LOCKSTAT is a fan-made Deadlock stats site. We collect as little as possible and never sell data. Here is exactly what is stored and why.
What the site shows
Match stats, ranks, names and avatars come from public sources: the Deadlock API (deadlock-api.com) and Steam. This data is public to anyone who knows your Steam ID; LOCKSTAT does not create it and cannot remove it from those sources.
A profile owner can hide the Players tab, the activity calendar and the “in a match” status on LOCKSTAT in profile settings.
Signing in with Steam
Sign-in uses the official Steam OpenID: you enter your password only on Steam, we never see it. Steam tells us only your Steam ID.
After sign-in we set a lockstat_session cookie for 30 days containing your signed Steam ID so you stay signed in. “Sign out” removes it.
What is stored on the server
If you sign in: your favorite players, profile customization (main, background, bio, hidden sections) and the “verified profile” mark. If you post in “Find teammates” — region, mode, heroes, note and rank; the post is deleted after 2 hours. Nothing else about your account is stored.
A profile view counter for “Popular profiles”: one view per visitor per day. Instead of the IP address an irreversible hash is stored; the IP itself is not saved, and records older than 7 days are deleted.
To protect against overload, the server keeps the IP address in memory for no more than two minutes to rate-limit requests. It is never written to disk.
Patch note translations — patch text only, no personal data.
What is stored in your browser
The lang cookie — the site language you chose.
localStorage — recently opened profiles and matches for search. It never leaves your browser; “Clear” in the search box removes it.
If you install the site as an app, the browser caches icons and site files for offline use.
There are no ads, analytics counters or third-party trackers.
Third-party services
Deadlock API — the stats source. Our server makes the requests; your IP address is not passed on.
Steam — player avatars are loaded by your browser directly from Steam servers.
Hero and item icons are loaded from Deadlock API servers.
Claude API (Anthropic) — translates patch notes. Only the patch text is sent.
Legal bases and retention
Sign-in, favorites and profile customization — to provide the service you asked for. Kept until you delete them.
Overload protection and the anonymized view counter — our legitimate interest in a stable, fair site. IP addresses stay in memory for a couple of minutes at most; counters for 7 days.
Recent profiles and the offline cache in your browser — only with your consent, which you can withdraw on the Cookie policy page.
The sign-in cookie lasts 30 days or until sign-out; the language and consent cookies — 1 year.
Your rights
You can learn what data about you is stored, correct it, delete it, object to processing or withdraw consent. Almost all of this is available on the site: Profile settings, the delete button below, the Cookie policy.
If you believe your rights have been violated, you can contact your country's data protection authority.
Children
Signing in with Steam is allowed from age 16. We do not knowingly collect children's data; if we learn of such an account, we delete its data.
How to delete your data
You can change favorites, profile customization and your teammate post at any time. The button below deletes everything LOCKSTAT stores about your account and signs you out.
Delete my data from LOCKSTATRequires signing in with Steam. In-game stats stay available through the Deadlock API — we cannot delete those.
Current setting: not chosen yet — essential only
Who runs the site
LOCKSTAT is a non-commercial fan project run by a private individual. It is not affiliated with Valve Corporation.
A contact address will be listed here once the site is public.