Effective date: 1 November 2026. Version: 2026-11-01.brand-privacy.12.
The controller is ZeTaX.gg, based in Latvia. Contact: [email protected].
Send privacy questions and requests to [email protected]. A privacy request does not require a paid account or an AI conversation.
1. Information, purposes and legal bases
We process your Steam ID, public nickname and avatar, account information and sessions to operate your account and provide the service you request. Legacy accounts may retain previously supplied email or profile fields. The legal basis is performance of the relevant service agreement.
New accounts receive a one-time welcome bonus of ZP. So that each Steam account receives it only once, we keep a keyed one-way code derived from the Steam ID that received it. The code is not linked to your account, profile or activity and cannot be turned back into your Steam ID without our secret key. The legal basis is our legitimate interest in preventing abuse of the bonus.
Optional match-history credentials are stored encrypted and used to import supported matches at your request. Demos, uploaded music, game events, statistics, clips, editing instructions, projects and exports are processed to analyze, record, edit and deliver your content under that agreement. Optional information is not required unless you choose the associated feature; without it we cannot provide that feature.
Demos supplied by uploaders can contain other players' names, Steam IDs and game or audio-related activity. We process that context for proportionate match analysis and footage based on legitimate interests, balanced against affected people's rights. Recorded highlights disable player voice chat, but raw demos may contain voice-related data.
ZP transactions, purchase and subscription details, accepted policy versions and payment references are used to deliver purchases, reconcile payments and meet applicable accounting or legal obligations. Stripe handles card entry. ZeTaX receives the references, status and purchase details needed to apply ZP or membership, rather than your full card number.
Network, device, sign-in and administrative security records help protect accounts, prevent abuse and investigate incidents, based on legitimate interests and any applicable legal duty. Support and withdrawal records are used to answer requests, meet consumer obligations and handle related claims. The basis is the service agreement, a legal obligation or a legitimate interest, depending on the request.
ZeTaX publishes anonymous community statistics computed from analysed matches. They combine every player in those matches, including players without a ZeTaX account, into totals and shares, for example map popularity, CT and T round win rates, how rounds end, match length, headshot and utility averages, and the spread of Premier ratings and Competitive ranks. They never show names, Steam IDs, match IDs or any figure for a single player or match, and a figure is only shown once enough matches are behind it. The statistics are rebuilt regularly; when a match is deleted, or an account and its matches are deleted, the match stops counting from the next rebuild. The legal basis is our legitimate interest in describing how CS2 is played on ZeTaX.
We do not treat site use as blanket consent. Where a specific optional purpose relies on consent, you may withdraw it without affecting earlier lawful processing. Private footage is not sold or used for unrelated advertising or AI model training.
2. Service providers and connections
The service uses Hetzner for web hosting and standby movie assembly, Neon for database services, Cloudflare for website protection and private R2 media storage, Hyperstack for remote gameplay recording, RunPod for movie assembly, Steam/Valve for authentication and match access, and Stripe for payments. Google (YouTube) and TikTok receive a video only when you choose to post it there (section 4). Each receives information relevant to its function. Providers may also process information for their own purposes under their privacy notices.
Provider notices and data-processing information are available at https://www.hetzner.com/legal/privacy-policy/, https://neon.com/privacy-policy, https://www.cloudflare.com/privacypolicy/, https://www.hyperstack.cloud/privacy-policy, https://www.runpod.io/legal/privacy-policy, https://store.steampowered.com/privacy_agreement/, https://stripe.com/privacy, https://policies.google.com/privacy and https://www.tiktok.com/legal/privacy-policy.
Providers operate across different locations, and information may be processed outside the European Economic Area. The hosting location alone does not establish where all provider support, security or subprocessors operate. Contact us for information about the recipients, processing locations and transfer arrangements relevant to your information. This notice does not claim that all processing stays in Europe or that a particular transfer safeguard applies to every provider.
Optional Steam bot friendship enables welcome messages and notifications about automatically analyzed matches. Manual uploads do not trigger those notifications. Manage the notification choices and friendship separately. Three further messages are off until you switch them on in your account: a weekly recap on Mondays (your matches, results and main statistics from the previous week, with a link to your best recorded clip), a monthly message on the 1st with a link to your best recorded clip of the previous month, and a monthly Wrapped movie, which ZeTaX assembles in the first days of each month from your own best recorded clips of the previous month and sends you as a link. All three use only your own matches and clips and go only to you; we keep a record of which ones were sent. The Wrapped movie is kept like any other movie (section 6).
Optional live match display: if you turn on "Show my live match" in your account and ZeTaXBot is your Steam friend, ZeTaXBot reads your Steam game status about every 30 seconds while you are in Counter-Strike 2. We keep only whether you are in CS2 and, during a match, the game state, mode, map and score. We never keep join links, lobby IDs, other players' names or other Steam status text. We use this only to show your own match in progress on your ZeTaX account and to link it to the match you import. Nobody else can see it. The legal basis is your consent, which you can withdraw at any time by turning the setting off. Turning it off stops reading your status and deletes your live match records.
Following the Discord community link subjects activity there to Discord's own processing. Joining does not automatically publish private videos. A public showcase requires a separate sharing choice.
Optional Discord account link: if you press "Link Discord" in your account, Discord asks you to sign in and allow ZeTaX to read your basic Discord profile (the "identify" permission only). We keep your Discord user ID and display name; we do not keep a Discord access token, your email address, your messages or your server list. While the link exists, the ZeTaX bot gives your Discord account the Member role in the ZeTaX Discord server, and the zTxPremium role while you have a paid ZeTaX Premium plan, and removes them when you unlink, your plan ends or you delete your account. One Discord account can be linked to only one ZeTaX account. The legal basis is your request; you can unlink at any time in your account.
ZeTaX for FACEIT browser extension: when you press its button on a FACEIT match page, the extension sends that match's demo link to your ZeTaX account, where it is imported like any other upload. It stores three settings on your device. It does not read your FACEIT login, collect your browsing, or send anything for matches you did not choose.
3. Optional AI assistance and human support
When you explicitly send an AI support question, its text and a limited recent conversation history are sent to OpenAI to match relevant approved product help. Private account records, payment information, demos and videos are not attached automatically. The assistant has no account, ZP, job or refund powers.
The AI chat is kept in the open page's memory, without a ZeTaX conversation database or browser-storage transcript. Clearing or leaving the page discards that local conversation. Request-limit counters may remain. If you choose to include the chat in a human-support request, that copy follows the separate support retention rules below.
OpenAI API data is not used for training by default. ZeTaX disables Responses application-state storage, but default provider abuse-monitoring logs may contain content for up to 30 days, subject to provider exceptions. See https://developers.openai.com/api/docs/guides/your-data. ZeTaX does not claim a special zero-retention arrangement.
Optional AI editing sends your editing instructions and selected highlight metadata and settings, rather than complete demo or video files.
Optional AI caster (Studio): when you ask for caster lines, ZeTaX sends OpenAI the game facts of the clips you chose: your in-game name, the map, the round, and for each of your kills the weapon and whether it was a headshot, went through a wall, or was part of an ace or clutch, so it can write short commentary lines. The text of each line, including any line you rewrite, is then sent to OpenAI's text-to-speech service to create the voice. Other players' names, Steam IDs, account, payment, demo and video files are not sent. The voice is a stock AI voice that does not imitate any real person, and Studio labels it as an AI caster. The spoken lines are kept as private audio in your account, like uploaded music, and are deleted when you delete your account. The ZP price is shown before you confirm. The OpenAI data terms above apply.
Human support is available directly without completing AI chat. The human-support form asks for a reply email and issue description; including a recent AI conversation is optional. The normal target is a reply by email within 1–3 business days, subject to specific legal deadlines. Never submit passwords, Steam Guard codes, session tokens, match-history credentials or full card details in a chat or support message.
4. Posting to YouTube and TikTok
Posting is optional and starts only when you press "Upload to YouTube Shorts" or "Send to TikTok drafts" on a finished movie. ZeTaX then asks that service for permission to upload that one video, and you choose the account. ZeTaX uses YouTube API Services; Google's Privacy Policy applies: https://policies.google.com/privacy. TikTok's privacy policy applies to TikTok: https://www.tiktok.com/legal/privacy-policy.
For YouTube we send the video and the title, description, visibility and made-for-kids answer you entered. For TikTok we send the video to your TikTok inbox as a draft; you add the caption and post it in the TikTok app. We request only the permission to upload (YouTube: youtube.upload; TikTok: video.upload and your basic profile), the profile permission only to show which account received the video. We do not read, change or delete anything else on your channel or account.
The permission token is kept encrypted only while that upload runs and is then deleted; we never keep ongoing access to your YouTube or TikTok account. We keep the upload's status, the link to the posted video and the account name you used for 30 days so we can show them to you. You can remove ZeTaX's access at any time in your Google security settings (https://security.google.com/settings/security/permissions) or in TikTok's settings. The legal basis is performance of the service you requested. Deleting your ZeTaX account deletes this data within 7 days; it does not delete videos you posted on YouTube or TikTok.
Who receives Google user data. We do not sell Google user data, and we do not share, transfer or disclose it to anyone except: Google (YouTube), which receives the video and the title, description, visibility and made-for-kids answer you entered so it can publish the video on the channel you chose; the providers that run ZeTaX for us and process data only on our instructions, namely our server host (Hetzner), our database host (Neon) and our file storage (Cloudflare R2), which hold the upload record while the permission token is only ever stored encrypted; and authorities, only where the law requires it. We use Google user data only to upload the video you asked us to upload. We never use it for advertising, never sell it, never use it to train AI models, and no person at ZeTaX reads it unless you ask us for support with that upload or the law requires it. ZeTaX's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
How we protect it. Everything travels over encrypted connections (HTTPS/TLS) between your browser, ZeTaX, Google and our providers. The Google permission token is encrypted (AES with an integrity check, known as Fernet) with a secret key that is kept only on our server and is never stored in the database, so the database alone cannot reveal it. The token is used only by the upload process and is deleted as soon as that upload finishes, fails or is cancelled; unfinished sign-ins expire automatically. Access to our servers and database is limited to the ZeTaX operator and uses personal keys. Upload records (status, link and account name) are deleted after 30 days, and when you delete your ZeTaX account (within 7 days).
5. Community
Posting to Community is optional and starts only when you press "Post to Community" on a finished highlight or movie. Signed-in ZeTaX players who can open Community then see the video, its title, map and type, your Steam nickname and avatar, when you posted it, and how many views and likes it has. A posted clip shows the match as recorded, which can include other players' in-game names (for example in the kill feed). Dislikes on your post are shown only to you.
We keep the post, which players liked or disliked it, how many times each signed-in player's views were counted (at most once every 24 hours, never your own), and reports with the reporting account, the reason and our decision. Other players see only the totals, never who voted, viewed or reported. The legal basis is performance of the Community service you chose to use and our legitimate interest in counting views fairly, ranking posts and preventing abuse. Weekly rewards use the same records.
If you appear in someone else's post and object, report it or contact us; we review it. Removing a post (by you or by us) ends its display and deletes its views and votes. Deleting your account deletes your posts and every vote, view and report you made.
6. Retention and deletion
Manual demos: 7 days after completed upload. Automatically imported demos: no timed expiry before the first successful render, then 7 days. An exact-original restored demo has a new 7-day source window after completed reupload.
Clips, clean copies, completed movies, exports and rendered previews: 60 days from the video's original ready or completion time. A video posted to Community is kept while the post is up; once the post is removed, the 60 days apply again and a video already past them is deleted in the next cleanup. Match statistics, analysis and saved projects: until removed or account deletion. Projects do not preserve expired media. Uploaded music remains for account or project use until removed through an available deletion process or account deletion; detaching it from an edit does not delete the upload.
Live match records: 7 days after the match started, or earlier when you turn "Show my live match" off or delete your account. YouTube and TikTok upload records: 30 days after the upload, or earlier on account deletion. Community posts, votes and view counts: while the post is up, or until you delete your account. Community reports: until the report is decided and the post is removed or your account is deleted. Records of sent weekly and monthly Steam messages: until account deletion. Discord account link: until you unlink or delete your account; the Discord user ID alone is kept only until the bot has removed your Discord roles, normally within minutes.
The web server keeps a technical access log of page requests: the time, site, request method, page path (with long link and sharing tokens replaced), response status, size and timing. It contains no IP address, query string, cookies, referrer or browser type. It is used to find errors and slow pages, and each entry is deleted after at most 15 days.
Account and import configuration remain for the account lifetime unless removed earlier. Expired authentication sessions, actions and request-limit entries are removed by scheduled housekeeping. Security and administrative records needed for an investigation are retained until that investigation and any associated complaint or claim are resolved, and any required preservation period ends; they are not used to recreate deleted media.
The support email delivery queue normally clears the issue text, reply email and optional chat after acceptance by the support email server. Undelivered payloads are cleared after at most 7 days. Minimal hashed request receipts and delivery state remain for at most 60 days. These limits concern the delivery queue; a human correspondence copy or formal complaint may need to remain while the issue and any associated claim are handled.
Purchase confirmations, policy-version records and withdrawal notices are retained as needed to prove the contract, handle the request and satisfy accounting or claim-preservation duties. Relevant supporting accounting documents normally have a statutory minimum of 5 years, and accounting registers a minimum of 10 years. Only records needed for those purposes are retained; an account or video deletion does not require deletion of a legally required transaction record. A current complaint, investigation or legal claim can require preservation until resolved and the applicable legal retention period ends.
Encrypted recovery backups rotate after 7 days locally and 35 days offsite. The stated recovery backups exclude private media and Steam login files. Backup copies are not removed instantly; deletion decisions must be reapplied if a system is restored.
Active jobs or uploads can defer physical cleanup. Extensions do not restore expired or deleted files. Deleting a source clip or match does not automatically delete an independent completed export. Account deletion removes access and direct profile identifiers, sessions, import credentials and saved drafts, scrubs content metadata and queues media deletion. Limited deletion references and pseudonymous accounting records can remain to complete cleanup, keep deleted material unavailable and meet the purposes above. The welcome-bonus code described in section 1 is kept after account deletion, so a deleted and recreated account does not receive the bonus again; it is deleted 12 months after the welcome bonus stops being offered.
7. Sharing
Share links are optional. Anyone holding a valid link may view and save its video. Links last up to 30 days, are bounded by the underlying media's availability and can be revoked. An already issued media URL may remain usable for up to five minutes after revocation. Downloaded copies cannot be recalled from another person's device.
8. Cookies and browser storage
The essential zetax_session cookie supports sign-in for up to 7 days. The temporary zetax_steam_state cookie supports Steam sign-in for up to 10 minutes. Hosted authentication cookies use Secure, HttpOnly and SameSite protections. Blocking them can prevent sign-in.
Local and session storage support editor drafts, selections, preferences and pending-action or checkout recovery. An opaque match-return reference can be kept for up to 10 minutes. Some drafts and preferences remain until replaced or cleared. Clearing browser storage can remove unsaved work; it does not cancel Premium or delete server data.
Cloudflare, Stripe and Steam may use their own necessary service or security storage in connection with their functions. We do not rely on acceptance of this privacy notice as consent to unrelated advertising storage.
9. Your rights and contact
Depending on the circumstances, you may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent where relied upon. We may verify identity proportionately and explain any lawful exception. An affected player does not need a paid ZeTaX account to make a request.
We normally respond to privacy requests within one month. If a permitted extension is needed, we explain it within that first month. Write to [email protected]. AI does not decide privacy requests.
You may complain to a competent data-protection authority, including Latvia's Data State Inspectorate at https://www.dvi.gov.lv/, or the authority where you live or work. Direct links to every authority in Europe: https://zetax.gg/privacy/authorities.
Highlight detection and FAQ routing help provide ordinary service functions. They do not make solely automated decisions with legal or similarly significant effects. Individual payment or account complaints receive human review.