Privacy Policy

Who We Are

Draft Coach is a League of Legends draft guidance website and desktop companion operated by the Draft Coach team. You can contact us about this policy or your data at privacy@draftcoach.gg.

Data We Collect

We collect only the data needed to operate, secure, and improve Draft Coach.

• Account data: username, email address, password hash, account timestamps, password reset state, and session records.
• Desktop app session data: if you choose "remember me," the desktop app stores your Draft Coach session token locally on your device until you log out, clear it, or it expires.
• Champion select data: the desktop app reads your local League Client champion-select state and sends Draft Coach the role, champion picks, bans, and queue context needed to calculate recommendations.
• Riot API stats data: our internal stats pipeline may process Riot-provided match IDs, PUUIDs, summoner IDs, champion selections, ranks, item events, skill events, match outcomes, and related gameplay data to produce aggregate champion statistics.
• Riot account connection data: if Riot Sign On or account linking is enabled and you connect your Riot account, we may receive Riot account identifiers such as PUUID, Riot ID, game name, tag line, region, account IDs where provided, OAuth scopes, and OAuth tokens needed to keep the connection working.
• Support data: messages, bug reports, and contact details you send to us.
• Technical data: IP address, user agent, device and browser information, request metadata, security logs, and session cookies.

The desktop app does not send us your Riot password, League Client lockfile password, or local Riot authentication token.

How We Use Data

• To create accounts, authenticate users, maintain sessions, and reset passwords.
• To calculate draft recommendations from current champion-select state.
• To publish aggregate champion, build, matchup, rune, spell, and skill-order statistics.
• To secure the service, prevent abuse, troubleshoot issues, and respond to support requests.
• To comply with Riot Games API policies, developer requirements, and applicable legal obligations.

Legal Bases

Where privacy laws such as the GDPR apply, we rely on the following legal bases: performance of a contract to provide Draft Coach, legitimate interests for security, abuse prevention, debugging, and product improvement, consent for optional account linking or optional communications, and legal obligations when we must keep or disclose limited records.

Cookies And Analytics

Draft Coach uses essential session cookies for browser login. We do not currently use advertising cookies or third-party behavioral analytics cookies. Some pages may load fonts, images, or static assets from third-party CDNs or asset providers, which may receive normal browser request information such as your IP address and user agent.

Sharing

We do not sell personal data. We may share data with:

• Hosting, database, object storage, CDN, email, logging, and security providers that help run Draft Coach.
• Riot Games when you use Riot APIs, Riot Sign On, or when Riot sends us account deletion identifiers that we must process.
• Professional advisers, authorities, or other parties when required by law, security, or legal process.

Retention

• Draft Coach account records are kept while your account is active, then deleted or de-identified after a valid deletion request unless we need limited records for security, legal compliance, disputes, or backup integrity.
• Browser and desktop sessions expire after about 1 day unless you choose "remember me," in which case they expire after about 30 days.
• Password reset tokens expire after about 30 minutes.
• Recommendation requests are used to generate recommendations. We do not intentionally store champion-select snapshots as user history.
• Most Riot match-processing tables are retained for 7 to 30 days depending on the table. The bounded Riot crawl frontier keyed by PUUID may be retained while needed to maintain aggregate stats coverage.
• Backups and infrastructure logs may persist for a limited rolling period before they expire or are overwritten.

Your Choices And Rights

You can log out to clear your browser session cookie, and you can clear the desktop app's saved session by logging out in the app. You may request access, correction, deletion, or account unlinking by emailing privacy@draftcoach.gg. If Riot Games sends us deletion identifiers such as account IDs or PUUIDs, we will process the relevant records as required by Riot policy and applicable law.

Security

We use reasonable technical and organizational measures to protect data, including password hashing, server-side session hashing, HTTPS in production, restricted infrastructure access, and short-lived reset tokens. No online service is perfectly secure, so please use a unique password and contact us if you believe your account or data has been exposed.

Children

Draft Coach is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child provided us personal data, contact us so we can review and delete it where appropriate.

International Transfers

Draft Coach may process data in countries other than your own through our hosting, infrastructure, and service providers. Where required, we use appropriate safeguards for those transfers.

Changes

We may update this policy as Draft Coach changes. If we make material changes, we will update the date above and provide additional notice when appropriate.