Privacy Policy

1. Introduction

This Privacy Policy describes how Streakly.gg ("Streakly", "we", "us", or "our") collects, uses, shares, and safeguards information when you use the Streakly.gg website and related services (collectively, the "Service").

Streakly.gg is a third-party statistics website for League of Legends. The Service is not endorsed by Riot Games and does not reflect the views or opinions of Riot Games or anyone officially involved in producing or managing League of Legends. League of Legends, Riot Games, and all associated properties are trademarks or registered trademarks of Riot Games, Inc.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide via Sign-In

If you sign in with Google or Discord (via Supabase Auth), we receive the following from your identity provider:

• Your email address
• Your provider account identifier (Google sub / Discord user id)
• Your display name and profile picture URL, if provided by the identity provider

We do not receive or store your password.

2.2 Account Activity

We store the following when you interact with authenticated features:

• Summoners you save to "Favorites"
• Account creation timestamp and last sign-in timestamp recorded by Supabase Auth

2.3 Public Game Data from the Riot Games API

When you view a summoner profile, we read public League of Legends data via the Riot Games API and cache it in our database. This data is not linked to your Streakly account unless you explicitly save it to Favorites. The public data we cache includes:

• Riot ID (game name and tag line) and PUUID (Riot's persistent player identifier)
• Region, summoner level, profile icon
• Recent match history (match IDs, played timestamps, queue, champion, KDA, win/loss, and standard match metadata returned by the Riot Match-V5 endpoint)
• Ranked tier, division, and LP for the current season
• Pro player flag (pro_name, pro_team, pro_league) — only for a manually curated list of approximately 100 publicly known professional esports players (see Section 9 below)

This information is already publicly available through Riot Games' developer API and the in-game client.

2.4 Cookies and Similar Technologies

We use the following cookies and local-storage entries:

• Authentication cookies set by Supabase Auth, used to keep you signed in. Session cookies expire when you sign out or after the period configured by Supabase.
• lws_last_region — remembers your last-selected League region (e.g. kr, na1). 365-day expiration. Set when you change the region selector.
• NEXT_LOCALE — remembers your preferred language. Set when you change the language selector.
• Local storage — used by our front-end framework for short-lived UI state (e.g. theme preference).

We do not use third-party advertising cookies, behavioral-tracking pixels, or cross-site tracking.

2.5 Server Logs

Our hosting provider (Vercel) automatically collects standard request logs, including IP address, user-agent string, request URL, response status, and timestamp. These logs are used for debugging, abuse prevention, and capacity planning, and are retained according to Vercel's standard policy.

3. How We Use Information

We use the information collected for the following purposes:

• To provide the Service (display match data, render streak visualizations).
• To authenticate you and persist your Favorites.
• To remember your language and region preferences.
• To investigate and prevent abuse, fraud, and Terms of Service violations.
• To monitor performance, troubleshoot errors, and improve the Service.
• To comply with legal obligations.

We do not sell your personal information. We do not use your information to train AI models, and we do not share it with data brokers.

4. How We Share Information

We share information with the following categories of recipients only as necessary to operate the Service:

• Supabase Inc. — Authentication and database hosting (Postgres). Servers in ap-northeast-1 (Tokyo).
• Vercel Inc. — Web hosting, edge compute, and request logs.
• Riot Games, Inc. — When the Service queries the Riot API on your behalf, your IP address and our API key are sent to Riot. Your Streakly account email and Favorites are not shared with Riot.
• Google LLC / Discord Inc. — When you sign in with Google or Discord, we exchange OAuth tokens with these providers as necessary to authenticate you. We receive only the data described in Section 2.1.
• X Corp. — The Service operates an automated X (formerly Twitter) account that posts notifications about pro player streaks (see Section 9). Only public match data of the curated pro player list is included in posts. No end-user account information is shared with X.

We may also disclose information when required by law, subpoena, or court order, or to protect the rights, property, or safety of Streakly, our users, or others.

5. International Data Transfers

The Service operates globally. Database hosting is located in Tokyo, Japan (ap-northeast-1). Web hosting (Vercel) and our identity providers (Google, Discord) operate globally and may process data in jurisdictions other than your own, including the United States. By using the Service, you consent to the transfer of your information to these jurisdictions, subject to applicable safeguards.

6. Data Retention

• Account data (email, OAuth identifier, Favorites): retained while your account is active. Deleted within 30 days of an account-deletion request.
• Cached public match data: retained indefinitely, since this data is non-personal in our context (we do not link it to your Streakly account except via Favorites). You may request deletion of cached data tied to a specific Riot ID under Section 7.
• Server logs (Vercel): retained according to Vercel's standard retention policy (typically up to 30 days).

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of the data we hold about you.
• Correction — request that we correct inaccurate data.
• Deletion — request that we delete your account and associated personal data.
• Portability — request a machine-readable copy of your data.
• Objection / Restriction — object to or restrict certain processing.
• Withdrawal of consent — withdraw consent at any time where we rely on consent as the legal basis.

Specific frameworks that may apply:

• EU/UK General Data Protection Regulation (GDPR) — for users in the European Economic Area or United Kingdom.
• California Consumer Privacy Act (CCPA / CPRA) — for California residents. Streakly does not sell or share personal information for cross-context behavioral advertising.
• Lei Geral de Proteção de Dados (LGPD) — for users in Brazil.
• Act on the Protection of Personal Information (APPI) — for users in Japan.

To exercise any of these rights, email privacy@streakly.gg. We may need to verify your identity before processing the request. We will respond within the period required by applicable law (typically 30 days).

8. Children's Privacy

The Service is not directed to children under the age of 13 (or under 16 in jurisdictions where 16 is the applicable minimum). We do not knowingly collect personal information from children below the applicable minimum age. The minimum age to play League of Legends and to create a Riot account is governed by Riot Games' own terms; we do not independently verify age for unauthenticated users who view public profiles.

If you believe a child has provided personal information through the Service, please contact us at privacy@streakly.gg and we will delete the data.

9. Pro Player Tagging

The Service tags a small, manually curated list of approximately 100 publicly known professional League of Legends players (e.g., active members of LCK, LPL, LEC, LCS, LJL rosters). The tag includes the player's stage name, team, and league. This information is sourced from public team rosters, official esports websites, and publicly disclosed announcements; it is not derived from non-public data.

The Service may post automated notifications about these public players' on-going win streaks to its X account. Posts contain only data already visible on the player's public profile.

If you are a tagged pro player and wish to be removed from the list, contact us at privacy@streakly.gg. We will remove your tag within 14 days.

10. Security

We use industry-standard security practices, including HTTPS for all traffic, Supabase Row-Level Security policies, secrets management on Vercel, and short-lived OAuth tokens. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

11. Third-Party Links

The Service may contain links to third-party websites, including Riot Games, esports team pages, and the Riot Developer Portal. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated via the Service. Continued use of the Service after the effective date of a revised Privacy Policy constitutes acceptance.

13. Contact Us

For privacy-related questions, requests, or complaints, please contact:

• Email: privacy@streakly.gg
• Operator: Streakly, Tokyo, Japan

If you are in the EU/EEA and we have not adequately addressed your concern, you may have the right to lodge a complaint with your local data protection authority.