Privacy policy

Who is responsible

The controller of your data is Zak, who provides Drafter (the app and the drafter-app.pages.dev website). For anything about your data, write to cornagelover@gmail.com.

Summary

We don’t sell your data, there are no ads and the website uses no cookies.

The website

• It uses no cookies or analytics or advertising tools. It only stores in your browser (local storage) the language you pick, if you change it, and, if you sign in to “My account”, your session, so you aren’t asked for your password every time. Signing out deletes it.
• It is hosted by Cloudflare, which, like any web server, receives your IP address and browser technical data to serve the page and protect it from attacks. We don’t use those logs to identify you.
• To show the latest version, your browser asks GitHub for it, and the installer is downloaded from GitHub; GitHub receives your IP as with any download.
• The Discord button takes you to Discord, which processes your data under its own policy.

The app, without an account

The draft coach works without an account, and what it reads from your League client stays on your PC:

• It reads champion select and your games through the client’s local API (the same one Blitz or Porofessor use). In the app’s data folder it stores your settings, a copy of your last account, your games reduced to champions, result and your stats (without other players’ names), your notes and your recent searches.
• During champion select it looks up nothing about any player. From the loading screen it reads, from your client, the rank and recent games of the players in your game; that is neither stored nor sent anywhere.
• Outside your PC it only requests champion statistics from OP.GG, game data from Riot (Data Dragon and patch notes) and whether there is a new version from GitHub. None of those requests carry your name or account.
• Coach AI is optional: if you turn it on, the draft summary, your questions and, if you ask for it, the review of your games go to the AI you pick, with your own key and without player names. That provider processes them under its own terms. Keys are stored encrypted on your PC.
• In ARAM: Mayhem it reads the augment cards with Windows’ text recognition on the game screen; the image stays on your PC. You can turn it off in Settings.

Your Drafter account

An account is only needed to use the companion. When you create one we store:

• Sign-in data: your email and, if you sign in with Google, your name and profile picture. If you use a password, it is stored hashed; we never see it.
• Linked Riot accounts: their internal identifier (PUUID), Riot ID (name#tag) and region, read from your client when you link it. Each Riot account can only be linked to one Drafter account: that way free uses are counted per Riot account and can’t be multiplied with several emails.
• Companion usage: how many automatic orders it carries out each day and when, to apply your rank’s daily limit. So that the limit can’t be reset by deleting the account and creating another, each day’s uses are also counted per Riot account with only a hashed code of its identifier, without your email or Riot ID; that counter is deleted the next day.
• Your rank and beta features: your rank (User, Tester…) and the features enabled for you.
• Last access: when you last used your account (in the app or on the website), to know which accounts are still active.
• Admin changes: if we change anything about your account from the admin dashboard (your rank, your limit, a block, an unlinked Riot account or a beta feature), we record what, when, who and the reason, if any. It is deleted along with your account.
• Security logs: the IP address of requests to our server, only to limit abuse and for a short time.

Legal basis: performing the service you ask for when you create the account (GDPR art. 6(1)(b)) and our legitimate interest in preventing abuse of the usage limit (art. 6(1)(f)).

Telemetry (only if you agree)

If you have an account, the app asks you once whether you want to share usage data. Saying no (or not answering) changes nothing in the app. Only if you say yes does it send our server, with your account:

• Sessions: when you open the app and how long it stays open, how much of that time the companion is on screen and how many orders you give it.
• Games: for each game you play, what the app already sees on the end-of-game screen: your champion, whether you won, the queue, the mode, the length and its identifier (so it isn’t counted twice). Nothing about other players.
• The app version and your last access.

It never sends what you type, your chats or your notes. It helps us know which features are used and what to improve. While there is no connection it keeps it on your PC and sends it later; if you withdraw consent, sign out or sign in with another account, whatever was still waiting to be sent is deleted from your PC.

Legal basis: your consent (GDPR art. 6(1)(a)). We keep a record of when you gave or withdrew it, so we can prove it. You can withdraw it at any time in the app, in Settings → Privacy or in “My account”, and nothing more is sent from then on; what was already sent is deleted after 12 months or when you delete your account.

Who else processes your data

We use these providers, under contracts that require them to process data only to provide their service to us:

• Supabase: database and accounts (servers in the European Union).
• Cloudflare: website hosting.
• Google: only if you choose to sign in with your Google account.
• GitHub: app downloads and releases.

Some of them are US companies. When data leaves the European Economic Area it is protected by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

• Your account data, linked Riot accounts and rank: for as long as you have the account.
• Detailed companion usage and telemetry: 12 months; after that only aggregate figures that don’t identify you remain.
• Security logs: 30 days.
• When you delete your account we delete everything within 30 days at most (except what the law requires us to keep).

Your rights and how to delete your data

You can ask to access your data, correct it, delete it, take it with you (portability), restrict or object to its use, and withdraw your consent at any time.

• Delete your account and data: in “My account” (on the website or in the app) → “Delete my account and data”. Your account, linked Riot accounts, usage and telemetry are deleted, and the Riot account becomes free to be linked again.
• Data on your PC: uninstall the app from Windows Settings → Apps and delete the %APPDATA%\Coach de draft LoL folder.
• Any other request: write to cornagelover@gmail.com. We’ll answer within one month at most.

If you think we don’t handle your data properly, you can complain to your country’s data protection authority (in Spain, the Agencia Española de Protección de Datos (AEPD)).

Children

You must be at least 14 to create an account, or the minimum age your country’s law sets for giving consent if that is higher.

Security

All connections are encrypted (HTTPS). The server’s admin keys are never shipped in the app or installer, and each user can only read their own data (security rules in the database itself). Only people with the admin rank can use the admin dashboard: the database checks it on every request.

Changes to this policy

If we change anything important we’ll let you know in the app or by email before it applies. The date above shows the latest version.