings attached to a report - as long as the report is kept;
• Discord link - until you remove it; the joining bonus mark - while the account exists (so the bonus is not given twice);
• in-game reports - until they are handled; handled reports - 90 days after the decision. For statistics on the work of moderators, a summary without player data is kept indefinitely: report number, dates, the moderator's SteamID, decision, reason, server and whether a punishment was issued;
• tickets and screenshots - 12 months after the ticket is closed; screenshots uploaded but never sent - 1 day;
• punishments and the admin action log - while the punishment is active and for 12 months after it ends; permanent bans for cheating - for as long as the ban applies;
• email correspondence - until the matter is resolved and for 12 months after;
• MIX balance, MIX log, shop items and subscription - while you use the Service (like statistics);
• records of subscription purchases (order number, SteamID, what was bought, amount, date, refunds and disputes) and correspondence about them - 5 years after the end of the year of purchase, as required by Latvian accounting law; they cannot be deleted earlier on request.

We only use strictly necessary cookies, so no consent banner is required:

• csmix_sid - your session after Steam sign-in, 30 days;
• csmix_state and csmix_ret - protect the Steam sign-in and return you to the right page, 10 minutes;
• NEXT_LOCALE - your chosen site language, 1 year;
• in browser storage (csmix.modeview, csmix.favorites) - server list filters and favourite servers.

There are no advertising or analytics cookies. You can delete cookies in your browser settings, but without csmix_sid you cannot sign in.

You can find out what data we hold about you and get a copy, correct it, ask for it to be erased or for processing to be restricted, receive it in a machine-readable format, object to processing (including being shown in the list of players online and on the leaderboard), and ask for a human review of an automated decision.

Write to csmixcs2@gmail.com and include your SteamID. To make sure the request is yours, we may ask you to sign in on the site through Steam. We reply within one month, free of charge. Active punishments are not deleted while they apply - otherwise a rule breaker could evade a ban.

If you believe we are violating your rights, you can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, dvi.gov.lv) or to the data protection authority of your EU country.

The Service may be used from the age of 13; under 18 with your parents' knowledge. If a child under 13 uses the Service, parents can write to us and we will delete the data.

The website works only over HTTPS, and session cookies are not accessible to page scripts. The website's access to the database is limited to the tables it needs. Reports, chat and tickets are visible only to moderators after they sign in through Steam. Keys and passwords are stored only on the server. We will report a serious data breach to the supervisory authority within 72 hours, and to players if there is a high risk.

We update this policy when the Service changes. We will announce significant changes on the website.