CSSurfCSSURF
// LEGAL

Privacy Policy

Effective 2026.

What CSSurf is

CSSurf looks up publicly available Counter-Strike 2 data for a Steam player and shows an estimated cheat risk and trust factor, plus stats from Steam, Leetify, and FACEIT. Everything shown is an estimate built from public data — not proof of cheating, and not connected to or endorsed by Steam or Valve.

No accounts — what we collect from you

There are no user accounts and no sign-up. From visitors we handle only:

  • Search queries — the SteamID / profile URL / vanity you enter is sent to public third-party APIs to build the report. We cache the finished report for a few minutes.
  • A hashed IP address when you submit a community flag or hit a rate limit — a one-way SHA-256 hash with a secret salt, used only to stop the same person flagging a player twice and to throttle abuse. We never store your raw IP address.
  • A daily total scan count — a single number, not tied to anyone.

Information about players you look up

Reports are assembled from public data. Cheat risk, trust factor, and the community verdict are estimates and opinions, not statements of fact. Community flags submitted about a player are stored inside CSSurf (category + hashed voter ID) and a player is only listed publicly after independent reports cross a threshold. If you are that player, see Removing your data below.

Cookies & local storage

CSSurf does not use advertising or cross-site tracking cookies. Your browser may store small preferences (such as the last leaderboard region you viewed) in local storage on your own device; this never leaves your browser.

Analytics

We use Vercel Web Analytics to understand aggregate traffic (page views, referrers, country). It is privacy-friendly, does not use cookies, and does not build an advertising profile or track you across other sites.

Third-party services

To build reports and run the site we rely on: the Steam Web API, Leetify, and FACEIT (player statistics); Upstash Redis (storing community flags and rate-limit counters); and Vercel (hosting and analytics). Their handling of requests is governed by their own privacy policies.

What we don't do

We don't sell your data, we don't build advertising profiles about you, and we don't store raw IP addresses. Community flags stay inside CSSurf and are never sent to Steam or Valve.

Data retention

Community flags and their hashed voter IDs persist so the watchlist and duplicate-prevention keep working. Rate-limit records expire automatically. Cached player reports expire after roughly ten minutes.

Removing your data & your choices

If you are a player and want your profile removed from the public watchlist, want a community verdict reviewed, or have any privacy request, email contact@cssurf.site with the Steam profile link. We honour reasonable removal and correction requests. Because the underlying stats come from public Steam / Leetify / FACEIT data, removing them there (or making your Steam profile private) also limits what CSSurf can show.

Children

CSSurf is not directed to children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy as the service evolves; the effective year above will change when we do.

Contact

Questions or a removal request? Email contact@cssurf.site.