[Request] Implement Private Profiles

[Aluerie]

Problem: Opendota still has my historical data even if I have Expose Match Data setting off. Even though it's my fault to enable it one year ago for a moment - it is still a problem that I cannot make my data go private - I just don't want my match history/past stats to be shown to everybody. This was also requested many times in #general discord channel.

Motivation: With recent Valve news on cheaters and draft anonymity I think it's clear that Valve want to support anonymity and respect private data. So it would be nice for OpenDota to follow the example. Maybe there is some law thing too, but I don't want to nerd it out; it just would be humanly-nice to be able to set my opendota to private.

Valve made profiles hidden during the draft but in theory players still can google my name/see my avatar in Opendota and get the stats. So next step for better anonymity is either for Valve to hide names/avatars in draft or for Opendota to implement Private Profiles.

Solution: For example, Stratz, Dotabuff already respect the Expose setting and hide my profile data from others.

• Dotabuff approach would be perfect: where the data is hidden from others but I can still access it if I log in.
• Stratz approach to hide the data from everybody including me is also fine. (edit: now you can view your data if you login in stratz too)

OverwolfDotaPlus also respected Valve decision and removed sniping-people data in the draft stage too.

Alternative solution: odota/web#2883 where OP suggests manual opt-in/out, but I think just following Stratz/Dotabuff example would be more intuitive.

[hanselviva]

Agree on this one. Came here to ask the same thing.

[howardchung]

I'm on board with this change if someone wants to create a PR, but don't currently have the bandwidth to work on it directly.

I think we have the necessary data to do it already--we can just not load the matches list for players in all the player data endpoints if fh_unavailable (we set this when we try to fetch match history for a player) in the SQL database is true and the cookie doesn't match the user ID.

In the UI if we want to create a message showing that the player is private, that's a bonus

This would also allow us to start storing match data for all users (including anonymous ones) from the GC since it'll be hidden from the profiles of players who toggle the option off

[Aluerie]

Erm, sorry, but does it fully work actually? Am I missing something?

Opening my profile both logged in and incognito (https://www.opendota.com/players/112636165) leads to the attached picture below:

While it clearly has a lot of zeros and doesn't show data like "Counts", "Players Played With". etc. - It still shows my match history from before I last enabled Expose Setting and "Averages/Maximums" in those games. And yes, I played quite a bit of dota after "25 days ago" mark. Also MMR and Rankings tabs have some info :D

Also there is no clear message that my profile is supposed to be private, like we discussed stratz/dotabuff examples. Plus, I thought you wanted to make it so we can see our own data if we login despite the setting state.

Do I need to toggle the setting 🤔

[howardchung]

Updated to hide last 20 matches, MMR (although this is many years out of date anyway) and rankings as well.

The showing an improved message is tracked in odota/web#3133

[howardchung]

Also put in a fix for the showing matches to logged in users, but haven't tested it directly since my own account is not private

[Aluerie]

Doesn't look like it.

[howardchung]

Tried another fix (web client wasn't passing login info)

[Aluerie]

thanks a lot, looks good except "Recent Matches", "Averages/Maximums" now don't load if I'm private+signed in. Other tabs look fully functional.

Another thing I'm not sure about it - Matches still shows data only before 25 days ago. However, you mentioned storing data for all users/all matches so I thought it means if my profile is private and I login - I should be able to see my recent games (as in yesterday) despite the setting. That the setting should only control who can see the information.

[howardchung]

Made some more fixes for recentMatches--should work again!

As for the storing all data for players, we have not made that change yet. It requires some more planning around how we store the data. So for now, if you want to have data available, you will need to make your profile public temporarily, request a refresh, and then turn it off again.