Privacy policy
Last change: 12 November 2026.
1. Who is responsible
The controller under the GDPR is Alpha Juliet Solutions FlexCo, Herzog-Odilo-Straße 34/3, 5310 Mondsee, Austria, e-mail alexander@alpha-juliet.com (full details in the Impressum).
2. What we process and why
Visiting this website
Our web server records the IP address, time, requested page, browser identification and referring page of each request to keep the service secure and to find errors (Art. 6(1)(f) GDPR, our legitimate interest in a secure service). These logs are deleted automatically after 14 days. Statistics and advertising tools run only with your consent (section 3). The account page keeps your log-in token in your browser's local storage so that you stay logged in; logging out removes it. Your choice of language and your cookie choice are remembered in the same place.
Your account
E-mail address, a one-way hash of your password (we never store the password itself), your plan, your language, whether you confirmed your address, and the time the account was created. We need these to provide the account and the software you subscribe to (Art. 6(1)(b) GDPR).
Billing details (before your first purchase): your full name, billing address, country and, if you give one, an e-mail address for invoices. They go on every invoice and to Stripe (Art. 6(1)(b) and (c) GDPR); you can change them in your account at any time. If you buy as a business: company name, VAT ID, billing address, and the result and date of the VAT ID check with the EU's VIES service, which we need for correct invoices and VAT (Art. 6(1)(b) and (c) GDPR). For every purchase we store the confirmation you ticked, with time, a keyed hash of your IP address and the item, as proof of the confirmation the law requires (Art. 6(1)(c) and (f) GDPR).
Using the desktop app
When you log in, the app gets a session token from our server. For the caster voices the app sends the commentary text of each line to our server, which forwards it to our voice provider and returns the audio. With each line the app sends an anonymous id of the match being cast, its round and map, short one-way hashes of the players' Steam IDs (never the IDs themselves), and a random id of the installation: we use them to count your matches (included, free or bought) once and only once, also after a pause or a restart, to apply the fair-use limit per match, to give the free match once per PC, and to allow one casting PC per account. To show team names, badges and player pictures, the app sends the Steam IDs of the players in the match to our server, which looks them up at FACEIT or Steam. Match data from CS2 (Game State Integration) is processed on your PC. Your stream keys for Twitch, YouTube or Kick stay encrypted on your PC and never reach our servers. Legal basis: Art. 6(1)(b) GDPR.
Payment and invoices
Payments are processed by Stripe. Stripe receives your payment details, billing address and, if you give it, your VAT ID; we do not see your full card details. We store your Stripe customer number, your subscription status and whether a payment failed (Art. 6(1)(b) GDPR). Invoices must be kept for seven years under Austrian tax law (§ 132 BAO, Art. 6(1)(c) GDPR).
E-mails
We send e-mails only to confirm your address, to reset your password and to confirm a changed address, to confirm a purchase, and to remind you before a yearly plan renews, in the language of your account; Stripe sends invoices and payment notices. No newsletters without your separate consent.
3. Cookies, statistics and advertising (only with your consent)
When you first visit, a banner asks for your choice: “Accept all”, “Reject all” or your own selection under “Settings”. Without consent nothing is stored or read on your device for statistics or marketing, and no Google script loads. You can change or withdraw your consent at any time with “Cookie settings” at the bottom of every page; withdrawal does not affect what happened before. Legal basis: your consent (Art. 6(1)(a) GDPR, § 165 (3) TKG 2021).
- Statistics: Google Analytics 4 – which pages are visited and which actions happen (for example language switch, viewing prices, starting a download, signing up, starting a checkout), to improve the website. Google Analytics 4 does not log or store IP addresses; we set the data retention to 14 months. If you allowed statistics, a purchase is also reported to Google Analytics from our server (Measurement Protocol) with the analytics ID of your browser, the order number, the amount and the item, never your name or e-mail address.
- Marketing: Google Ads – measuring which ads lead to sign-ups, downloads and purchases (conversion tracking). For this we also remember the campaign parameters and the Google click ID of the link you came from for 90 days.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data can be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission).
| Name | Purpose | Lifetime | Category |
|---|---|---|---|
| ih_consent | your cookie choice | 12 months (then we ask again) | necessary |
| ih_token, ih_lang | log-in, language | until you log out / change it | necessary |
| _ga, _ga_<ID> | Google Analytics: tell visits apart | 2 years | statistics |
| _gcl_au | Google Ads: conversion measurement | 90 days | marketing |
| ih_attr | campaign parameters and Google click ID | 90 days | marketing |
| Google cookies on google.com / doubleclick.net (e.g. IDE) | Google Ads: measurement | up to 13 months | marketing |
We also use Google Search Console to see how the website appears in Google search. It gives us aggregated search figures only; it sets no cookies and receives no personal data of our visitors.
4. Who receives data (processors)
- netcup GmbH, Karlsruhe, Germany: server hosting (website, accounts).
- Stripe Payments Europe, Ltd., Dublin, Ireland: payments, subscriptions, invoices, VAT calculation.
- Brevo (Sendinblue SAS), Paris, France: sending the confirmation and password e-mails.
- ElevenLabs: text-to-speech for the caster voices (commentary text only, no account data).
- Google Ireland Limited (and Google LLC, USA): Google Analytics 4 and Google Ads, only with your consent (section 3).
- European Commission (VIES): check of the VAT ID of business customers (VAT ID only).
- FACEIT and Valve (Steam): match, team and player look-ups started from the app (match ids and Steam ids of the players in the match, no account data).
Where a provider processes data outside the EU / EEA, the transfer is based on an adequacy decision (such as the EU-US Data Privacy Framework) or the EU standard contractual clauses.
5. How long we keep data
Account data as long as the account exists; when you ask us to delete your account, we delete it within 30 days, except what the law requires us to keep (invoices). Database backups are kept for 14 days. Usage counters are kept per month for billing questions for 12 months.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15-21 GDPR). Write to alexander@alpha-juliet.com. You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at) or the authority in your country.
7. Security
All connections are encrypted (HTTPS). Passwords are stored as salted hashes; our company API keys are stored encrypted and are never sent to the app.