Privacy Policy

What we store

When an account is looked up, we store: the identifier Riot assigns to that account, the Riot ID (name and tag), the region, the summoner level, the profile icon and the solo/duo ranked tier.

For each match we store which match it is and, for each of your deaths, where on the map it happened, at what minute of the match, and which player took you down.

That's all of it.

What we do NOT store

We don't keep the full match record: we look it up, take only your deaths, and discard the rest.

We don't keep information about the other nine players in each match. We don't keep your email, your password, or anything from your Riot account: the app never asks you to sign in and has no way to.

We use no analytics, no advertising and no third-party trackers.

Where the data comes from

Match and account information comes from the official Riot Games API. Profile icons come from Data Dragon, Riot's public asset service. Your browser never talks to Riot directly: everything goes through our server.

Everything we show is information Riot already publishes about that player's matches.

Cookies

We use two cookies, both needed for the site to work and neither for tracking: one remembers the language you chose, and the other the list of players you've looked up in this browser, which feeds the search suggestions. Only our server reads that list, so you're never shown what other people searched.

If you switch between light and dark theme, that preference stays in your browser and is never sent to us.

None of this is shared with anyone.

How long we keep data

We keep the data while the app is running. There's no automatic deletion window, because the point of a heatmap is to accumulate matches.

If Riot withdraws the app's access to its API, we delete all the game information we hold.

Your IP address is used only to limit how many searches each visitor can run. It's kept for just a few minutes and is never stored in the database.

How to ask us to delete your data

If you own an account and want its data deleted, this is the process:

• Email srterradev@gmail.com with the account's Riot ID (name#TAG) and region.
• We'll reply to that same email asking you to prove you own the account, with the steps to do so.
• Once ownership is confirmed, we delete the account and, with it, all of its matches and deaths, within 30 days at most. We keep no copy.
• We'll confirm by email once the deletion is done.

We ask for this proof so nobody can delete data for an account that isn't theirs. If ownership can't be confirmed, the request won't go ahead.

Riot's right to be forgotten

When someone exercises their right to be forgotten with Riot, Riot renames that account following a recognizable pattern. We periodically re-check the accounts we hold and, if we detect that pattern or that the account no longer exists, we delete it along with all its data, without anyone having to ask.

Providers and who we share data with

We don't sell or hand over data to anyone. To run the app we work with these providers, which handle information only on our behalf and don't use it for their own purposes:

• Riot Games: source of match and account information (Riot Games API) and of profile icons (Data Dragon).
• Vercel: hosts the site. It may log basic data about each visit, such as IP address and browser, to operate and protect the service.
• MongoDB Atlas: hosts the database where we keep what this policy describes.
• Cloudflare: manages the domain and the network traffic reaches the site through. It may process basic connection data, such as IP address, to deliver and protect it.

Current state of this instance

While Riot reviews our production key application, this instance runs without an API key and its database holds only accounts the operator loaded on purpose, including their own. It does not sync new accounts.