Privacy policy

Who we are

Granja runs Counter-Strike 2 training servers and is the controller of your data. For requests about your data, sign in and use the Settings page of your account, where you can delete the account and the data tied to it.

What we store

• Steam account: your SteamID and the name, avatar and public profile link that Steam returns. You sign in through Steam; we never see your password or inventory.
• Email, if you add one: for notices about your access and for the waitlist.
• Preferences: language and weekly training goal.
• Training: the sessions you start (map, mode, region, times) and the results measured in them, such as grenade throws, lineup tests and reviews, Prefire attempts, levels, mechanics samples and trilha progress.
• Steam match history, if you link it: the authentication code and share codes, stored encrypted, the list of matches and the statistics we compute from their demos.
• FACEIT, if you link it: the ID and nickname of your FACEIT account, found through your SteamID, and your matches.
• Invites: who invited whom and who has early access.
• Sign-in: a random identifier per signed-in browser. We store only its hash.

Game servers receive your SteamID and the IP address of your CS2 connection while you play, and keep a local copy of your training data tied to your SteamID.

We do not sell data and do not use advertising or analytics cookies.

What we use it for

• Signing you in and deciding who has access (performance of a contract, art. 7, V).
• Starting servers, measuring your training and showing your progress (performance of a contract).
• Analyzing the matches you link (performance of a contract, at your request).
• Sending access notices to the email you gave us (consent, art. 7, I). You can remove the email at any time.
• Protecting the service against abuse, with per-IP limits and technical logs (legitimate interest, art. 7, IX).

Cookies

• granja.session: keeps you signed in for 30 days, renewed while you use the site.
• granja.steam_state: protects one Steam sign-in attempt.
• granja.waitlist: remembers the email this browser put on the waitlist, for up to 1 year.
• lang: the site's language, for up to 1 year.

All of them are needed for the site to work.

Who we share it with

• Cloudflare: hosts the site, the database and the files, on servers in the United States.
• Game server providers, in Brazil and the United States.
• Valve (Steam) and FACEIT: we query their APIs with your SteamID to fetch your profile and matches.

When data leaves Brazil, the transfer follows LGPD art. 33.

How long we keep it

• Account and training data stay while the account exists.
• Sign-ins expire after 30 days without use.
• Per-IP limit counters last 10 minutes.
• Technical service logs stay for up to 7 days.
• The waitlist stays until launch or until you ask to leave it.

Your rights

Under the LGPD (art. 18) you can confirm whether we handle your data, access it, correct it, ask for portability, withdraw consent and ask for deletion. You can also complain to Brazil's data protection authority (ANPD).

To delete your account, go to Settings and use Delete my account. It deletes the account, the email, sessions, training results, linked matches and their analyses right away, and your access too. In the invite records your SteamID becomes an anonymous marker, so the invites you gave keep working. The local copy on game servers is deleted when each server next connects, usually within a minute.

If an admin had removed your access, we keep only a code computed from your SteamID with a secret key, from which the SteamID cannot be recovered. It serves only to stop you from being invited again without an admin’s approval (legitimate interest, art. 7, IX).

Age

Granja is for people aged 18 or over.

Changes

If this policy changes, the date at the top changes with it. Important changes will be announced on the site.