Privacy policy

Who we are

Esport Scanner is run by Clickmates OÜ (registry code 17041180), Tartu mnt 67/1-13b, 10115 Tallinn, Estonia. Clickmates OÜ is the controller of your personal data, which means it decides why and how your data is used. You can reach us about your data at privacy@esportscanner.com.

What we collect

We collect account data you provide (username, email, password hash and country), who invited you if you joined through an invite link, the country your IP address points to when you sign up, and analytics from your use of the site (pages viewed, predictions placed, AI predictions unlocked and other features used; see Cookies and analytics below). We also use your IP address to limit repeated requests, such as contact messages and newsletter sign-ups, and a one-way code made from an email address to limit how often that address can be sent a newsletter confirmation. We do not sell personal data.

To create an account with an email address you must give a username, email address, password and country, and confirm you are 18 or older. If you sign up with Google, Twitch or Discord, we create your username from what that service shares, take your email address from it, ask for your country and ask you to confirm you are 18 or older. Without these we cannot create your account.

If you choose to add them, we also store your display name, bio, profile and banner images, game handles, main game, region, time zone and favorite teams. We keep the predictions you make, your points history, your chat messages, your comments on matches, news and profiles, your news reactions and bookmarks, your partner reviews, your friends list, your shop purchases and mystery box openings, the AI predictions you unlock, your daily check-in streak (your current and longest streak and the date of your last check-in) and when you were last active. When you sign in, we record the IP address and browser of that session. If you start a PRO checkout, we store your Stripe customer ID, and if you subscribe, your subscription status. If you sign in with Google, Twitch or Discord, that service shares your name, email address and profile picture with us. If you use the contact form, we receive your name, email address and message. If you join the newsletter, we keep your email address. If you enter your email address in the newsletter form on the News page, we email that address a confirmation link that works for 24 hours, and add it to the newsletter only if you open the link and confirm; if you never confirm, we never add it. If you tick "Subscribe to The 5pm Brief" when you sign up with an email address, we store that choice with your account and add your address to the newsletter only after you have confirmed it and signed in, and we then delete the stored choice; if you never confirm your address, we never add it. Some older accounts also hold an age or location from an earlier version of the site.

How we use it

To operate your account, power the leaderboard and quest rewards, send you account emails, show the bookmaker offers available in your country (from the country your IP address points to), prevent abuse, and understand how the site is used so we can improve it.

Our AI predictions analyze matches, not people. We do not use your data to make automated decisions about you that have legal or similarly significant effects.

Why we are allowed to use your data

• Running your account, predictions, points, leaderboards, season results, quests, the daily check-in, the shop, chat and PRO: this is needed to provide the service you signed up for (GDPR Article 6(1)(b)).
• Keeping the site secure, limiting repeated requests and preventing abuse: our legitimate interest in protecting the service (Article 6(1)(f)).
• Plausible and Ahrefs analytics: our legitimate interest in understanding how the site is used (Article 6(1)(f)). You can object by emailing us.
• Showing profile pictures that come from Google, Twitch or Discord: our legitimate interest in showing the picture the account holder chose (Article 6(1)(f)).
• Google Analytics and livestream players: your consent (Article 6(1)(a)), given with the cookie banner or a player's load button. You can withdraw your Google Analytics consent at any time with Cookie settings. A player loads only when you press its button, and that choice is not remembered.
• Account emails such as email-confirmation links and password resets: needed to provide the service (Article 6(1)(b)). The newsletter: your consent (Article 6(1)(a)).
• Payment records: needed for your PRO subscription (Article 6(1)(b)) and to meet our tax and accounting obligations (Article 6(1)(c)).

What other people can see

Chat rooms can be read by anyone, including visitors who are not signed in, and so can your comments on matches, news and profiles and your partner reviews. By default your profile is public and shows your recent predictions and your friends list. Search engines may list a public profile; a friends-only or private profile asks them not to. Every member with an active account that has not been banned appears on the leaderboard with their username, rank tier, points and PRO badge (if they subscribe), and their win rate and current win streak unless they hide their recent predictions. By default anyone who can see your profile, or a profile that lists you as a friend, can see when you were last active.

When a season ends, we publish its results. The past seasons page shows the top 100 players of each season with their username, rank, Season points, the prize and participation points they were paid, whether they received the season's VIP and Identity Aura reward, and any top-3 badge. We store a result for every player who earned at least one Season point in that season (Season points are the profit on winning predictions), and the page shows the first 100. A season's results stay online after it ends, and your row stays until we erase your account. Deactivating your account does not remove you from the results of a season that has already ended. Top-3 badges also show on your public profile.

In Settings under Privacy you can make your profile visible to friends only or to no one, hide your recent predictions and hide when you were last active. You cannot hide from the leaderboard while your account is active, but deactivating your account in Settings takes you off the leaderboards and hides your profile until you reactivate it. Your username, display name, profile and banner pictures, game handles, rank and join date stay visible even on a private profile, and your chat messages, comments and reviews stay public.

Who processes your data for us

• Supabase stores your account, predictions, chat and settings in Frankfurt, Germany.
• Vercel hosts the site. Our servers run in Frankfurt, Germany, and Vercel's network serves pages from a location near you.
• Resend sends our emails (email-confirmation links, password resets, welcome and season emails, and newsletter confirmation links) and keeps the newsletter list. Contact-form messages reach us through Resend. Resend processes data in the United States.
• Stripe handles PRO payments. We send Stripe your email, username and account ID. You enter card details on Stripe's own page, so we never see them. Stripe also uses payment data for its own fraud prevention.
• Plausible processes analytics in the EU (Germany). Ahrefs (Ahrefs Pte Ltd, Singapore) and Google process the analytics described below.
• Profile pictures that come from Google, Twitch or Discord load from those services, so they receive the IP address of anyone who views them.
• Bookmaker partners: when you open a partner's offer, their site learns that you came from esportscanner.com, as with any link. We send them no personal data.

Our AI predictions are generated by Anthropic's Claude from match data only. We do not send Anthropic your username, email, chat messages or any other personal data.

When Supabase, Vercel, Resend, Stripe, Ahrefs or Google move data outside the EU, they rely on the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework, as their data processing terms describe.

Cookies and analytics

We use first-party cookies to keep you signed in (via Supabase), to complete the password-reset and email-confirmation links we send you, and to remember who invited you when you open an invite link. We use three analytics tools:

• Plausible Analytics runs on every visit and sets no cookies. It receives the address of each page you view, with query parameters removed except campaign tags (utm_ tags, ref and source) and ad-click IDs (gclid, msclkid), plus the site that sent you, how far you scroll and how long you spend on each page, the links you follow to other sites, files you download and the fact that you submitted a form (not what you typed). It also receives the features you use, such as predictions placed, AI predictions unlocked, shop purchases and quest rewards, with details like the match, the points staked, your points balance and the country you choose. These details never include your email, your password or the text of your chat messages.
• Ahrefs Web Analytics runs on every visit and sets no cookies. It receives the full address (query parameters included) and title of each page you view, the site that sent you, your browser, device, screen size and language, and the links you click.
• Google Analytics, loaded through Google Tag Manager, runs only after you accept. It sets cookies (_ga and _ga_ followed by an ID) that store a random ID for your browser. It receives, for example, the address and title of each page you view, how far you scroll, the links you follow to other sites, and your device, browser, screen size and language.

Page addresses and titles can include a username, for example when you view a profile. Like any request your browser makes, each request to these tools also carries your IP address.

You can change your choice at any time with the "Cookie settings" button in the site footer. Some full-screen views, such as chat and the sign-in pages, have no footer; open any other page to reach it.

The cookies and storage we use, and how long they last:

• Sign-in cookies (Supabase) keep you signed in. They can stay in your browser for up to 400 days, but your session ends when you sign out or after 30 days without using the site.
• es_email_link completes a password-reset or email-confirmation link. It lasts one hour.
• es_ref remembers who invited you. It lasts 30 days.
• _ga and _ga_ cookies (Google Analytics) are set only after you accept, and last up to 2 years (some browsers, such as Chrome, limit this to 400 days).
• Your browser's local storage keeps your cookie choice, your prediction slip, whether you finished the first-login tour, a display setting, when you last read each chat room and whether we sent your welcome email (the last two are stored under your account ID). Your browser's session storage keeps es_confirm_resend_until, when you can next ask for another confirmation email (a timestamp only, cleared when you close the tab). This stays on your device.

Livestreams

Match pages can show a live stream from Twitch, YouTube or Kick. The player does not load until you press the load button on the Livestream tab. Once it loads, your browser connects to that service, which receives your IP address and that you came from esportscanner.com, and can set cookies or similar storage under its own privacy policy. We load YouTube from youtube-nocookie.com, which YouTube says keeps embedded views from shaping your YouTube experience. YouTube is provided in the EU by Google Ireland Limited. Kick is based in Australia and says it processes EU data outside the EU under standard contractual clauses. Streams from other sites are linked instead of embedded.

Your rights

You can request access, correction, or deletion of your data at any time by emailing privacy@esportscanner.com.

You can object at any time to our use of your data based on legitimate interests, including the Plausible and Ahrefs analytics. You can also ask us to restrict how we use your data, or to send it to you in a portable format. You can download a copy of your account data yourself from Settings, including your predictions, chat messages, comments and reviews. It does not include sign-in records, short-lived records used to limit repeated requests, contact-form messages or newsletter sign-ups; email us for a copy of those. The download and the deletion request in Settings still work if your account has been banned. Where we rely on your consent, you can withdraw it at any time. You also have the right to complain to a data protection supervisory authority, such as the one where you live or work. The authority that supervises Clickmates OÜ is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, aki.ee.

Age

Esport Scanner is for adults. You must be 18 or older to use it, as our terms say, and we ask you to confirm this when you sign up.

Responsible gaming

We display a responsible gaming badge throughout the site. If you or someone you know struggles with gambling, visit BeGambleAware.org for free confidential support.