Who is responsible
The controller responsible for data processing on setpos.gg under the GDPR is the private individual who runs setpos.gg. Email: . The full legal notice is in the Impressum. setpos.gg is not required to appoint a data protection officer.
What setpos collects
Only what’s needed to deliver the site and understand how it’s used.
You can use setpos.gg without an account and without telling it who you are. The site handles:
- Connection data your browser sends with every request, such as your IP address, browser type and the page requested (see Hosting, Cloudflare).
- Usage data about what you do on the landing page and the map explorer, including masked session recordings (see Analytics).
- Small preferences stored in your own browser (see Cookies and browser storage).
- Messages you send by email or on Discord.
Fonts, scripts, images and videos are served from setpos.gg’s own domains. The site does not embed YouTube, social media widgets, ad networks or tracking pixels, and it makes no automated decisions about you.
Hosting and server logs
The server keeps request logs to keep the site running and secure.
setpos.gg runs on a server rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which processes data on setpos’s behalf under a data processing agreement (Art. 28 GDPR).
When you open a page, the server records technical request data: IP address, date and time, the page or file requested, the response status, the referring page and your browser’s user agent. This is needed to deliver the site, find errors and fend off attacks. The legal basis is setpos’s legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Logs are kept for up to two years, then deleted.
Cloudflare and media delivery
Cloudflare sits in front of the site to make it fast and protect it, and stores the videos.
setpos.gg uses Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, for its DNS,
as a content delivery network that caches pages close to you, and for protection against
attacks. Lineup videos and images are stored in Cloudflare R2 in the EU and delivered from media.setpos.gg.
To do this, Cloudflare processes connection data such as your IP address and request details. Cloudflare may process data in the USA; it is certified under the EU-U.S. Data Privacy Framework, and setpos uses Cloudflare under its data processing agreement, which includes the EU Standard Contractual Clauses. The legal basis is setpos’s legitimate interest in fast and secure delivery (Art. 6(1)(f) GDPR).
Analytics and session recordings
setpos watches how the site is used, including masked screen recordings, to fix what’s confusing. You can turn it off.
setpos.gg is still young, and most problems only show up when real people use it. On the
landing page and the map explorer, setpos uses PostHog, provided by PostHog Inc., 2261
Market St. #4008, San Francisco, CA 94114, USA. Data is stored in PostHog’s EU cloud in
Frankfurt, Germany, and sent through setpos’s own address e.setpos.gg.
What is collected
- Pages viewed and specific actions, such as which map, spawn or lineup you open, copying a command, and video playback (starting, buffering, speed, errors).
- Session recordings: the layout of the page, mouse movement, clicks and scrolling, replayed like a video. All text on the page and anything typed into fields is masked before it leaves your browser.
- Errors in the site’s code and page loading performance.
- Browser, operating system, device type, screen and window size, the referring website and an approximate location (country and city), looked up from your IP address. The IP address itself is not stored.
- A random ID stored in your browser, so visits from the same browser can be connected. It is not linked to your name, Steam account or any other identity.
Internal tools and API pages are never measured. The legal basis is setpos’s legitimate interest in understanding how the site is used, so it can be fixed and improved (Art. 6(1)(f) GDPR). PostHog processes the data on setpos’s behalf under a data processing agreement that includes the EU Standard Contractual Clauses. Session recordings and events are kept for up to two years, then deleted.
Switching it off
You can object to this at any time. Use the switch below. It saves your choice in this browser, stops any recording in progress, and nothing more is sent from it. If you clear your browser’s storage, the switch resets.
Analytics on this browser
Checking…
Cookies and browser storage
Visitors get no cookies. A few small entries live in your browser’s storage.
setpos.gg sets no cookies for visitors. It stores the following in your browser’s local storage, which you can delete at any time in your browser settings:
| Entry | Purpose | Kept until |
|---|---|---|
ph_phc_…_posthog | Random analytics ID and the current visit, see Analytics. | You clear it |
setpos.analytics.disabled | Remembers that you switched analytics off. | You clear it |
setpos:map-picker | Remembers how you prefer to pick throws on the map. | You clear it |
Contacting setpos and Discord
If you email , your address and message are used only to answer you. Messages are deleted once the matter is settled, unless the law requires keeping them. The legal basis is setpos’s legitimate interest in answering your request (Art. 6(1)(f) GDPR), or taking steps you asked for (Art. 6(1)(b) GDPR).
The setpos Discord server is run on Discord, a service of Discord Netherlands BV, Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands. When you join, Discord processes your data under its own privacy policy. Messages you post there, including lineup reports, are visible to other members, and setpos can see your Discord name and what you post.
Links to other services
setpos.gg links to the Steam Workshop, Discord and other sites. Nothing is sent to them until you follow a link. Once you do, their own privacy policies apply.
Your rights
Under the GDPR you have the right to:
- get a copy of the data setpos holds about you (Art. 15),
- have wrong data corrected (Art. 16) or your data deleted (Art. 17),
- restrict how it is processed (Art. 18),
- receive your data in a portable format (Art. 20),
- object at any time to processing based on legitimate interests, for reasons arising from your particular situation (Art. 21), including the analytics described above,
- complain to a data protection supervisory authority (Art. 77), in particular in the EU country where you live or work, or where the alleged breach took place.
setpos can usually only find your data if you tell it when and how you visited, because the site doesn’t know who you are. To use any of these rights, write to .
Changes to this policy
When setpos.gg adds features that handle personal data, this policy will be updated before they go live. The date at the top shows the latest version.