Data we collect
Umbrella·Dota processes the following categories of personal data:
- Email address — to send access credentials after payment, for password recovery, and service notifications.
- Username and hashed password for the Umbrella account.
- Payment history — DigiSeller order number, plan, date, amount. Card details are NOT stored (the payment provider DigiSeller processes them on their side in accordance with PCI DSS).
- Cloud configs — your Umbrella module settings, stored in encrypted form, tied to your account.
- Technical data — IP address, browser User-Agent, session ID. Collected automatically for security and fraud prevention.
- Cookies — for cart functionality, authentication, and A/B UI tests. We do not use third-party advertising retargeting cookies.
We do NOT collect: full name, address, phone number, passport data, card details, or Steam account data.
Purposes of processing
- Providing access to the Umbrella Software Product (performance of the service agreement).
- Technical support for users (responding to inquiries).
- Service security (protection against bots, spam, and fraud).
- Notifications about significant changes (updates, patches, subscription expiry).
- Internal analytics (aggregated, not tied to individual users — total active subscriptions, geographic payment distribution).
We do NOT share data with third parties, except:
- the payment provider DigiSeller for payment processing;
- upon a lawful request from authorized government authorities.
Retention and storage
- Active subscriptions — while the subscription is active + 90 days after expiry (to allow renewal).
- Payment history — 3 years (tax law requirement).
- Access logs — 30 days.
- Cookies — up to 12 months (depending on type).
Umbrella·Dota servers are located in a secure data center. Daily backups are stored in encrypted form.
Data subject rights
As a user, you have the right to:
- request information about the processing of your personal data;
- request correction, restriction, or deletion of data;
- withdraw consent to processing;
- lodge a complaint with the relevant supervisory authority.
To exercise your rights, leave a request in the live chat on the Support page marked "Privacy Request". Response time — 30 calendar days.
Account and data deletion
- Write to support (Contacts) with your Umbrella username and a deletion request.
- Within 24 hours the account is deactivated and access to the Software is blocked.
- Within 30 days all personal data (email, password, configs) is deleted from active servers.
- Payment history is retained for 3 years in anonymized form (only the DigiSeller order number, without personal identification).
An active subscription is not refunded after account deletion. If you want to preserve the option to resume — it is better to wait for the current subscription to expire.
Contact
Date of last revision of this Policy: 2026-05-28. The current version is always available at umbrella-dota.com/en/policy/.