Privacy Policy

1. The Short Version

TrackDIFF is a League of Legends statistics platform. We pull publicly available game data from the Riot Games API so you can track players, view leaderboards, and explore match history. We collect the minimum amount of personal data needed to run the site, we don't sell your data, and we respect your privacy rights under EU law (GDPR).

If you have any questions, reach out to us at contact@trackdiff.com. TrackDIFF is the data controller for any personal data processed through this site.

2. What Data We Collect

Account Data

If you create an account, we store your email address, display name, and profile picture. This is used to log you in and power features like custom leaderboards and collections. No account is required to browse the site.

League of Legends Data

The core of TrackDIFF is publicly available data from the Riot Games API: summoner names, ranked stats, match history, champion mastery, and live game info. This data is public — anyone can look it up through Riot's API. We aggregate and display it to make it easier to browse.

Analytics

We use analytics tools to understand how people use the site (which pages are popular, what features get used, etc.). This helps us improve TrackDIFF. Analytics data is anonymized and we don't sell it to anyone.

If you decline analytics cookies (or haven't made a choice yet), we still count visits — without cookies. Nothing is stored on your device, there is no session recording, and no profile is built. Our analytics provider (PostHog, EU hosting) groups requests using a one-way hash of your IP address and browser details combined with a secret that changes every day, so a visit can't be linked to you or to your visits on other days. If you accept analytics cookies, we use them to recognise returning visitors.

Separately, we count how many different people visit each day and each month from our own web server's request logs, whatever you chose above — nothing runs in your browser and nothing is stored on your device. Each page load is reduced to a one-way hash of your IP address and browser details combined with a secret that changes every calendar month, and only an aggregate counting structure built from those hashes is kept — your IP address and browser details are not stored and can't be recovered from it. Your visits within one month count you once; you can't be linked across months. The underlying request logs are deleted after 30 days.

Content You Create

Things you build on TrackDIFF — custom leaderboards, collections, tier lists, player personas — are stored so they work for you and can be shared with others.

3. Why We Process Your Data (Legal Basis)

Under GDPR, we need a legal reason to process personal data. Here are ours:

• Consent — For analytics and optional cookies. You can withdraw consent at any time.
• Contract — When you create an account, we process your data to provide the features you signed up for.
• Legitimate Interest — To keep the site running, fix bugs, and prevent abuse, and to count visits without cookies (see Analytics above).

4. Third-Party Services

We use third-party services for things like authentication, analytics, and search. Each service has its own privacy policy. Game data comes from the Riot Games API. We only share data with third parties when it's necessary to provide the Service.

5. Where Your Data Lives

Our servers are located in the European Union. All connections are encrypted via HTTPS. We keep access restricted and follow security best practices to protect your data.

6. How Long We Keep Data

• Account data — Kept while your account is active. Delete your account and it's gone.
• Game data — Kept indefinitely. It's public data used to build historical stats and trends.
• Analytics — Automatically deleted after 12 months.
• Your content — Kept until you delete it or ask us to.

7. Your Rights

Since we're EU-based, you have strong rights over your personal data under GDPR. You can:

• Access your data — ask us for a copy of what we have.
• Correct inaccurate data.
• Delete your personal data.
• Restrict how we process your data.
• Export your data in a portable format.
• Object to processing you disagree with.
• Withdraw consent at any time (this doesn't affect anything we already processed).

Email us at contact@trackdiff.com to exercise any of these rights. We'll get back to you within 30 days. You can also file a complaint with your local EU data protection authority if needed.

8. Cookies

We keep it simple:

• Essential cookies — Needed for login and core features. The site won't work properly without these.
• Analytics cookies — Help us understand how the site is used. You can decline these; we then count your visit without cookies instead (see Analytics in section 2).

You can manage cookies through your browser settings at any time.

9. Age Requirement

TrackDIFF is not intended for anyone under 16. We don't knowingly collect data from children. If you're a parent and believe your child has shared personal data with us, please contact us and we'll remove it.

10. Changes

If we make meaningful changes to this policy, we'll update the date at the top of this page. For significant changes, we may also post a notice on the site.

11. Contact

Questions, concerns, or data requests — we're happy to help:

• Email: contact@trackdiff.com
• Discord: discord.gg/gkuDHZcEpM