Privacy Policy

01Who is responsible

RIFTVANTA is individually operated from the United Kingdom. The individual operator is responsible for personal data processed by the website. The confirmed project details and contact addresses are listed below; the project name is not a substitute for the operator's legal identity.

RIFTVANTA is a non-commercial fan project. It is not operated, sponsored or endorsed by Riot Games (see section 15).

02What this policy covers

This policy applies to riftvanta.com in all languages (English, Türkçe, Deutsch, Español), including its pages for players, matches, leaderboards, champions, items, builds, patch notes, teams and professional players.

It covers two groups of people: visitors of the website, and League of Legends players whose public game data appears on it — for example because someone looked up their Riot ID, because they rank on a leaderboard or because they are a professional player.

03What we process and why

Live Riot-backed player lookups are currently disabled on the public website pending approval of a production API key. The Riot player-data processing described below applies when those features are enabled. Static Data Dragon content and the website's technical hosting are already in use.

Support and privacy emails

If you email support@riftvanta.com or privacy@riftvanta.com, the individual operator receives your sender address, any name you provide, the message and any attachments. We use them to answer support enquiries, deal with data requests and document our response. Email delivery and storage involve the email service providers used by you and the operator. We retain correspondence only as long as needed for the enquiry and applicable record-keeping obligations; it is not added to a mailing list or used for advertising.

Riot ID lookups and player profiles

When you search for a Riot ID (game name and tag, e.g. Name#TAG) and choose a region, our server sends the Riot ID to the Riot Games API to find the player. The Riot ID also becomes part of the page address (for example /en/summoner/euw/Name-TAG). To build the profile we retrieve and display:

• the Riot ID and the PUUID (Riot's permanent player identifier) of the account;
• summoner level and profile icon;
• ranked information: tier, division, LP, wins and losses;
• champion mastery;
• match history and match details: champions, items, runes, summoner spells, kills, deaths, assists, CS, damage, gold, vision, game mode, date and duration, and timeline events such as gold leads and item purchases;
• the Riot IDs and in-game statistics of the other participants of each match, because they are part of the match record.

We use this data only to show the statistics that were requested. We do not combine it with other sources, build profiles beyond what the page displays, or use it for advertising.

Leaderboards and the RIFTVANTA Role Index

Leaderboard pages show the current top players of each region from the Riot Games API: position, Riot ID, tier, LP, wins and losses.

For the role leaderboards (RIFTVANTA Role Index) we store, for the top 300 players of a region's Challenger and Grandmaster ladders, a compact record of their Ranked Solo/Duo games from the last 14 days: match ID, start time, duration and patch, and for each participant the PUUID, role, champion, win or loss, kills, deaths, assists, CS, gold, damage, vision score, kill participation and damage share. We also keep a snapshot of the ladder (PUUID, Riot ID, tier, LP, wins, losses and position) and, per player, when their match list was last checked. These records are used only to calculate the published role rankings and are deleted automatically once they fall outside the 14-day window.

Build statistics

Champion build pages are calculated from real ranked matches. Only aggregated counts per champion are stored (for example how often an item, rune page or skill order was played and won). Build statistics contain no Riot IDs, PUUIDs or other player identifiers.

Professional players and teams

Team and pro player pages show information published by the players, their teams or public esports sources: player handle, publicly known real name, team, role, coach and tournament participations, and — only where at least two independent public sources attribute it to the player — their Solo Queue Riot accounts, together with the source links and the date of our last check. Live statistics for these accounts come from the Riot Games API and are limited to Ranked Solo/Duo games.

Technical data, security and hosting

When you visit RIFTVANTA, your browser automatically sends technical data needed to deliver the website: IP address, date and time, the requested URL (which can contain a Riot ID or match ID you looked up), referrer, browser and device information (user agent) and an approximate location derived from the IP address.

• Our hosting provider Cloudflare processes this data to deliver and cache pages, to protect the site against attacks and abuse (for example DDoS protection, bot detection and rate limiting) and to produce operational logs. Our application logs (Cloudflare Workers Logs) record requests and errors, including the requested URL.
• Our server keeps your IP address only in its working memory to limit how often RIFTVANTA's data endpoints can be called, so that a single visitor cannot exhaust the shared Riot API quota. It is never written to a database and is discarded when the entry is cleaned up or the server instance restarts.
• Network Error Logging: if a connection to RIFTVANTA fails, your browser may send a short technical error report (such as the URL, error type and IP address) to Cloudflare. Successful page loads are not reported.

We use this data only to run, secure and troubleshoot the website — not to identify or track visitors.

Preferences stored on your device

If you switch the language, your choice is stored in a cookie. The search box remembers your last searches and your last selected region in your browser's local storage. This information stays on your device; the only one our server reads is the language cookie, to send you to your preferred language when you open riftvanta.com. See section 7.

What we do not do

• No user accounts, log-ins, newsletters, comments or contact forms.
• No advertising, advertising cookies or paid tiers.
• No analytics, tracking pixels, fingerprinting or session recording.
• No selling or sharing of personal data for advertising, and no automated decisions with legal or similarly significant effects on you.

04Legal bases

Under the UK GDPR and the EU GDPR we rely on the following legal bases:

Where we rely on legitimate interests, we have balanced them against your interests: the data comes from Riot's game API, is limited to what the pages need, is kept briefly or in aggregated form, and is never used for advertising or profiling. You can object at any time (section 11).

05Where the data comes from

• Riot Games API↗ — Account-V1, Summoner-V4, League-V4, Match-V5 and Champion-Mastery-V4 for player, ranking and match data.
• Data Dragon↗ — Riot's static game data and images for champions, items, runes and summoner spells (no personal data).
• Riot's static reference data for queues and maps (no personal data).
• Public esports sources — for example Liquipedia, Leaguepedia, Tracking the Pros, DeepLoL, lolpros.gg, OP.GG, gol.gg and esports news sites — for professional players and teams. Every entry links to its sources.

Official tournament match data is not used, because it requires a licensed esports data provider.

06Service providers and other recipients

• Email service providers — deliver and store support and privacy correspondence. The relevant mail providers process message content and associated delivery information under their service arrangements and privacy notices.
• Cloudflare, Inc. (USA) hosts RIFTVANTA (Cloudflare Workers, R2 storage, caching and content delivery) and provides security services and logs. Cloudflare acts as our processor under its Data Processing Addendum↗; see also Cloudflare's privacy policy↗.
• Riot Games, Inc. (USA) — when a player page is requested, our server sends the Riot ID or PUUID to the Riot Games API to obtain the data. Riot already holds this data and processes it as an independent controller under its own Privacy Notice↗.
• Riot Data Dragon — champion, item and rune images are loaded by your browser directly from Riot's servers (ddragon.leagueoflegends.com), so Riot receives your IP address and browser information for these image requests. Our referrer policy shares only the address riftvanta.com, not the page you are viewing.
• Public authorities — only if we are legally required to disclose data.

We do not sell personal data and we do not share it with advertisers or data brokers.

07Cookies and local storage

RIFTVANTA only uses storage that is strictly necessary for features you use. We do not use analytics or advertising cookies, which is why there is no cookie banner.

You can delete cookies and local storage at any time in your browser settings. RIFTVANTA keeps working; it simply forgets your language choice and recent searches.

08International transfers

Cloudflare operates a global network, so technical data may be processed outside the UK, the EU/EEA and Turkey, including in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework and its UK Extension, and its Data Processing Addendum includes the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Riot Games operates its API and Data Dragon servers from the USA and other regions under its own safeguards.

09How long we keep data

Cached data is held in our server's memory and in Cloudflare's cache and expires automatically after the periods above.

10Security

• All connections are encrypted with HTTPS, and HSTS is enabled.
• A strict Content Security Policy blocks third-party scripts; Riot's Data Dragon is the only external image source.
• The Riot API key is stored only as a server-side secret and is never sent to browsers.
• There are no user accounts or passwords that could leak, and stored datasets contain only the fields described in this policy.
• Rate limiting and Cloudflare's protection services guard against abuse.

No transmission or storage method is completely secure, but we review these measures regularly.

11Your rights

Depending on where you live, you have the following rights regarding your personal data:

• Access — to receive a copy of the personal data we hold about you (Art. 15 GDPR).
• Rectification — to have inaccurate data corrected (Art. 16).
• Erasure — to have your data deleted (Art. 17).
• Restriction — to limit how we use your data (Art. 18).
• Objection — to object at any time to processing based on legitimate interests (Art. 21).
• Portability — to receive data you provided in a machine-readable format, where applicable (Art. 20).
• Complaint — to lodge a complaint with a supervisory authority (Art. 77).

To exercise your rights, contact us using the details in section 1. Exercising your rights is free of charge. To protect players, we may ask you to confirm that you control the Riot account concerned before acting on a request about it. We reply within one month (30 days under the KVKK); this period can be extended where the law allows.

Supervisory authorities: in the UK the Information Commissioner's Office (ICO)↗; in the EU/EEA the data protection authority of the country where you live or work (list of authorities↗); in Turkey the Personal Data Protection Authority (KVKK)↗.

12Requests from players

Player pages are generated on request from Riot's live data, so we cannot stop the Riot Games API from returning a player's game data. On a verified request we will:

• delete the data about you that we store — Role Index records and ladder snapshots;
• correct or remove information about you on team and professional player pages, including listed Solo Queue accounts.

Cached API responses cannot be deleted individually, but they expire automatically within the periods in section 9 — at the latest after 7 days. How Riot itself shares your data is described in Riot's Privacy Notice↗.

13Children

RIFTVANTA is a general-audience statistics website and does not ask anyone for personal details. We do not knowingly collect personal data from children beyond the public game data described above. If you believe a child's data needs our attention, please contact us.

14Region-specific information

United Kingdom and European Union

As a website individually operated from the United Kingdom, RIFTVANTA is subject to applicable UK data protection requirements. EU GDPR obligations may also apply depending on the activity and its scope. This notice describes our processing but does not establish full legal compliance: the individual operator's legal identity and postal address remain unpublished. Sections 3 and 5 describe the categories and sources of any Riot player data.

Turkey (KVKK)

Where the Turkish Personal Data Protection Law No. 6698 (KVKK) applies, its transparency requirements, including identification of the controller under Article 10, must also be addressed. Personal data is processed on the basis of Article 5(2)(f) KVKK (legitimate interests) and, where a professional player has made information public themselves, Article 5(2)(d). Your rights under Article 11 KVKK — including the right to learn whether your data is processed, to request correction or deletion and to object — can be exercised using the contact details in section 1. Transfers abroad take place as described in section 8.

United States and other regions

We do not sell personal information or share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA), and we do not ask you to send sensitive personal information. Visitors from every region can exercise the rights described in section 11.

15Relationship with Riot Games

RIFTVANTA is not endorsed by Riot Games and does not reflect the views or opinions of Riot Games or anyone officially involved in producing or managing Riot Games properties. Riot Games and all associated properties are trademarks or registered trademarks of Riot Games, Inc.

Riot Games is not responsible for this website or this privacy policy. Riot's own processing of player data is governed by the Riot Games Privacy Notice↗.

16Changes to this policy

We update this policy whenever our data processing changes, for example when new features are added. The date at the top of the page shows the current version, and material changes are highlighted here.