ELO TERRORISTS — Privacy Policy

Last updated: August 2026 · Chrome Extension

Overview

ELO TERRORISTS is a Chrome extension that allows FACEIT CS2 players to flag and track suspected match-fixers and game-throwers in a shared community database. This policy explains what data the extension collects, how it is stored, and how it is used.

Summary

The extension handles three categories of data, matching the disclosures on its Chrome Web Store listing:

We do not collect health, financial, or location data, personal communications, browsing history, or any record of your activity on pages. We do not sell or transfer data to third parties, and we do not use it for anything outside the purpose described here.

How trust works — FACEIT OAuth

To submit a flag you must connect your FACEIT account via the extension's built-in OAuth flow. This proves you own a real FACEIT account without requiring you to create a separate account on our service. When you click “Connect with FACEIT”, you are redirected to FACEIT's own login page; we never see your FACEIT password.

The flag button is only offered inside a matchroom, never on profiles or elsewhere on FACEIT. When you use it, the extension sends the current match ID to our server. Our server independently calls the FACEIT Data API to confirm that your FACEIT account appears in that match's player roster before accepting the flag. This check happens entirely server-side — we do not rely on anything the extension claims about who you are.

Data collected by the extension

FACEIT access token

After you connect your FACEIT account, an OAuth access token and refresh token are stored in chrome.storage.local on your device. These tokens allow the extension to authenticate your flagging requests. The access token is sent to our API when you submit or delete a flag, so the server can confirm who you are with FACEIT before accepting it. Refresh and token exchange also pass through our server, which forwards them to FACEIT — this is necessary because FACEIT's token endpoint requires a client secret that cannot safely be shipped inside a browser extension. The tokens are not sent anywhere else, and we do not retain them after the request they were used for.

Reporter identifier

We never store your FACEIT username or GUID in plain text on our servers. When a flag is accepted, our server computes a one-way SHA-256 hash of your FACEIT GUID and stores that hash as your stable reporter identifier. This hash cannot be reversed to recover your FACEIT identity, but it is consistent across all flags you submit, allowing you to view and delete your own reports.

Flags you submit

When you flag a player, the following is sent to our server and stored in the community database:

We do not store your FACEIT username, email address, or any other personally identifiable information in the community database.

Network information

Like any web service, our API receives the IP address your requests come from. It is used only as a short-lived, in-memory key for rate limiting, to stop one person flooding the database. It is never written to our database, never attached to a report, and is discarded when the rate-limit window expires. We do not use analytics, advertising, or tracking services of any kind.

Player nicknames read from FACEIT pages

On FACEIT pages you visit, the extension reads the player nicknames visible in the page — match rosters, scoreboards and profile links. Those nicknames are sent to our API, which resolves them to Steam IDs and returns the community flag status used to highlight them. This is the core lookup the extension performs and it cannot work offline.

To avoid repeating identical lookups, our server keeps a cache mapping a nickname to its public FACEIT player ID and Steam ID, refreshed at least every 24 hours. The extension caches the same results in chrome.storage.session, which is cleared when you close the browser.

These lookups are not tied to you. We do not record which page you were on, when you visited it, or which account requested a nickname — the cache stores only the public nickname-to-Steam-ID mapping itself, with no reference to the user who triggered it. Lookups do not require you to be signed in.

Data shared with third parties

To resolve FACEIT nicknames to Steam IDs, our server queries the FACEIT Open Data API. To verify match participation, our server calls the FACEIT Data API using a server-side API key — your FACEIT access token is used only to verify your identity via the FACEIT userinfo endpoint and is never forwarded to any third-party service. We do not sell or share any data with advertisers or analytics providers.

Data stored on your device

The extension stores the following in chrome.storage.local:

Nothing is synced across devices via chrome.storage.sync. Disconnecting your FACEIT account from the popup removes all stored tokens from your device immediately.

Community database

Flags submitted through the extension are stored in a shared database and are visible to all extension users. Do not include personal information about yourself or others in flag comments beyond what is relevant to in-game behavior.

Deleting your data

You can remove any flag you have submitted at any time from within the extension popup. Removing a flag deletes it from the community database permanently. To request deletion of all flags associated with your reporter identifier, or to request that your hashed GUID be removed, email help@steamfriends.xyz.

Changes to this policy

If this policy changes materially, the updated version will be published at this URL with a new "Last updated" date.

Contact

Questions can be sent to help@steamfriends.xyz.

← Back to ELO TERRORISTS · Terms of Service · Back to home

ELO TERRORISTS — Privacy Policy · Steam Friends Tracker