Safety & Privacy
Exactly what Ability Draft Plus does — and everything it doesn't. If you only read one page before installing, make it this one.
How the overlay actually works
- 1
It finds the Dota window
Using standard, read-only Windows APIs (the same ones any screenshot or streaming tool uses) the app asks where the Dota 2 window is on screen so the overlay can line up with it. It never opens, reads, or modifies the game process.
- 2
It takes a screenshot — only when you scan
When you press scan, Electron's built-in screen capture grabs one image of your display. There is no continuous recording and no capture outside the draft screen you triggered it on.
- 3
A local ML model reads the board
The screenshot is cropped into 48 ability slots and classified by a MobileNetV2 model running in ONNX Runtime on your CPU. The image never leaves your machine, and low-confidence slots are marked "Unknown" rather than guessed.
- 4
Results are drawn on a click-through window
The overlay is a transparent, always-on-top window that forwards your clicks straight to the game. It draws on top of Dota — it never touches Dota.
What it never does
No game memory access
There is no process memory reading of any kind in the codebase — you can verify this yourself, it's open source.
No injection, hooks, or drivers
No DLLs are injected, no functions are hooked, no kernel drivers are installed, and no Dota 2 file is ever modified.
No input automation
The app never moves your mouse, never presses keys, and never picks for you. Every draft decision is yours.
No background surveillance
No telemetry runs behind your back. Screen capture happens exactly when you press scan, and stats updates happen exactly when you press update.
What leaves your PC
By default, the only outbound connections are:
Windrun.io API
Downloads ability and hero statistics when you press "Update Windrun Data". Nothing about you is uploaded.
GitHub Releases
A periodic version check for updates. Downloading and installing always requires your explicit click.
Failed-recognition reports
Entirely user-triggered. "Report Failed Recognition" stores snapshots locally (capped at 25); they are only transmitted if you explicitly press Send — or you can export a zip and attach it to a GitHub issue instead.
About feedback snapshots
A snapshot contains the exact screenshot the model classified — a full capture of your draft screen — plus the model's raw predictions. Snapshots stay in your local app data folder until you delete, export, or send them. Before sending, remember the image shows everything that was on that screen.
Don't trust — verify
The entire application is open source under a permissive license. If you're skeptical (you should be — it's your account), read the code or build it yourself.
Browse the source on GitHubHonest fine print: no third-party tool can guarantee that a ban is impossible, and Valve's rules are Valve's to interpret. What we can guarantee is full transparency about what the software does — which is why this page and the source code exist.