Privacy Policy

1. Information We Collect

Account Information: When you sign up, we collect your email address and authentication provider information (Google, Discord, or email/password via Supabase Auth).

Waitlist Information: If you join the History Import waitlist, we store your email address and reservation status so we can notify you when the feature opens and reserve any promised free import access.

Riot Games Data: If you link your Riot Games account (when available), we access your League of Legends match history, summoner profile, and rank information via the official Riot Games API.

Run Data: We store your challenge run configuration, champion progress, match results, and public profile settings.

Usage Data: We may collect privacy-friendly usage analytics and web performance metrics to improve the Service.

2. How We Use Your Information

• To provide and maintain the Service
• To synchronize your League of Legends match history with your runs
• To display your public profile, runs, and champion progress (if set to public)
• To communicate service updates, security alerts, and support messages
• To improve and develop new features

3. Data Sharing

We do not sell your personal data. We share data only:

• With Supabase (our database and authentication provider) to operate the Service
• With Vercel to measure site analytics and speed insights
• With Riot Games via their official API, solely to fetch your match data
• With Stripe to process paid history imports, receipts, invoices, and related payment records
• When required by law or to protect our rights

4. Riot Games API Data

When you link your Riot Games account, we access your data through the official Riot Games API under their API Terms of Service and policies. You can revoke access at any time through your Riot account settings or our Settings page.

Riot account data (PUUID, summoner ID, match history) is stored to enable automated run tracking and is not shared with third parties.

5. Data Storage & Security

Your data is stored on Supabase servers in the EU (eu-central-1 region). We use industry-standard encryption (TLS/SSL) for data in transit and encryption at rest. Row Level Security (RLS) policies ensure users can only access their own private data.

6. Cookies

We use essential cookies for authentication sessions (Supabase Auth). We do not use tracking cookies or third-party advertising cookies. No cookie consent banner is required as we only use strictly necessary cookies.

7. Your Rights

You have the right to:

• Access your personal data we hold
• Correct inaccurate data
• Delete your account and associated data
• Export your run data
• Make your runs private at any time

To exercise these rights, contact us at the contact page.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. Anonymized public run data may be retained for leaderboard integrity.

9. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a prominent notice on the Service.

11. Contact

For privacy-related inquiries, contact us at the contact page.