Privacy Policy

1. Introduction

SoulLock.gg ("we", "us", "our") operates the SoulLock.gg website and the optional SoulLock.gg desktop companion application (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using SoulLock.gg, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account data: Email address and password (for email sign-up), or authentication tokens from Google or Steam OAuth
• Profile data: Steam ID, display name, avatar URL, profile privacy preferences
• User content: Reviews you write about other players, messages you send, LFG posts you create
• Your private player lists ("The List"): When you flag another player as liked or disliked, we store that player's Steam ID and display name, the flag, and any note you wrote about them, against your account. These lists are private to you and are never shown to the player you flagged or to anyone else, except that you may choose to share a list between accounts you own.
• Phone number (optional, Pro only): If you turn on text-message queue alerts, we store the mobile number you give us so we can text you when a match is found. We first send a one-time code to that number and store it as a destination only once you enter the code back, so a number cannot be signed up by anyone who is not holding the handset. We also keep a record of your consent: the time you gave it, the exact wording you agreed to, and the IP address the agreement came from. The number is used for these alerts and for nothing else. We never use it for marketing and never share or sell it. You can remove it at any time in Settings, and replying STOP to a message ends them.
• Discord account link (optional): If you sign in with Discord or link a Discord account, we store your Discord user ID, username, avatar and email so the SoulLock bot can send you a direct message.

2.2 Information Collected Automatically

• Game statistics: Wins, losses, KDA, match history, MMR estimates, favorite heroes (fetched from public Deadlock/Steam APIs)
• Usage data: Pages visited, features used, timestamps (via Google Analytics, only with your consent)
• Device data: Browser type, operating system, screen resolution (via Google Analytics, only with your consent)

2.3 Information from Third Parties

• Steam: Public profile data including Steam ID, display name, avatar, and game statistics via the Steam Web API
• Deadlock API: In-game statistics, match history, and MMR data from community-maintained Deadlock APIs

2.4 Desktop Companion Application

If you choose to install and run our optional desktop companion application (the "Desktop App"), it accesses additional information locally on your device in order to provide features the browser cannot, such as live match and camp timers and automatic discovery of your own match history. The Desktop App is entirely optional and is not required to use the SoulLock.gg website.

• Game log files: The Desktop App reads the Deadlock game's local console log files (produced when the game is run with logging enabled) to detect your own recent match identifiers and match state.
• Steam local cache: The Desktop App reads Steam's local cache files on your device to identify match identifiers associated with your own account.
• Live Game Reader (optional, off by default): If you explicitly enable the "Live Game Reader," the Desktop App reads the Deadlock game's memory on your device on a read-only basis in order to display live public match information with no delay. Specifically, it reads: the match clock, pause and game state, the match identifier and game mode, objective timings, and the lobby roster, which for each player in your match includes their Deadlock account identifier, in-game name, hero, team and ranked badge. It does not write to or modify the game's memory and does not inject any code into the game. It never reads any player's position, health, souls, items or cooldowns, and nothing about what other players can see. To find these values it has to scan through the game's memory, but the only things it takes out are the ones listed above. One thing it reads is not yet on your screen when it reads it: an Unstable Rift is visible in the game world roughly twenty seconds before the game's own interface announces it, so the app can warn you earlier than the game does. It remains off unless you turn it on and accept its in-app notice, and you can turn it off again at any time in Settings.
• Which application is in the foreground: So the in-game overlay can hide itself the moment you alt-tab away from Deadlock, the Desktop App checks the process name of whichever window currently has focus, a few times a second, for as long as the app is running on Windows. It compares that name against Deadlock's and uses nothing else. The name is not stored, not logged and not transmitted, and no window contents, titles or keystrokes are read. This runs whether or not you have enabled the Live Game Reader.
• Steam launch options (the one thing we write): Deadlock only produces the console log the Desktop App reads when it is launched with the -condebug option. If you choose "Enable automatically" when the app offers to set live tracking up, it adds that option to Deadlock's launch options in Steam's local configuration file, after saving a backup of that file alongside it. It does this for each Steam account on the computer that owns Deadlock, not only the one you are signed in to, because the app cannot know in advance which account you will play on. This is the only file on your device the Desktop App modifies, and it only happens when you ask it to. Removing the Desktop App does not undo the change: to reverse it, delete -condebug from Deadlock's launch options in Steam, or restore the backup file saved next to the original.
• Application diagnostics: Basic local logs and error information used to keep the Desktop App running and to diagnose crashes. While the Live Game Reader is switched on it also keeps a small status file on your device recording whether the game is running and whether a match is in progress, so the app can recover its state after a restart. It stays on your device.

What stays local vs. what is uploaded: Game log files and Steam cache contents are read and processed locally on your device and their contents are not uploaded to us. Most of what the Live Game Reader reads, including the match clock, pause state, objective timings and the in-game names, heroes and ranked badges shown on your live scoreboard, is used only to draw the app's own screens on your device and is never sent to us.

Two things the Desktop App does send to our servers:

• Match identifiers for your own account, discovered from the game log, Steam cache or the Live Game Reader. These are added to our global match index so that match data can be fetched and shared with the community in the same way as match data obtained from public Deadlock APIs.
• A record of who you played with. While you are in your own match, the app records, against your account, the Deadlock account identifier of each other player in that match together with the hero they played, which team they were on and the match identifier. This is what lets the app tell you "you played with this person before" the next time you are in a lobby together. When the Live Game Reader is enabled it is the source of this roster, so account identifiers read from the game's memory do leave your device for this purpose. In-game names, ranked badges and your own private notes are not included in this record.
• Rank and profile lookups for the players in your match. To show each player's rank and stats on your live scoreboard, the app sends their Deadlock account identifiers to our servers and to the public Deadlock APIs to look that information up. The identifiers are used as lookup keys for that request.

The Desktop App does not modify the game's memory or inject any code into the game, does not read the game's memory unless you have explicitly enabled the optional Live Game Reader described above, and does not capture, record or process your screen.

3. How We Use Your Information

If you turn on queue alerts, we use your linked Discord account or your verified phone number for one purpose: sending you a message the moment a Deadlock match is found for you. Nothing else is sent to either destination.

• Provide, maintain, and improve the Service
• Display your player profile, statistics, and reputation to other users (unless you set your profile to private)
• Enable the reputation review system, messaging, and LFG features
• Provide Desktop App features such as live match and camp timers, and expand community match coverage using match identifiers discovered for your own account
• Process Pro membership subscriptions
• Analyze usage patterns to improve the Service (with your consent)
• Serve relevant advertisements (with your consent)
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Comply with legal obligations

4. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

4.1 Essential Cookies

Required for the Service to function. These include authentication session cookies and security tokens. These cannot be disabled.

4.2 Analytics Cookies (Consent Required)

Google Analytics (GA4) cookies help us understand how visitors interact with the Service. These are only activated when you provide consent via our cookie banner. Measurement ID: G-3V6X8JCZ1J.

4.3 Advertising Cookies (Consent Required)

Google AdSense uses cookies to serve personalized advertisements. These are only activated when you provide consent. Pro members do not see advertisements. You can manage your ad personalization preferences at Google Ad Settings.

You can change your cookie preferences at any time using the "Cookie Settings" link in our footer.

5. Data Sharing and Disclosure

We do not sell your personal information. We share data only as follows:

• Public profile data: Your Steam display name, avatar, game statistics, and reviews are visible to other users unless you set your profile to private
• Service providers: Google (Firebase hosting, authentication, database, analytics), Stripe (payment processing for Pro), Amazon Web Services (Amazon SNS, used only to deliver queue-alert text messages in the United States and Canada, which means your phone number and the message are sent to Amazon), Discord (account linking and delivery of queue-alert direct messages)
• Legal requirements: When required by law, court order, or governmental regulation
• Safety: To protect the rights, safety, or property of SoulLock.gg, our users, or the public

6. Data Storage and Security

Your data is stored on Google Cloud infrastructure (Firebase/Firestore) with data centers primarily in the United States. We implement industry-standard security measures including encryption in transit (TLS) and at rest, Firebase Security Rules for access control, and regular security reviews.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your account data for as long as your account is active. Reviews are retained as part of the community reputation system even after account deletion, but are anonymized (author information is removed). You may request full deletion of all your data by contacting us.

Analytics data is retained according to Google Analytics' default retention settings (14 months).

A phone number given for text alerts is kept only while text alerts are switched on. Removing it in Settings or deleting your account removes it. The record of your consent to receive those texts is kept separately after the number is removed, because it is the evidence that the messages we already sent were authorised.

8. Your Rights

Depending on your location, you may have the following rights:

8.1 All Users

• Access: Download a copy of all your data from the Settings page
• Deletion: Delete your account and associated data from the Settings page
• Privacy: Set your profile to private to hide your stats and reviews from other users
• Cookie control: Manage analytics and advertising cookies via the cookie banner or footer link
• Desktop App control: Uninstall the Desktop App at any time through your operating system to stop all local data access by it

8.2 EEA/UK Residents (GDPR)

• Right to access, rectify, erase, or port your personal data
• Right to restrict or object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

8.3 California Residents (CCPA/CPRA)

• Right to know what personal information is collected and how it is used
• Right to delete your personal information
• Right to opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where Google Cloud operates. By using the Service, you consent to such transfers. We rely on Google's data processing terms and standard contractual clauses for lawful international transfers.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

For questions, data requests, or complaints about this Privacy Policy, contact us at privacy@soullock.gg.