Last updated: 6 November 2026
The short version
The person responsible for the data described here (the controller under the GDPR) is the private person who runs WorldOfDota2, based in Slovenia. Questions about your data: write to sebastian@efan.gg. In this text, “I” means that person.
Like every website, my web server receives your IP address and the details of your request: date and time, the page or file asked for, the result, the amount of data sent, the page you came from, and the name of your browser. I use this to deliver the page, keep the server secure and find faults. I do not use it to identify visitors or to build profiles.
Legal basis: my legitimate interest in running a secure and working website (Article 6(1)(f) GDPR). These entries are kept in the web server’s log for about ten days and then deleted automatically.
The website is delivered through Cloudflare (Cloudflare, Inc., USA), a network that speeds up and protects websites. Your requests pass through Cloudflare’s servers, so Cloudflare also sees your IP address and request details. It handles them as described in its own privacy policy and relies on recognised safeguards for data transfers from the EU (the EU–U.S. Data Privacy Framework and standard contractual clauses). If Cloudflare ever has to check your browser for security reasons it may set a strictly necessary security cookie; this website sets none itself.
To see which pages are useful I count visits with a small script of my own. It uses no cookie and stores no IP address, and nothing is sent to anyone else. When you open a page, your browser sends: a random number that identifies this visit in this browser tab only (kept in the tab’s temporary storage, not in a cookie, and renewed after 30 minutes without activity), the page you are on, for how many seconds the page was in front of you, the address of the website you came from, the campaign tag if the link had one (utm_source), and the width of your window. The server adds your country (Cloudflare tells it, so the IP address itself is not stored) and the kind of device, browser and operating system (from the browser’s name).
Legal basis: my legitimate interest in knowing how the site is used (Article 6(1)(f) GDPR). These records are deleted after about 13 months (395 days).
Hero and item pictures are loaded from Valve’s content network (steamstatic.com), and the thumbnails of videos in the News section from YouTube, which belongs to Google. Your browser asks those servers directly, so their operators receive your IP address and browser details. Their own privacy policies apply. Links to other websites lead to services I do not control.
If you write to me, I receive your e-mail address and your message. I use them to answer you, and delete them when the matter is settled unless I have to keep them.
The site can show advertising from Google AdSense. Where ads are shown, Google (for visitors in the European Economic Area and Switzerland, Google Ireland Limited; elsewhere Google LLC) and its advertising partners may use cookies and similar technologies to show and measure ads and, if you agree, to personalise them. Google then receives data such as your IP address, your browser and the pages you visit. How Google uses this is explained on Google’s page about data from sites that use its services.
If you visit from the EEA, the United Kingdom or Switzerland, Google shows a consent message first: ads that use cookies or your personal data are only personalised if you agree there (Article 6(1)(a) GDPR). Without your agreement you may still see ads that do not use your data for personalisation. You can withdraw your choice at any time by clearing this site’s data in your browser (the message then asks again), and you can manage Google’s ad personalisation yourself at adssettings.google.com. Ad blockers work on this site too.
I do not receive the personal data that Google collects for ads; I only see totals (views, clicks, earnings).
The site has a login for the person who runs it (registration is closed to the public). Logging in sets two cookies that keep you signed in. They are strictly necessary, are set on the admin address only, and are never set for visitors of the public site.
My server collects Dota 2 statistics, patch notes, news and tournament data from public sources, for example OpenDota, Valve, Steam, Liquipedia and the websites of tournament organisers. These requests come from my server and contain no data about visitors. More under Legal notice.
| What | Where | How long |
|---|---|---|
| IP address, time, requested page, browser name | My web server’s log | About ten days, then deleted automatically |
| The same request data | Cloudflare | As set out in Cloudflare’s privacy policy |
| Visit statistics (no IP address, no cookie) | My database | About 13 months, then deleted automatically |
| Ad data | As set out in Google’s policies | |
| E-mails you send me | My mailbox | Until the matter is settled, unless I must keep them |
The website runs on a server that I administer, and is reached through Cloudflare.
Under the GDPR you may ask me for access to the data I hold about you, for it to be corrected or deleted, or for its processing to be restricted, and you may object to processing that rests on my legitimate interest. Where you gave consent you can withdraw it at any time. Write to sebastian@efan.gg.
One practical note: the server log entries and the visit statistics are not linked to a name. I can find yours only if you tell me your IP address and roughly when you visited, and the statistics hold no IP address at all, so they cannot be matched to you.
You also have the right to complain to a data protection authority. In Slovenia that is the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana. You can also contact the authority in your own country.
If the website starts doing something new with data, this page changes first, and the date at the top changes with it.