Privacy policy

As of 25 September 2026. The German version is the binding one.

Controller

Raphael Knott, Kanalstraße 21, 93077 Bad Abbach, Germany
Email: contact@noxel.gg

This website

counterpick.app, the wiki wiki.counterpick.app and the sync server api.counterpick.app run on a rented server at SpexHosting in a data centre in Frankfurt am Main, Germany.

When you open a page, the server processes your IP address to deliver it and to turn away more than 180 requests per minute from the same address. It keeps the address in memory only. We do not write access logs. If an error occurs while delivering a page, the error message can contain your IP address; such messages stay in the server's system log until it is overwritten because of its size limit.

The legal basis is our legitimate interest in delivering the site and protecting it from overload (Art. 6(1)(f) GDPR). The site sets no cookies, counts no visits and loads nothing from other servers; the fonts are on our server too.

The wiki

wiki.counterpick.app works like this website: no cookies, no visit counting, no access logs, the same limit of 180 requests per minute. Two differences:

• Images of heroes, abilities, perks and Stadium items load in your browser directly from Blizzard's servers d15f34w2p8l1cc.cloudfront.net and blz-contentstack-images.akamaized.net. These servers see your IP address and the time.
• Your rates choice (rank, region, platform, queue) is kept only in your browser (localStorage) and in the page link; it is not sent to us. Search also runs only in your browser.

The app: what stays on your PC

Counterpick keeps everything in the app's storage on your PC: your recorded rounds, your rank history, copies of your career profile per season, your pool, notes, map plans, workshop codes and settings. Each round includes the BattleTags, names and heroes of the other players as the game reports them. We have no access to this data. You can save everything as a file in the settings and read it back in.

The app reads game data (map, mode, hero, lineup, score, result) through Overwolf's game interface on your PC. Overwolf's own privacy policy applies to the Overwolf platform.

The app: what it loads from the internet

• Career profiles and hero statistics come from a public profile service at overfast-api.tekrop.fr. The app sends it your BattleTag (for your profile), during a round the BattleTags of the other players (for their ranks), what you type into the player search, and your rank and the map (for pick and win rates). The service sees your IP address.
• Images of heroes, abilities, maps, avatars and ranks load from d15f34w2p8l1cc.cloudfront.net, blz-contentstack-images.akamaized.net, images.blz-contentstack.com, overfast-api.tekrop.fr, bnetcmsus-a.akamaihd.net and from the image addresses the profile service returns. These servers see your IP address and the time.
• Links to patch notes and sources open in your browser only when you click them.
• Game data such as heroes, maps, patch notes and values comes from our server api.counterpick.app: when the app starts, when the game starts, every 3 hours and every 15 minutes during Blizzard's Tuesday patch window. The app sends nothing about you; the server sees your IP address but does not store it.

We have no contract with any of these services; some may use servers outside the EU. The legal basis is the feature you use in the app (Art. 6(1)(b) GDPR); for other players' BattleTags it is our legitimate interest in showing you the ranks of the players in your round (Art. 6(1)(f) GDPR).

Cloud sync

Sync keeps your data the same on every PC where you are signed in with the same Overwolf account. It starts only when you start it in the app and can be switched off in the settings at any time. If another Overwolf account signs in on the same PC, the app asks again before anything goes into that account.

• Sign-in: the app gets a sign-in key from Overwolf that is valid for 15 minutes. Our server has Overwolf (accounts.overwolf.com) confirm it and gives the app its own session for 30 days; signing out of Overwolf makes the app end it. We store neither your Overwolf name nor your email address, only a check value (SHA-256) computed from your Overwolf user ID, and the session also only as a check value.
• What is synced: your profiles with BattleTag, your recorded rounds with the other players in them (BattleTag, name, hero, role and their numbers in that round: eliminations, deaths, assists, damage, healing, damage mitigated), your rank history, your career per season, your hero pool, workshop codes, Stadium drafts with their notes and your map plans. Settings such as language and display stay on your PC. For the account we also store when it was created and when it last synced.
• Access: only we, the operator, can open the stored data, through a protected admin view, to run the service, find faults and handle requests such as a removal request.
• Where: on the server in Frankfurt am Main. A daily backup is kept on the server itself and on storage of Hetzner Online GmbH in the EU; backups are deleted after 14 days.
• How long: until you choose "Delete cloud data" in the app. The data is then removed from the database at once and from the backups within 14 days.
• Download: "Download cloud data" in the settings gives you all synced data of your account as a file. We tell you the two account dates on request.

The legal basis is the feature you start (Art. 6(1)(b) GDPR). For other players' data in your rounds it is our legitimate interest in showing you your own rounds completely on every PC (Art. 6(1)(f) GDPR). Informing these players one by one is not possible because we know nothing about them except the BattleTag (Art. 14(5)(b) GDPR). If you want your BattleTag removed from stored rounds, write to contact@noxel.gg. We then clear BattleTag and name in every round on our server; the players' PCs take the change at their next sync.

Your rights

You can ask for access to your data, its correction, deletion or restriction, receive it in a common format, and object to processing based on legitimate interest (Art. 15 to 21 GDPR). Write to contact@noxel.gg. You can also complain to a data protection authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.

You are not obliged to provide any data; without sign-in and sync the app works on your PC. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.