API not available yet

Expect delays in sync while Riot API access is still pending. Some match data may arrive later than usual.

Skip to content

Legal codex

Privacy Policy

Last updated: May 2026

1. Information We Collect

Account Information: When you sign up, we collect your email address and authentication provider information (Google, Discord, or email/password via Supabase Auth).

Waitlist Information: If you join the History Import waitlist, we store your email address and reservation status so we can notify you when the feature opens and reserve any promised free import access.

Riot Games Data: If you link your Riot Games account (when available), we access your League of Legends match history, summoner profile, and rank information via the official Riot Games API.

Run Data: We store your challenge run configuration, champion progress, match results, and public profile settings.

Creator Starter Data: If you use streamer tools, we store overlay tokens, overlay event records, Twitch channel connection details, command settings, verification status, and subscription status needed to operate OBS overlays and OneLifeHeroBot commands.

Usage Data: We may collect privacy-friendly usage analytics and web performance metrics to improve the Service.

2. How We Use Your Information

  • To provide and maintain the Service
  • To synchronize your League of Legends match history with your runs
  • To display your public profile, runs, and champion progress (if set to public)
  • To operate Creator Starter overlays, alert events, Twitch command replies, and billing access
  • To communicate service updates, security alerts, and support messages
  • To improve and develop new features

3. Data Sharing

We do not sell your personal data. We share data only:

  • With Supabase (our database and authentication provider) to operate the Service
  • With Vercel to measure site analytics and speed insights
  • With Google and advertising partners to serve, measure, and protect ads shown on the Service
  • With Riot Games via their official API, solely to fetch your match data
  • With Stripe to process paid history imports, Creator Starter subscriptions, receipts, invoices, and related payment records
  • With Twitch APIs when you connect a Twitch channel for live status, clips, or OneLifeHeroBot commands
  • When required by law or to protect our rights

4. Riot Games API Data

When you link your Riot Games account, we access your data through the official Riot Games API under their API Terms of Service and policies. You can revoke access at any time through your Riot account settings or our Settings page.

Riot account data (PUUID, summoner ID, match history) is stored to enable automated run tracking and is not shared with third parties.

5. Data Storage & Security

Your data is stored on Supabase servers in the EU (eu-central-1 region). We use industry-standard encryption (TLS/SSL) for data in transit and encryption at rest. Row Level Security (RLS) policies ensure users can only access their own private data.

6. Cookies

We use essential cookies for authentication sessions (Supabase Auth). Pages that show Google ads may also use cookies, web beacons, IP addresses, or other identifiers from Google and its advertising partners to serve ads, measure ad performance, personalize ads where allowed, and help prevent fraud and abuse.

Third-party vendors, including Google, may use cookies to serve ads based on your prior visits to OneLifeHero or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on visits to this site and other sites on the Internet. You can opt out of personalized advertising in Google Ads Settings, and you can opt out of some third-party vendors' personalized ads at aboutads.info.

Where required, we rely on consent tools or browser controls before using non-essential advertising storage or personalized advertising.

7. Your Rights

You have the right to:

  • Access your personal data we hold
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your run data
  • Make your runs private at any time

To exercise these rights, contact us at the contact page.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. Anonymized public run data may be retained for leaderboard integrity. Overlay events are short-lived operational records and may be deleted or expired after they are no longer needed for live alerts.

9. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a prominent notice on the Service.

11. Contact

For privacy-related inquiries, contact us at the contact page.