Privacy
What data we process, why and for how long.
What we do not store
- Your Riot password: you sign in on Riot’s official page and it never goes through this site.
- Permanent sessions: we do not store Riot cookies that could get into your account without you.
- Third-party advertising or analytics cookies.
What we store
- Session (1 hour at most). The access token you bring back, your player ID (puuid), your Riot ID and your region. They are encrypted with AES-256-GCM. The key to decrypt them only lives in your cookie, which is HttpOnly and Secure. Everything is deleted automatically when it expires or when you sign out.
- Submitted lineups. If you submit a lineup we store what you send and your Riot ID, which is shown as the author if it is published.
- Streak. The days you visit the site (only the date). With your account connected they are stored encrypted with your wishlist; otherwise, in your browser.
- Sensitivity tests. Your DPI, sensitivity and test results stay in your browser; they are not sent to the server.
- Wishlist and Telegram. The list of skins you mark and, if you link it, your Telegram chat ID. They are stored encrypted under an opaque ID derived from your puuid. You can empty the wishlist and unlink Telegram at any time.
Who we share it with
- Riot Games: to read your store and wallet with your token.
- HenrikDev API: receives your puuid and region to calculate your stats.
- Telegram: only if you link the alerts.
- Player search: the Riot ID you look up is sent to HenrikDev API to get public stats. We do not store searches on the server; recent ones are only remembered in your browser.
- Cloudflare: as the hosting provider.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the site owner. You can also complain to the Spanish Data Protection Agency (aepd.es).
Cookies
We only use strictly necessary technical cookies: the session ones (__Host-vt or __Host-vtc0 to __Host-vtc2), which last 1 hour at most, and vt-lang, which remembers the language you pick. They do not require consent.