Privacy

Fantasy LoL is a small alpha project run by one person. This page says what data it keeps, why, and what you can do about it. If anything here is unclear, ask through the in-app Send feedback button.

The short version

• The only account data is a username and a hashed password. No email, no phone number.
• The survey after signup is optional: every question, and the whole thing. You can skip it and use the app normally.
• We use your answers and how you use the app to decide what to build, and to show organizations in the League ecosystem, including Riot Games, that there is a real audience of people who still follow competitive League. Anything shared outside this project is grouped statistics only. Never your username, never your individual answers.
• No ads. No selling data. No third-party trackers or analytics SDKs. One essential cookie.

What we collect

To run your account. Your username, a scrypt hash of your password (never the password itself), and a login session (a hashed token and its expiry, set as one cookie).

If you fill in the survey (optional). Your answers to questions about how often you play League now and used to, how much pro League you watch and where, which leagues and teams you follow, how long you have played and followed the scene, how you found this site, and, only if you choose to answer, your age range. We also store whether and when you consented to us using this for the purposes below, and a one-time flag recording that you have seen the survey so it stops prompting.

As you play. The rosters you build: your standing solo ladder roster for each region, and your team and roster in any league you create or join. Each time you save a roster we also add one dated line to an append-only log (your user id, which region or league, and when). We keep this to count, week by week, how many people come back — a genuine returning-player count instead of a re-saved default. Only grouped totals are ever shown or shared; the raw lines are never published tied to you. Plus anything you type into the feedback form, stored with your username so we can reply.

We do not collect your real name, precise location, contacts, browsing outside this site, or any payment information (the app is free and has no payments). We do not keep an application record of each login, though the server log below records requests as they arrive.

Server logs

The web server (Caddy, on the same host as everything else) keeps a standard access log: your IP address, your browser’s user-agent string, and the address of each request. That address can include an invite code (?code=) or a link tag (?ref=) when you follow such a link. These logs are not used for advertising or cross-site tracking; they exist so we can tell whether a shared link was opened and fix errors. Rolled log files are deleted after about 30 days; the current file can hold a little longer on a quiet stretch before it rotates. The lawful basis is our legitimate interest in running and understanding the site.

Why we use it

• To build the app: deciding which features and leagues to prioritize.
• To show the audience exists: grouped, de-identified statistics (for example, "68% of users played daily a few years ago and monthly or less now") shared with partners and potential partners in the League ecosystem, including Riot Games. These reports never contain your username or your individual responses, and cannot be traced back to you.
• To contact you about feedback you sent us, in the app.

Lawful basis. The survey and any analysis of your survey answers run on your consent. You can withdraw it any time (see Your choices), and withdrawing does not affect your account. The roster-save log and the server access log run on our legitimate interest in running the site and knowing whether people come back; you can object to either by asking through the contact below. If you are in the UK or EU you also have the right to complain to your data protection authority.

What we don't do

• No advertising, and no advertising or analytics trackers of any kind.
• We never sell, rent, or trade your data.
• No marketing emails: we don't have your email.
• The only cookie is the login session cookie. It is essential, it is not used for tracking, and it is cleared when you sign out.

Who else touches the data

• DigitalOcean hosts the server the data sits on.
• Riot Games' API: only if a future version lets you link a Riot account, and only to fetch stats you have asked us to show.

That is the entire list. There are no other processors or integrations.

Your choices

• Review and edit your survey answers any time from your profile, under Update your survey answers.
• Withdraw consent and delete your survey answers yourself, any time, from that same screen (the Withdraw consent and delete my answers link). This stops any further use of your answers and permanently removes every survey answer tied to your account straight away. Your account is unaffected.
• Skip the survey entirely: it never blocks the app.
• Delete your whole account: ask through the contact below. This is a one-person alpha with no automated account deletion yet, so we do it by hand: we will act within a month where we can and tell you if it needs longer. On deletion we remove your login, your rosters, your survey answers and your lines in the roster-save log. Some things can stay: statistics we have already grouped (which no longer single you out), feedback you have sent us (kept with your username so we can act on the bug or request — say so and we will remove that too), and messages you posted in a league chat, which stay in that league’s history attributed to your team name.
• Get a copy of your data: ask the same way.

How long we keep it

Account data, survey answers and your rosters are kept while your account is active, and removed when you delete your answers or your account on the timeline in Your choices. Roster-save log lines are kept while your account exists and are deleted with it. Server logs go after about 30 days (see Server logs). Backups roll off within a few weeks.

Children

This app is not aimed at children. If you tell us you are under 18, the server does not keep any survey answers for your account, turns analytics consent off, and deletes any answers already given.

Security

Passwords are hashed. Traffic is served over HTTPS. Backups are kept on the same provider. This is a small project without a dedicated security team; we keep the data we hold minimal on purpose, and we will tell affected users if we ever learn of a breach.

Changes

If this note changes in a way that matters, we will surface it in the app before it takes effect. The date below always reflects the current version.

Who runs this. Fantasy LoL is operated by one individual as a non-commercial project.
Contact: use the in-app Send feedback button. A dedicated privacy address that works without an account is being set up and will be published here before the project is opened to a wider audience.

Effective: 7 September 2026

Back to Fantasy LoL →