Privacy Policy

Last updated: April 1, 2026

This Privacy Policy explains what information LoL Tracker ("we", "us", "our") collects when you use lol-tracker.com, why we collect it, and the choices you have. LoL Tracker is an independent service and is not endorsed by or affiliated with Riot Games.

1. Who we are

LoL Tracker is a team performance tracker for the Flex 5 queue in League of Legends. For any privacy question, contact us through the contact page.

2. Data we process

2.1 Account data (Clerk)

Authentication is handled by Clerk. When you sign up, Clerk stores your email address, a hashed password (if used), and any third-party identifier you chose (Google, Discord, etc.). We receive only the minimum needed to identify your session. See Clerk's own privacy notice on clerk.com for details.

2.2 League of Legends data (Riot API)

When you add a player to your team, we ask Riot's API for that account's PUUID, summoner name and tagline. We then periodically fetch Flex ranked matches where your five-stack played together. The stored data includes: PUUIDs, match IDs, champions, KDA, gold, vision score, damage, CC, team ID and game duration. We do not collect chat, voice, replays, IP addresses from game sessions, or any Riot account credentials.

2.3 Billing data (Stripe)

Paid plans are handled by Stripe. We never see or store your full card number. We receive a Stripe customer ID, subscription status, plan tier and billing email in order to unlock the right features on your account.

2.4 Analytics

We use Umami for privacy-friendly analytics. Umami does not use cookies and does not track you across sites. We collect aggregated, non-identifying data: URL visited, referrer, approximate country, browser and device type.

2.5 Discord (optional)

If you opt in to our matchmaking or notification features, we may receive your Discord username and avatar via OAuth, and we may post automated messages through a Discord webhook you configured.

3. Why we process this data

4. Legal bases (GDPR)

We rely on performance of a contract to deliver the service you signed up for, our legitimate interest to keep the service secure and to improve it, and consent where required (for example if you opt in to optional integrations).

5. Data retention

We keep your account and team data for as long as the account is active. Match history retention depends on the team owner's plan:

Older games are automatically deleted by a scheduled job. If you delete your account, personal data is removed within 30 days, except what we are legally required to keep (e.g. invoices).

6. Sharing

We do not sell personal data. We share only with the processors needed to run the service: Clerk (auth), Stripe (billing), MongoDB Atlas (database hosting), Vercel (hosting), OpenAI (AI analysis of your aggregated match stats), and Umami (analytics).

7. Your rights

You can request access, correction, export or deletion of your data at any time from the contact page. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.

8. Security

Connections are encrypted with TLS. API routes that mutate your team data are authenticated and authorised on the server. Secrets (Riot API key, Stripe, OpenAI, Discord webhook) are kept in environment variables and never exposed to the client.

9. Children

LoL Tracker is not directed to children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes

We may update this policy occasionally. Significant changes will be announced on the site or by email.