Privacy
Last updated 27 September 2026
x-ray.gg turns CS2 demos into analysis for teams and players. This page says what we collect, why, who can see it, where it's kept and how to have it deleted. The short version: we use your data to run x-ray.gg for you and your team, and nothing else. No ads, no trackers, and we never sell data.
Who we are
x-ray.gg is made by Josh and Brad in the United Kingdom. We decide how your data is used, which makes us the "controller" under UK data protection law (the UK GDPR). For anything on this page, email hello@x-ray.gg.
What we collect
When you sign in
- Steam: your Steam ID, and your public Steam name and picture. We use the Steam ID to find you in demos.
- FACEIT: your FACEIT account ID, nickname and email address.
- Discord: your Discord ID, name and email address.
- Google: your Google account ID, name and email address.
- Email link: your email address.
We never see or store a password for any of these.
What you and your team add
Your team and your role in it, the roster, the calendar and who's available, the playbook, comments, notes, reminders, your preferences and your time zone.
Demos
The demos you or your team upload. A CS2 demo records everyone in the match, not only you: each player's Steam ID and in-game name, where they went, what they did and the in-game chat. We turn this into stats, replays and findings. We also analyse demos of professional matches that are published publicly, which include the pro players' in-game names and Steam IDs.
Technical
The cookies that keep you signed in (listed below), and the standard logs our hosting providers keep to run and protect the site (IP address, browser, time of the request).
Why we use it
- To run x-ray.gg for you: signing you in, showing your team its analysis, finding you in your team's demos. This is the service you asked for (our legal basis: our agreement with you).
- To analyse the matches a team played, including the other players in them, and public pro matches: this is what x-ray.gg is for, it's what teams expect from match analysis, and a team's own demos are only shown to that team (legitimate interests).
- To keep the site safe and working, and to fix problems (legitimate interests).
- To email you sign-in links and messages about your account and team. Anything optional, like a digest, you can turn off.
Who can see it
- Your team: members see the team's pages as far as their role allows; a guest sees only what they were given.
- A team's own demos are seen only by that team. Public pro demos are seen by everyone on x-ray.gg.
- Josh and Brad can see any team's data, to fix problems and help when you ask.
- Nobody else, apart from the providers below, who work for us and only on our instructions.
Where it's kept and who helps us
- Supabase keeps your sign-in and your team's data, in Ireland (EU), and sends sign-in emails.
- Vercel runs the website.
- Cloudflare connects the website securely to the computer that processes demos.
- Our processing computer in the UK keeps the demo files and the analysis made from them.
- GitHub keeps our code, in a private repository, with a copy of each team's settings.
- Steam, FACEIT, Discord and Google tell us who you are when you sign in with them. Their own privacy policies cover what they do.
Vercel, Cloudflare and GitHub are US companies, so some data may be handled outside the UK. When it is, it's protected by the UK's data bridge with the US or by the standard contract clauses the UK approves.
How long we keep it
- Your account: while you have one. Delete it and we remove your data within 30 days. What you added to a team (comments, playbook notes) stays with the team, without your name.
- A team's data: until the team is deleted, then 30 more days in case it was a mistake, then it's gone.
- Demos: the analysis stays while the team exists, so old games can still be watched. The original demo files may be deleted sooner.
- Backups: one a day, each kept for 14 days.
Your rights
You can ask us to:
- give you a copy of the data we hold about you;
- correct it;
- delete it;
- stop or limit using it, or object to how we use it;
- send it to you, or someone else, in a file you can use.
Email hello@x-ray.gg and we'll answer within a month. This includes players who appear in a team's demos but don't use x-ray.gg. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Young players
You need to be 13 or older to use x-ray.gg, the same as Steam. Players under 18 get the most private settings by default, and we don't push them to pay for anything.
Cookies
We only use cookies the site needs to work, so there's nothing to accept or decline.
| Cookie | What it's for | How long |
|---|---|---|
| sb-…-auth-token | Keeps you signed in | Until you sign out |
| xr_gate | Remembers the site password while x-ray.gg is private | 30 days |
| xr_view_as | Josh and Brad only: seeing the site as someone else, to fix problems | 8 hours |
Your theme, colour and calendar choices are saved in your browser only, and never sent to us.
Keeping it safe
Every connection is encrypted, every team's data is walled off from every other team's, and each request is checked against who you are and what your role allows.
Changes
When this page changes we'll update the date at the top, and tell you on x-ray.gg before a change that affects how we use your data.