Last updated: 30 June 2026
This page explains what data Brotato Run Tracker (the “Service” — the website at brotatotracker.com together with the companion Steam Workshop mod) collects, why, and the rights you have over it. We try to collect as little as possible.
The controller responsible for data processing under the EU General Data Protection Regulation (GDPR) is:
Tobias Bechen
Germany, 42799 Leichlingen
Email: zalhera-brotatotracker.savor018@slmails.com
When you play with the mod installed, it uploads your run data to the Service. This includes gameplay information (your character, weapons, items, stats, damage, kills, economy and other run details) and, to attribute runs to you:
On platforms where no account ID is available (or for local play), the mod generates a random anonymous identifier that is stored only on your own device and used in place of an account ID. This data is used solely to provide the run-tracking service — storing your runs, grouping them under you, and showing them (including live, while you play) on the website. Steam and other platform providers are not affiliated with or responsible for the Service.
When your device or browser communicates with the Service, our server and reverse proxy automatically process technical data, including your IP address, the date and time of the request, the requested resource, the response status, and your browser's user agent. This is necessary to operate the Service reliably and to detect and prevent abuse. These logs are kept only for a limited period (see “Data retention”).
We use Umami, a privacy-friendly, self-hosted web-analytics tool, to understand how the website is used (for example, which pages are visited). Umami runs on our own server, so your analytics data is not shared with any third-party analytics provider. It does not use cookies and does not track you across other websites. It records aggregated, non-identifying information such as page views, referrer, approximate region (derived from your IP address without storing it), and browser and device type.
If you use the feedback form, we process the message you submit and any contact detail you choose to include, so we can read and respond to it. To prevent spam, the form uses Cloudflare Turnstile, which processes technical data (including your IP address and browser information) on Cloudflare's infrastructure.
We process this data under Article 6(1)(f) GDPR (our legitimate interest in providing, securing and improving the Service) and, where you actively submit information such as feedback, Article 6(1)(b)/(f) GDPR. Where consent is required, processing is based on Article 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.
The Service does not use tracking or advertising cookies, and our analytics are cookieless. The mod stores its anonymous identifier locally on your own device (not as a website cookie). Cloudflare Turnstile may set a strictly necessary cookie when you use the feedback form.
We share data only with the service providers that help us operate the Service:
We do not sell your data and do not share it for advertising.
Our hosting and data storage are located in the European Union. Some providers (for example Cloudflare) may process data outside the EU; where that happens it is covered by appropriate safeguards such as the EU Standard Contractual Clauses.
Run data is retained for as long as necessary to provide the Service. Since the purpose of the Service is to maintain a long-term history of gameplay statistics, run data is normally stored until you request its deletion or the Service is discontinued. Serverlogs are retained only as long as needed for security and operation (typically up to 14 days). Analytics data is stored only in aggregated form.
Under the GDPR you have the right to access, rectify, erase or restrict the processing of your personal data, to object to processing, and to data portability. To exercise any of these — for example, to have your runs and the associated identifiers deleted — contact us at zalhera-brotatotracker.savor018@slmails.com. You also have the right to lodge a complaint with a data-protection supervisory authority (in Germany, the authority of your federal state).
The Service is not directed at children, and we do not knowingly collect personal data from children under the age required for valid consent in their country.
We may update this policy as the Service evolves. The “last updated” date above always reflects the most recent change.
For any privacy questions or requests, contact zalhera-brotatotracker.savor018@slmails.com.