Legal

Privacy Policy

Last updated: 2 October 2026

1. Controller and contact

lolgap is a fan-made statistics service for League of Legends and Teamfight Tactics. The controller responsible for data processing is Vadim Linger. Privacy requests can be sent to vadim.linger@googlemail.com.

2. Data we process and why

Public Riot game data. A Riot ID search causes us to retrieve and cache public account, ranking, match, mastery, live-game and related statistics from Riot Games APIs. We use this data to provide the requested statistics and to maintain aggregated, non-authenticating product views.
Account data. If you register, we process your email address, display name, password hash, account timestamps and verification status to create and secure your account. We never store your plaintext password.
Session and security data. Signed-in sessions may contain a session token, expiry time, IP address and user-agent string. An essential, secure session cookie keeps you signed in and protects authenticated features.
Favorites. When signed in, saved Riot IDs, PUUIDs and regions are associated with your lolgap account so the favorites feature can work.
Riot Sign-On. If Riot Sign-On is enabled later and you choose it, we process the identifiers and OAuth/OIDC tokens required to connect and maintain that login. Riot Sign-On is not enabled without Riot approval and user action.
Server logs. Our hosting provider processes technical request data, such as IP address, browser information, requested URL and timestamps, to deliver and secure the service and diagnose failures.
Browser storage. Recent searches, interface preferences and consent choices are stored locally in your browser. Recent searches and preferences are not sent to lolgap merely because they are stored there.

Processing necessary to provide requested pages and account features is based on performance of the service you request. Security, reliability and abuse prevention are based on our legitimate interests. Optional analytics or advertising storage is based on consent where consent is required.

3. Cookies and consent

Essential authentication cookies do not require advertising or analytics consent and are used only when you use account functionality. Optional advertising and analytics technologies remain disabled until the applicable service is configured and, where required, you have made a consent choice.

You can change or withdraw your optional choice at any time via .

4. Advertising

Advertising is disabled. It will not be enabled unless the registered Riot product is Approved or Acknowledged and the required consent setup is active.

5. Analytics

With your consent, Google Analytics 4 helps us understand which pages are used and how the service performs. You can withdraw that consent through the cookie settings.

6. Recipients and data sources

We use Vercel for hosting, a PostgreSQL provider for application data, and Riot Games APIs and Data Dragon for game data. These providers process only the information needed for their role. Optional Google services are used only when shown as enabled above.

7. Retention and deletion

Account and favorite data is retained while your account is active or until it is no longer needed for the feature. Sessions expire after 30 days and may be invalidated earlier. Cached Riot data is refreshed or removed according to operational needs. Hosting logs are retained according to the hosting configuration. You may request account deletion or exercise another privacy right using the contact address above.

8. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, withdraw consent for future processing, and lodge a complaint with a supervisory authority.

9. Changes

We update this policy when the service or its data processing changes. The date above identifies the current version.