Terms of use

1. Purpose

These terms of use (the “Terms”) govern access to and use of the CStonx website and its Windows application (together, the “Service”). By using the Service, signing in with Steam or installing the application, you accept these Terms without reservation. If you do not accept them, do not use the Service.

2. Definitions

• Site: the CStonx website and its pages.
• Application: the CStonx Windows program, portable or installed.
• User: anyone who browses the Site or uses the Application.
• Tracked player: the User whose Application sends their matches, and who owns a player page.
• Match players: the other players present in a match of the Tracked player.
• Publisher: the person who publishes the Service, identified in the legal notice.

3. Access to the Service and account

Browsing public pages is free of charge. Some features (managing your page, history, settings) require signing in with Steam. Sign-in uses the official “Sign in through Steam” system: CStonx never receives your password, only your public Steam identifier (SteamID64).

You must be old enough under Steam’s rules to use an account, and be allowed to play Counter-Strike 2. You are responsible for the use of your session on your device.

Full access (player page, games sent by the Application, forum participation) is subject to approval: you request it once signed in, and the Publisher accepts or rejects it. This access may be revoked at any time.

4. Description of the Service

CStonx displays public statistics about the players in a Counter-Strike 2 match, the state of the Tracked player’s match, and a history of their finished matches. It also points out the players already met in that history and the players likely queued together, and lets a signed-in user keep personal notes about players. Finally, it computes its own statistics (the “CStonx stats”) and a statistical analysis (the “CStonx analysis”, section 7) from the matches it has seen. The Service is provided free of charge, as is, and may change, be modified or be discontinued at any time.

CStonx is an independent project. It is not affiliated with, endorsed or sponsored by Valve Corporation, FACEIT or Leetify.

5. Windows application

The Application only uses official features provided by Valve. It does not read the game’s memory, inject any code or modify any game file, except for a configuration file intended for this purpose by Valve, which it installs and removes at your request.

The Application is provided “as is”. The Publisher cannot guarantee its future compatibility with Counter-Strike 2, Steam, FACEIT or any anti-cheat system, whose rules may change. You remain solely responsible for installing and using it, in compliance with the terms of Valve, Steam and FACEIT.

6. Third-party data

The statistics shown come from third-party services (notably Leetify, FACEIT and Steam). They are provided by those services, under their own terms, and may be incomplete, delayed or inaccurate. Some players may have no data, for example if they are not registered with a service or have a private profile.

Data from Leetify is marked “Data Provided by Leetify” and is not stored permanently by CStonx.

CStonx may query CSRep (csrep.gg) only through its official API and only when an API key issued by CSRep is configured; without a key, no request is made. The official sanctions it reports (for example FACEIT or Gamers Club) may appear in the bans list. Its own flags are shown as opinions, never as sanctions, and are not used in the CStonx analysis. This data stays in a temporary cache for a few minutes and is not stored permanently.

The grenades in the Utility tab come from Daily CS Nades’ public dataset, built from professional match demos and credited with a link to its source. Setpos markers (position and angles) come from the CS2 Annotations repository (MIT licence, credited with a link). This data is synced once a day and stored in the CStonx database with its source; a grenade that disappears from its source is not deleted. Throw videos are hosted by YouTube: the player (youtube-nocookie.com) only loads if you click a video, and YouTube’s own terms and privacy policy then apply.

The Nade Solver computes grenade throws by simulation, from Counter-Strike 2 map collision geometry and the open source cs2-smoke-solver engine (PolyForm Noncommercial licence). The lineups it suggests are simulations: they are not guaranteed in game, and the smoke volume shown is an approximation. A search is computed on the player’s PC by their CStonx app: the site only sends that app the map and the chosen positions, and the app extracts the map geometry from the player’s Counter-Strike 2 install, without uploading any of its files.

7. CStonx analysis

The CStonx analysis is an automatic and experimental statistical indicator. It measures how far a player’s observed performances (aim, consistency, evolution over time, official sanctions, in-match behaviour) stand from those of a reference population of players of a similar level. It gives a risk from 0 to 100, a confidence that depends on the amount of data and the coverage of the analysed matches; without enough data, no number is shown.

It is neither a probability of cheating, nor proof, nor an accusation, nor a judgement of any person. Atypical performances may concern a perfectly honest player, and its thresholds are not yet calibrated on verified cases. A private profile, a young account or having no FACEIT account are never considered suspicious on their own, and community flags are not used.

Using this analysis to harass, disparage, threaten or publicly accuse a player is forbidden. Cheating reports must go through Valve’s or FACEIT’s official tools.

8. User obligations

By using the Service, you agree not to:

• harass, insult, threaten or discriminate against other players based on the information displayed;
• use the Service to gain an unfair in-game advantage, or divert it from its purpose;
• massively extract data from the Site (scraping), overload the Service or bypass its limits;
• attempt unauthorised access to the Service, its data or other users’ accounts;
• send falsified data to the Site, or modify the Application to do so;
• infringe the rights of third parties or applicable laws;
• post insulting, hateful, threatening or sexual content, misleading links, personal data or spam on the forum.

Forum messages are automatically analysed when sent. A message deemed suspicious is quarantined: it stays hidden, replaced by a warning stating the reason, until the Publisher reviews it and either publishes or deletes it.

The general channel and the forum are synced with the CStonx Discord server: a message posted on the Site is reposted there with your Discord name and avatar, and messages written in the linked channels of the Discord server are shown on the Site with their author’s Discord name and avatar. On Discord, messages remain subject to Discord’s terms of service and to the server’s moderation.

If you turn on the Discord reminder before training (off by default), the CStonx Discord server bot sends you a direct message with the session title, the team name, the time and a link to the Site. The Site only keeps a record of sent reminders (30 days) so they are not repeated. Your team's coaches can see whether you will get this reminder (on, off, Discord not linked or DMs closed), without seeing your Discord account.

The availability you enter in a team (typical week, time zone, unavailable days and their optional note) is visible only to the members of your teams. Past unavailable days are forgotten; everything is deleted with your account.

9. Personal data

The Publisher processes certain personal data to operate the Service, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data processed

• Public Steam identity: SteamID64, name and avatar, of the Tracked player and of Match players.
• Match data sent by the Tracked player’s Application: map, mode, score, round history, match statistics.
• Public statistics retrieved from the third-party services listed in section 6.
• Session: a sign-in cookie for users signed in with Steam.
• Access request: SteamID64, nickname, avatar, request date and decision.
• Forum messages: content, date, author (SteamID64, nickname, avatar) and, where applicable, the reason for quarantine; followed threads and last read date.
• Linked Discord account: Discord ID, name and avatar, link and update dates. It is required to post on the forum and is your identity on the Site forum and on the Discord server.
• Messages from Discord: content, date, the author’s Discord ID, name and avatar, Discord IDs of the message and thread.
• Match import (optional, turned on by the Tracked player in their settings): Steam match history authentication code (encrypted, never shown again), last tracked share code, ID and nickname of the FACEIT account linked to their Steam account, dates of the latest checks. Imported matches contain the map, score, date and the scoreboard of the players of the match (SteamID64, name, kills, assists, deaths, MVPs, headshots).
• Per-player match statistics: for each match seen by CStonx (analysed demos and end-of-match scoreboards imported from Valve or FACEIT), including for Match players, counters linked to each player’s SteamID64: kills, deaths, damage, rounds, headshots, KAST rounds, opening duels, clutches, utility damage, shots and hits, split by side, along with the map, mode, platform and date. To build reference populations, CStonx also keeps the FACEIT level, Elo and overall FACEIT statistics of the players concerned. Demo files themselves are not kept. Matches from a private page are only shown to people allowed to view that page.
• CStonx analysis history: at most once a day, the result of a player’s analysis (risk, confidence, number of analysed matches, model version), to show how it evolves.
• Notifications: type, date, read state and content (thread title and reply author, or SteamID64, nickname and ban counts of the watched player), notification types chosen.
• Device notifications (optional, turned on per browser): subscription address provided by the browser’s notification service, the associated encryption keys, language and activation date.
• Watched players (optional): SteamID64, nickname and avatar of the players you watch, date added, CStonx analysis trust when added, known VAC and game ban counts, date of the last check and, where applicable, date of the detected ban.
• Teams (optional): team name, members and roles, invitations (hashed token, duration and uses), strategies and variants (paths, grenades, notes, version history, comments), training sessions and attendance, Utility programs and each member’s progress, declared or validated mastery, match preparations (opponent, scouting report entered by the team, veto simulations, checklist and owners), grenade validations, activity log, and, for each member who turns it on, permission to gather their games into the team’s matches (games, maps, results and members present). This data is only visible to the team’s members.
• Personal notes: note (280 characters at most) and tags that a user signed in with an approved account attaches to a player’s SteamID64, with the date of the last change. They are only visible to their author and must contain neither abusive content nor personal data beyond what is useful for the game.
• Clips (optional): the video is made in the User’s browser, never on the server. If the User chooses to keep it, CStonx stores the video file, a thumbnail, its settings (format, camera, resolution, frames per second, round and time) and the source match; they are deleted together with the source demo, with the history or the account, and are only shown to people allowed to view the page. Clip preferences are tied to the account. CS2 maps and models imported for the 3D replay stay in the browser and are never sent to CStonx.
• App clips (optional): videos filmed on the User’s PC by the CStonx app, during a match or from a demo on request, then sent to CStonx if the User chose so in the app. CStonx stores the video file, its title, duration, resolution, the source match and moment; they are deleted after 30 days (unless pinned), with the account, or on the User’s request, and are only shown to people allowed to view the page.
• 3D replay annotations (optional): text, position in the scene, time range, colour, author and date. A private annotation is visible to its author only; only the match owner can share one with the people allowed to view their page. They are deleted with the demo, with the author’s account or the owner’s.
• Site feedback (optional): category, module, message, optional reproduction steps, visited page (without parameters), site version, language, screen size and, when the User is signed in, an internal link to their account so the feedback is deleted with it. No password, cookie, token, screenshot or file is attached. Feedback is only read by the site team and is not public.
• Personal library (optional): reference of the saved items (player, match, demo, round, moment, lineup, strategy or prep), favorite, note (1,000 characters at most), collections and dates. Only visible to its author; no title is copied, the site checks on every display whether the item is still accessible.
• Public Steam friend lists of the Match players: checked to spot players likely queued together, kept in memory, never stored.
• Technical logs: errors, response times, IP address in case of a security incident.
• Error reports: when an error occurs on the Site, a technical report is sent to an error tracking tool self-hosted by the Publisher (error message, page concerned, browser and operating system, load times for a sample of pages). SteamID64s, IP address, cookies and request content are removed before sending.
• Visit statistics: an audience measurement tool self-hosted by the Publisher counts page views and a few actions (sign-in, download, feedback on a guide page), without cookies or persistent identifiers. Page addresses are anonymised (no SteamID64 or match ID) and the browser’s “Do Not Track” signal is respected.
• Performance measures: page load and display times, sent by the browser with the page template only (no SteamID64, match ID or full address), and per-feature counts of requests, errors and durations on the server. Only totals are kept, in memory until the site restarts, with no link to an account or an IP address. The “Do Not Track” signal is respected.

Purposes and legal bases

• Providing the Service (statistics, live match, history): performance of these Terms.
• Displaying public statistics of Match players: legitimate interest in informing players about their match, using data already made public.
• Computing and displaying CStonx stats and the CStonx analysis from the matches seen by the Service: legitimate interest in informing players about their match through a statistical indicator, limited to game statistics.
• Securing and maintaining the Service: legitimate interest.
• Fixing errors and measuring the Site’s audience anonymously: legitimate interest in improving the Service.

Retention periods

• Current match: in memory, until the next match or a server restart.
• Match history: 1 to 7 days, depending on the Tracked player’s setting (3 days by default), then deleted automatically. Imported matches follow the same rule, and only those still within this period are imported.
• Import codes (Steam authentication code, share code, tracked FACEIT account): until the import is turned off in the settings or the account is deleted.
• Per-player match statistics and CStonx analysis history: 365 days at most after the match or the computation, then deleted automatically. A player’s data is deleted with their account.
• Leetify data: temporary cache of a few minutes, never stored permanently.
• Nade Solver searches (requested positions and results): 7 days, then deleted automatically. Saved lineups: until their author deletes them, or until their account is deleted; a published lineup is visible to everyone in the Utility tab.
• Steam friend lists: temporary cache of 30 minutes at most, never stored permanently.
• Personal notes: until their author deletes them, or until their account is deleted.
• Site feedback: until the team handles and deletes it, or until its author’s account is deleted; the 5,000 most recent at most.
• Personal library: until its author removes the item, or until their account is deleted.
• Teams: until the owner deletes the team or its last member is removed; team matches are kept 365 days at most and removed as soon as a member withdraws consent, leaves the team or deletes their account; ownership passes to the longest-standing member when the owner deletes their account.
• Session: 7 days at most, or until sign-out.
• Access request: as long as the account exists on the Service, or until the Publisher deletes it.
• Linked Discord account: until you unlink it from your settings, or until your account is deleted.
• Forum messages: until deleted by the Publisher or at their author’s request. A message deleted on Discord is also deleted from the Site, and vice versa for those posted from the Site.
• Notifications: 30 days, then automatic deletion (the 100 most recent at most per account).
• Device notifications: until they are turned off, expire or are rejected by the browser’s notification service, or until the account is deleted.
• Watched players: until you stop watching them or your account is deleted; a player’s ban state is deleted as soon as nobody watches them anymore.
• Error logs: the last 200 events at most.
• Error reports: 90 days, then automatic deletion.
• Visit statistics: kept as aggregated figures that cannot identify a visitor.
• Backups: an encrypted copy of the database is made every day and kept for 30 days at most, then deleted. Data erased from the Service therefore disappears from backups within 30 days.

Recipients

Data is neither sold nor rented. It is accessible to the Publisher and, for public or unlisted pages, to the people who view them. A new account’s page is unlisted: it only appears in the public list if the Tracked player makes it public. SteamID64s are sent to the third-party services listed in section 6 to obtain statistics. If match import is turned on, the authentication code and share codes are sent to Valve (Steam API and the Counter-Strike 2 game coordinator, through a Steam account dedicated to the Service), and the FACEIT ID to FACEIT, only to read the Tracked player’s matches. The SteamID64s of watched players are sent to Valve (Steam API) to check their bans. If a CSRep API key is configured, the SteamID64s viewed are sent to CSRep to obtain known official sanctions. If device notifications are turned on, the content of each notification is sent, encrypted, to your browser’s notification service (Google, Mozilla, Microsoft or Apple depending on the browser) to be shown on your device. Forum messages posted on the Site are reposted on the CStonx Discord server (Discord Inc., United States), visible to its members. The Service is hosted by the provider named in the legal notice.

Your rights

You have the right to access, rectify, erase, object to and restrict the processing of your data. The Tracked player can at any time make their page unlisted or private and reduce their history retention from their settings. Each author can edit or delete their personal notes at any time. Any player, including a Match player, can request that their information be hidden or deleted, including their CStonx stats and CStonx analysis, by contacting the Publisher (section 15). You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

10. Cookies and local storage

CStonx uses no advertising cookies and no tracking tools. Only a session cookie, strictly necessary for Steam sign-in, a language cookie, and the browser’s local storage to remember the light or dark theme and the last dismissed incident banner are used. These do not require prior consent. The audience measurement described in section 9 sets no cookies and does not read the browser’s storage. If you turn on notifications on a device, the browser registers a small program (service worker) used only to show these notifications. The YouTube player in the Utility tab only loads on request, when you click a video; it may then set its own cookies or use the browser’s storage.

11. Intellectual property

The code, design and content specific to CStonx belong to the Publisher. Counter-Strike, Counter-Strike 2, Steam and Valve are trademarks of Valve Corporation. FACEIT and Leetify are trademarks of their respective owners. Videos in the Utility tab belong to their authors and remain hosted on YouTube. Map images and game icons are the property of Valve Corporation and are used for illustration; some icons come from open-source projects under the MIT licence, whose licence is provided with the Site.

12. Liability and availability

The Service is provided without any guarantee of availability, accuracy or fitness for a particular purpose. The Publisher makes reasonable efforts to keep it available, but cannot be held liable for an interruption, data loss (including history), an error in the statistics displayed, or the consequences of a sanction imposed by a game publisher or third-party platform.

13. Suspension and deletion

The Publisher may, without notice, hide or delete a page, block data sent by an Application or refuse access to the Service in the event of a breach of these Terms, abusive use or a risk to the security of the Service. You can stop using the Service at any time by uninstalling the Application and signing out.

14. Changes to the Terms

These Terms may be changed at any time. The date of the last update appears at the top of this page. By continuing to use the Service after a change, you accept the new version.

15. Governing law and contact

These Terms are governed by French law. In the event of a dispute, an amicable solution will be sought first; failing that, the French courts will have jurisdiction, subject to the protective rules you benefit from as a consumer.

For any question, data request or report: Discord thaskow, or github.com/Thaskow.

16. Legal notice

Publisher

Thaskow, private individual. Name, address and contact e-mail available on request, in accordance with Article 6 III-2 of French law no. 2004-575 (LCEN) for non-professional publishers.

Publication director

Thaskow

Host

[To be completed: name, address and phone number of the site’s host]

Contact

Discord: thaskow · GitHub: Thaskow