Privacy
What DotaPicks stores about you and why.
What we store
You can use DotaPicks without an account. If you create one, we store the following.
- Your email address, when you sign up with email or Google.
- Your display name and avatar URL.
- The sign-in methods you have linked, with their provider ids. A Steam sign-in stores your Steam ID, your Steam persona name and your Steam avatar URL.
- A Google sign-in also stores the access and ID tokens Google returns, with their expiry and the permissions you granted.
- A password hash, if you use a password. We never store the password itself.
- Your sessions, with the IP address and browser user agent of each one.
- Your hero pool and your saved drafts.
- Email verification and password reset tokens, with their expiry time.
What we do not store
We keep no match history in our database. When you use For me, your OpenDota stats are held in a cache for up to 6 hours and are never written to the database.
DotaPicks never sees your Steam password. Steam signs you in and tells us only who you are.
Cookies
Signing in sets two cookies: better-auth.session_token (__Secure-better-auth.session_token on dotapicks.com), which keeps you signed in and cannot be read by scripts, and dp_authed, a small marker the page reads to know you have a session. Both last 30 days and are strictly necessary for signing in.
Starting a Google or Steam sign-in also sets a short-lived state cookie, better-auth.state for 5 minutes or dp_steam for 10 minutes, that protects the sign-in from forgery.
There are no tracking cookies. Our analytics count visits without cookies.
Your browser also keeps a few settings in localStorage: your theme, your rank bracket, your language, and whether you dismissed the language banner.
Who else sees data
- Steam and Valve handle Steam sign-in and the persona name and avatar lookup.
- Google handles Google sign-in.
- OpenDota receives your Steam account number to return your own stats when you use For me.
- Our mail provider delivers the verification and password reset emails.
- Umami counts visits without cookies.
Your choices
You can delete your account and all its data, and unlink sign-in methods, on your account page.
For anything else, write to us.
Steam
Steam is a trademark of Valve Corporation. DotaPicks is not affiliated with Valve.
Last updated
2026-10-02