Privacy
Last updated 4 September 2026. Written by the person who runs the site, not by a lawyer. If anything here is unclear, email hello@replaylock.com and you will get a real answer.
The short version
Your match recording is sent to Google for analysis, then deleted from this server as soon as the review is finished. We keep the written review, your Steam ID, and your email address if you gave one. Nothing is sold, nothing is advertised, and there is no tracking of any kind. One button deletes all of it.
What is stored
- Your Steam ID. Steam tells us your 17 digit ID when you sign in. We never see your Steam password, and Steam does not give it to us.
- Your Deadlock account number, worked out from that Steam ID by arithmetic. It is what the public match data is keyed on.
- Your email address, only if you type one when you redeem an invite code. It is used for exactly one kind of message, telling you a review is ready.
- The written review, plus which match it was about and which hero you played.
- Your rank, either read from public match data or whatever you tell us. If you decline to say, we store nothing and the review skips the comparison.
- Your survey answers, if you fill in the questions under a review.
- Which areas a review flagged, and measurements taken from your public match history afterwards, so the site can tell you whether anything actually changed.
- Your IP address, briefly, to stop one person flooding the site, and in ordinary server logs.
Your recording
This is the part worth reading twice.
When you upload a recording it is stored on the server under a random name, sent to Google to be analysed by their Gemini model, and deleted from this server the moment the review finishes. It is deleted just the same if the review fails for good, and a copy sent to Google is deleted after the analysis. An upload that is never turned into a review is removed within a day.
We do not keep it, we do not watch it, and it is not used to train anything by us. What Google does with data sent to their API is governed by their terms, not ours.
Who else sees your data
- Google. Your recording and the match facts are sent to the Gemini API. This is the analysis. There is no version of this site that does not do it.
- Steam, run by Valve. Signing in happens on Steam. They learn that you signed in to this site.
- deadlock-api.com. A community service that publishes Deadlock match data. We ask it for your public match history and for the details of the match you are reviewing. That data is already public.
- Resend. If you gave an email address, it is passed to Resend to deliver the one message.
- Cloudflare. Handles the domain and forwards mail sent to our address.
- Hetzner. Rents us the server everything runs on.
Cookies
Three, all strictly necessary and none of them tracking. One keeps you signed in, one holds a half finished sign in while you type an invite code, and one ties a Steam sign in to the browser that started it so nobody can hand you someone else's. There are no advertising cookies, no analytics, and nothing to consent to.
How long it is kept
Recordings, as described above, minutes. Everything else stays until you delete your account or until the beta ends, whichever comes first. Server logs holding IP addresses roll over on their own.
Deleting everything
Sign in and press Delete my account and all my data in the footer. That removes your account, your reviews, your survey answers, your progress measurements, your waitlist entry if you have one, and any recording still on disk. It happens immediately and it cannot be undone.
One thing survives, deliberately. Your invite code stays marked as used, so that deleting an account is not a way to get another free allowance. The code no longer points at you.
If you would rather ask than press a button, email hello@replaylock.com.
What we never do
No advertising. No selling or sharing your data with anyone not listed above. No analytics, no tracking pixels, no fingerprinting. Your reviews are private to your account and are never shown to another user.
Changes
If this page changes in a way that matters, the date at the top changes and anyone with an account gets an email.