HIGHGROUND

Legal, privacy & refunds

Clear terms for Highground Coach, a live Dota 2 coaching companion.

Effective and last updated: 10 October 2026

Provider and data controller: Mawa s.r.o.

SNP 820/25, 078 01 Sečovce, Slovakia

Company ID (IČO): 51 073 374 · Tax ID (DIČ): 2120589075 · VAT ID: SK2120589075

Commercial Register of the Municipal Court Košice, Section Sro, Insert 42229/V

Email: support@highgroundcoach.app · Online requests: form below

Terms of Service

1. The service

Highground Coach provides live, automated Dota 2 draft, map, danger, timing, fight and item guidance through a companion webpage and optional voice calls. It uses Valve's Game State Integration feed and screen recognition during hero selection and relevant in-game states. The client captures the Dota window locally to read relevant interface regions, including the top strip and the selected unit's name and inventory. It sends the top strip, a cropped image of the selected unit's item grid and locally recognised text to the coaching server. It does not play the game, inject code, read game memory or guarantee wins, rank changes or any particular result.

2. Requirements and start of service

You need a compatible Windows PC, a current Dota 2 installation, internet access and a modern browser. Free starts when your key is delivered; Plus starts when payment is confirmed and the licence key is delivered. By installing the client, you instruct us to begin providing the service immediately.

3. Orders, prices and recurring billing

4. Contract language and acceptance

English is the contract language for worldwide sales. Before payment, you must actively accept these Terms and confirm that you understand English and agree to receive the contract, consumer information and service communications in English. The Slovak version is provided for Slovak customers and convenience; we do not promise translations into other languages.

5. Cancellation and licence

You may cancel at any time through the Stripe customer portal linked from our site. Cancellation stops the next renewal; Plus normally continues until the end of the paid period, and the key then continues as Free. One subscription grants a personal, non-transferable licence for one PC. Do not share, sell or publish the key. Contact us for a reasonable device reset.

6. Fair use and availability

Do not use the service unlawfully, attack or overload it, bypass access controls, scrape models or data, or use it to violate Valve's rules. We may suspend abusive or fraudulent access. We may maintain, secure and improve the service and change features where reasonably necessary. We will use reasonable care but cannot promise uninterrupted availability.

7. Intellectual property and Valve notice

Highground's software, models, design and original content belong to Mawa s.r.o. or its licensors. Dota 2, hero, item, map and rank names and imagery belong to Valve Corporation and are used only to identify in-game elements. Highground is independent and is not affiliated with or endorsed by Valve.

8. Complaints, defects and liability

Report a defect or complaint through the form below or by email, with enough detail to identify the subscription and problem. We will acknowledge and handle it without undue delay. Nothing in these Terms limits mandatory consumer rights, liability that cannot legally be limited, or your remedies for a service that does not conform to contract. To the extent permitted by law, we are not liable for indirect loss, lost rank, missed gameplay opportunities or decisions made from coaching suggestions; aggregate contractual liability is limited to the amount you paid in the preceding 12 months.

9. Governing law and disputes

Slovak law applies, without depriving consumers of mandatory protections in their country of residence. Please contact us first. If a Slovak consumer request for remedy is rejected or unanswered for 30 days, the consumer may seek alternative dispute resolution from the Slovak Trade Inspection, Prievozská 32, 827 99 Bratislava 27, Slovakia, email ars@soi.sk. Court rights remain unaffected.

Privacy Notice

Mawa s.r.o. is the controller for product and customer data. Stripe separately controls payment data under its own privacy terms.

1. Data we process

A secure, HTTP-only checkout receipt cookie lasts up to 24 hours and lets our server verify that a completed payment belongs to the browser that opened checkout. With optional measurement consent, a purchase conversion uses the Stripe-confirmed amount and currency and a non-personal transaction identifier to prevent duplicate counting; it does not send your email or licence key to Google.

To diagnose account setup problems, we record licence email sending outcomes, authenticated app connections, Dota connections and completed coached games. A successful send means our email provider accepted the message, not that you read it. We do not track email opens. If optional analytics is accepted in the browser opening a Store link, an opaque identifier can associate that click with your licence; it contains no email or licence key and grants no access. These click records and identifiers expire after 180 days. Store clicks do not prove a download or installation.

CategoryExamples
Contact and subscriptionName, email, requested plan, licence status, Stripe customer/subscription identifiers, expiry and consumer requests. We do not receive full card details. If you tick the optional news box when getting a free key, we also keep that consent: when you gave it, the wording version and the page language.
Device and securityA one-way hash of the first PC identifier, client version, authentication events, service and security logs.
Gameplay and coachingValve GSI match state, including the in-game chat messages that feed reports (the sender's player slot and the text), coach decisions and calls, settings and feedback. The client captures the Dota window locally for screen recognition and sends its top strip, a cropped image of the selected unit's item grid and locally recognised text (such as the selected hero's name) to the coaching server. The full Dota-window capture is processed locally and is not uploaded. The latest top strip overwrites the previous one and is deleted after the session; recognised gameplay data is handled as gameplay telemetry under the retention policy below.
WebsiteEarly-access email and plan selection, basic web request logs, the information you submit through forms and, with your permission, referral source (except a partner's code, see Partner codes), download/checkout events and Google Ads and OpenAI Ads conversion measurement.
Friend invitesIf you get a free key from a friend's invite link: the invite code and which licence invited you, so that licence can receive one free month of Plus after your first coached game. So that nobody can invite themselves, we compare the two licences' device hashes and IP addresses in the connection history.
Partner codesIf you arrive through a Highground partner's link (for example ?ref=pk) or enter a partner's creator code, we store that partner's code with your licence when you get a free key or buy Plus, so we can credit the partner and apply any discount at checkout. This works without analytics cookies and whatever you choose in the cookie banner. The code travels only in the page address (also in the plans links of your key's email and of the app), in the creator code box's check of the code and in that visit's free-key or checkout request; we save no cookie or browser storage for it. A link's code is shown in the creator code box, and you can clear it there before you get your key or pay: without analytics permission, a cleared box credits no partner. With permission, the partner remembered from your first visit is credited as described under cookies below, and a code saved with your free key, or the partner your licence already credits, still applies when you upgrade. We keep only the codes of partners with a current agreement, not other link labels or the site you came from. With your licence we keep the code, the partner it names and, at checkout, the discount applied. At checkout Stripe receives the code, and a discount appears on Stripe's page and your receipt as “Creator code” followed by the code. We do not give the partner your email or licence key.

2. Why we use it

3. Recipients and transfers

We use Stripe for checkout, subscriptions and payment support; Amazon Web Services in the EU for hosting and email; Google Fonts to deliver the landing-page typefaces; and, only if you accept optional analytics, Google Ireland Limited (Google Ads) and OpenAI (OpenAI Ads) to measure which of our ads lead to free keys and purchases. These providers receive only what is needed for their role and may use approved transfer safeguards such as adequacy decisions or standard contractual clauses where data leaves the EEA. We disclose data when legally required or during a properly safeguarded business reorganisation.

4. Retention and security

Subscription and licence records are kept while the subscription is active and afterwards only as needed for accounting, claims, fraud prevention and legal duties. Consumer requests are kept until resolved and for the related limitation period. Technical and gameplay logs are rolling or size-limited and kept only while needed for operation, diagnosis and improvement. In-game chat messages from the GSI feed are kept with gameplay telemetry for up to 12 months to improve coaching, then deleted. The latest screen strip is overwritten during play and removed when the session ends. Backups expire on their normal rotation. We use HTTPS, restricted server access, signed webhooks, hashed device identifiers and access-controlled secrets.

The private owner dashboard stores licence-level activation and qualifying-game counts, entitlement changes and payment/referral reconciliation alongside the licence record. IP and device connection history is retained for 90 days; our own raw optional browser events for 180 days. Active access-block rules and their audit history are kept for access control. Referral reports label unmeasured stages and client-reported installation or playback separately. These operational records are accessible only through protected administration.

5. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing; you may withdraw consent without affecting prior processing. Submit a privacy request below or email us. We normally respond within one month and may verify your identity. You may complain to the Office for Personal Data Protection of the Slovak Republic or your local supervisory authority.

6. Cookies, automated decisions and children

Without cookies, we also count website visits from our web server's request logs. The logs record each request's IP address, time, page, referring page and browser type, and are deleted after 14 days. Once a day we reduce them to counts only: visits per day, the referring site or campaign label, the country derived from the IP address, the page language, and how many of those visits requested a free key, opened the Microsoft Store or started a checkout. The stored counts contain no IP address, browser identifier or other identifier.

If you choose a website language, your browser stores that choice (hg_lang, local storage) so the site opens in that language next time. It is never sent to us.

Optional website analytics are off until you accept them. If you accept, optional cookies (hg_ref, hg_campaign and hg_visitor) remember your original referral source, approved campaign labels and a random browser identifier for up to 180 days. Without this permission we keep no referral source, with one exception: the code of a partner with a current agreement, from the link you arrived through or the creator code box, is sent with a free-key or checkout request in the same visit and carried between our pages only in the page address (see Partner codes above). We use them to count distinct consenting browsers and associate the source with visits, download clicks, free key requests and checkout activity. These counts describe browsers, not verified people. Approved campaign fields are utm_source, utm_medium, utm_campaign, utm_id, utm_content and utm_term. We retain the original set together; later links do not replace it, except that a partner's link or creator code is credited instead of a non-partner source, and that earlier source's campaign labels are then not kept with your licence. Other query parameters and full landing URLs are not stored for attribution. Previously unrecorded campaign details remain unknown. If you accept, the landing page also loads Google's tag for Google Ads. Google may set advertising cookies such as _gcl_au (up to 90 days) and receives a notice when you get a free key or complete a checkout, with the verified amount and currency, so we can see which ads work. Ad personalisation is switched off. Google processes this data under its own privacy policy. Rejecting stops the tag and deletes these cookies from our domain. An essential preference cookie (hg_analytics) remembers acceptance or rejection for 180 days. You can reject analytics and still use Free and checkout. Use to change your choice; rejecting deletes these optional cookies and stops future optional tracking. Previously collected records remain subject to the retention policy above. Secure, essential account session cookies keep streamed page links view-only and link a new free key or authenticated Coach Mode session to checkout for up to 30 days. That account link works without optional analytics; it does not recover an unknown referral. Stripe may use essential checkout cookies under its notice. Coaching output is automated, but it is gameplay advice and produces no legal or similarly significant effect. The paid service is intended for people aged 18 or older, or younger users acting with a parent or legal guardian.

PostHog website analytics and recordings: We use PostHog, Inc. in our EU cloud project for basic page counts even when optional analytics is declined or unanswered. This cookieless mode does not save a visitor identifier in cookies or browser storage. PostHog processes the request IP address, browser user agent and site hostname to create a daily salted identifier on its servers, then discards the IP from the event. The daily identifier estimates visits within a day; it cannot reliably identify people or returning visitors across days. Basic events contain the public page path, browser/device information and referring website origin, without URL queries, account details or person profiles. Cookieless processing is still data processing; it is not a claim that privacy law does not apply.

Only if you accept optional analytics do we also send free key requests, checkout and Microsoft Store clicks, approved campaign labels, and server-verified purchase amounts and currency. A random browser identifier links these optional events; we do not identify you to PostHog by email, licence key or payment details. Consented page duration and scroll depth help us understand visits. Masked session recordings show page layout, clicks and scrolling to find usability problems. Form content, licence output, page text, other URL query values, console messages and network request/response content are excluded. The hg_posthog preference cookie remembers your choice for 180 days; the SDK also remembers that choice. PostHog session storage keeps an accepted visit together across page refreshes in the same tab and is cleared on tab closure or withdrawal. A local marker (hg_posthog_purchases) prevents repeated counting of a verified purchase; entries older than 180 days are removed on the next purchase check. Withdrawal stops optional collection and recordings and clears optional identifiers and that marker; basic cookieless page counts continue. Collected records remain subject to our privacy rights process and PostHog service retention. Details: PostHog privacy notice. A Store click does not prove an app download or installation.

Cancellation, Refund & Withdrawal Policy

Simple promise: request a refund within 14 days of any subscription charge and we will refund that charge to the original payment method. This is in addition to rights you cannot waive under consumer law.

EU/EEA consumers generally have a statutory 14-day withdrawal period for online service contracts. The form below is an easy way to exercise it; no reason is required. You may also make any other clear statement by email.

Online consumer request

Use this for withdrawal/refund, privacy rights or a complaint. Keep the confirmation code shown after submission.