Privacy policy

This is a courtesy translation. The German version is legally binding.

Last updated: 5 November 2026

1. Who is responsible?

Paul Kleinmann, Modern IT
Im Kappesacker 5, 56288 Bubach, Germany
Email: info@modernit365.de

A data protection officer is [not appointed, as not required by law / appointed: NAME, CONTACT].

2. What is this about?

LanePrio is a statistics and coaching service for League of Legends. For this we process two groups of data:

1. Game data from the official Riot Games API, including data of players who do not have an account with us (section 3).
2. Data of our visitors and account users (sections 4 to 8).

LanePrio is not a Riot Games service and is not endorsed or sponsored by Riot Games.

3. Information for players without an account (Art. 14 GDPR)

This information is for everyone who plays League of Legends, even if they have never visited LanePrio. We cannot notify players individually because we do not know their contact details; we therefore inform the public (Art. 14(5)(b) GDPR).

Which data?

• Riot ID (current player name with tagline), the encrypted player identifier PUUID and the region
• Match history: match ID, mode, patch, start time, duration, champion, role, items with time of purchase, runes, kills/deaths/assists, farm, gold, experience, vision, objectives
• In-game timeline: values per minute including position on the map, kill events
• Rank (tier, division, LP) with the time it was retrieved
• Champion mastery points
• whether a game is currently in progress (only when a briefing is requested)
• values derived from this, such as preferred champions, current form and key figures per role

We do not process previous player names, real names, contact details or chats.

Where from? Exclusively from the public programming interface of Riot Games (Riot Games API). There, the data is publicly available to registered third-party applications.

What for?

• Overall statistics on champions, builds, runes and matchups per rank group (without names)
• Profile pages that can be accessed via the Riot ID
• Preparing for a game (briefing): public profile data of the other players when a user requests their own ongoing game
• Checking whether our coaching tips work (comparison group, evaluated only in aggregate)

Rank queries and comparison group: We regularly query the ranks of ranked players in the EUW region (Emerald and above daily, all other ranks weekly). In addition, we will randomly draw around 30,000 players as a comparison group (not yet in use) and collect their ranked games for an internal analysis that is only evaluated in aggregate. The comparison group is not visible anywhere. You can object to this collection too at any time (section 11).

Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Our interest, and that of our users, is to help players improve and to present public game data in an understandable way. We also pursue an economic interest, as we intend to finance LanePrio in future through paid additional features. Our balancing of interests is available on request. [OR: link a summary]

Profiling: From your game data we automatically calculate values such as preferred champions, current form and key figures per role. This is profiling (Art. 4(4) GDPR). These values are visible on profile pages and in the briefing. They have no legal or similarly significant effect on you (section 12). You can object at any time (section 11).

What we do to protect you:

• In the briefing, we do not show players who are in streamer mode or whose name is hidden, and we do not try to identify them.
• We never show previous Riot IDs.
• There are no leaderboards and no overall score for players.
• Notifications are only available through your own verified account.
• On public profile pages of players without an account, we show only the date of past games, no time of day and nothing like "3 hours ago".
• We do not sell data. Recipients of your game data are: (1) all visitors to the website, insofar as we display profile pages and game details publicly; (2) users who request a briefing for their own ongoing game (public profile data of the other players); (3) Riot Games for our API requests; (4) our service providers under section 8.
• Fixed retention periods (section 9).

Objection and opt-out: You can object at any time. At laneprio.com/opt-out you confirm that the Riot ID belongs to you (briefly change your profile icon; sign in with Riot once available). We hide your profile immediately, delete your data without undue delay, usually within 72 hours, at the latest within one month, and add you to a block list so that we do not collect your data again. Details in section 11.

4. Visiting the website

Server logs: When you access the website, our server processes technically necessary data (IP address, time, page requested, browser identifier, referrer). Purpose: delivering the website, security, preventing abuse and rate limits (e.g. limiting searches and briefings per IP). Legal basis: Art. 6(1)(f) GDPR. Storage: [7] days, in the event of security incidents until resolved.

Content delivery and protection against attacks (planned, not yet in use): We will use [Cloudflare, Inc., USA] to deliver the website quickly and to protect it against attacks and automated access. IP address and request data are routed through Cloudflare's servers. Legal basis: Art. 6(1)(f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply. Data processing agreement: [CONCLUDED ON].

Local storage in your browser: If you save a Riot ID, save filters ("My view") or choose dark mode, we store this in your browser's local storage. This is strictly necessary for the function you requested (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). You can delete it in your browser at any time.

Game images: Images from League of Legends (e.g. champion, item, rune and profile icons) come from Riot Games' Data Dragon and from CommunityDragon. Your browser does not load them directly from there but through our own server, which fetches and caches them. As a result, your IP address is not transmitted to these providers.

Cookies: We only set cookies that are strictly necessary for the function you requested (signing in, protection against automated attacks). We currently do not set tracking or advertising cookies. [IF CLOUDFLARE PROXY IS USED: list cookie __cf_bm]

5. Audience measurement (Umami, if used)

If we measure usage, we do so with Umami, which we run ourselves on our server in the EU. Umami sets no cookies and does not store complete IP addresses. The Umami script reads your screen size, language and device type in your browser. Visits are counted using a value formed from part of your IP address and the browser identifier, which changes [daily]. Among other things, the page visited, referrer, browser, operating system, device type and country are recorded. The data does not leave our server. Purpose: improving the service. Legal basis: Art. 6(1)(f) GDPR.

6. Account (16 and older)

You can create an account from the age of 16. When registering, you confirm your age: if you are 18 or older, you confirm that you are of age; if you are 16 or 17, you also confirm that your parents or legal guardians agree to your use of the service. When registering, you also accept the Terms of Use (version of 5 November 2026). We store your age group, confirmations, timestamps and the version of the Terms of Use as evidence for as long as the account exists.

Data: email address, password (stored only as a hash) or sign-in via Riot (RSO), linked Riot ID and PUUID, settings (e.g. tracking on/off), your content (notes, flashcards, goals, your own builds, saved views), match reports, group memberships, assignment to test variants (which learning lever comes first).

Purpose: providing the account features (history, reports, weekly plan, progress, flashcards, groups, notifications).

Legal basis: contract of use (Art. 6(1)(b) GDPR). We cannot create an account without an email address. We base the assignment to test variants on our legitimate interest in finding out which learning aids work (Art. 6(1)(f) GDPR); you can object to it at any time in the settings. Voluntary extras such as a newsletter only with your consent (Art. 6(1)(a) GDPR).

Sign in with Riot (RSO): If you sign in with your Riot account, Riot Games confirms to us that the Riot ID belongs to you and provides your PUUID. We never see your Riot password. Only then do we unlock features that track your games (LP history per game, notification when a game starts, groups).

Verification by profile icon: Alternatively, you can confirm your Riot ID by briefly setting a specific profile icon. We check the icon via the Riot API.

Tracking: If tracking is switched on, we check for new games about every 10 minutes while you are active and your rank after a game ends; with push notifications, we check up to once per minute whether a game is in progress. You can switch tracking off at any time.

Session tips (optional): If you switch on break reminders, we analyse game sequences of your own account (e.g. several losses in a row). This analysis is visible only to you.

Groups: We only show data of group members if each member has agreed via Riot sign-in. You can leave at any time.

Deleting your account: at any time in the settings. We delete your account and personal content within [30] days; data from section 3 (public game data) is then subject to the retention periods stated in section 9, unless you also object.

Minimum age: An account is available from age 16. We do not show personalised advertising to minors.

7. Contact, opt-out, interest list

Contact form and email: We process your details (name optional, email, message) to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR. Deleted once the request is closed, at the latest after [12 MONTHS], unless there is a retention obligation.

Opt-out: To handle your objection, we process the Riot ID, identifier (PUUID), points in time and the type of verification, and for requests by email also your email address. Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 17 and 21 GDPR. Storage: block list and deletion log as in section 9; the email address until confirmation, at most [30] days.

Interest list / declaration of intent (pre-launch phase): If you sign up in advance, we store your email address and, if applicable, answers from the form in order to inform you about the launch. Legal basis: consent (Art. 6(1)(a) GDPR), confirmed by email (double opt-in). You can withdraw at any time via the link in every email. Deleted after withdrawal or [6 MONTHS] after launch.

Sending emails: For system emails (confirmations, password, opt-out confirmation) we use [Resend, Inc., USA / PROVIDER]. Legal basis: Art. 6(1)(b) or (f) GDPR. A data processing agreement and [DPF / standard contractual clauses] are in place.

8. Service providers and recipients

We do not sell data. Who receives game data is stated in section 3.

Processors (Art. 28 GDPR): The following service providers process data on our behalf:

Independent controllers (Riot Games, Paddle): These recipients process data under their own responsibility:

Error tracking: If an error occurs, we send technical information (time, error message, browser, operating system, truncated IP, for logged-in users an internal identifier) to [SERVICE] in order to fix errors. Legal basis: Art. 6(1)(f) GDPR. Storage: [30] days.

Payments (planned): For the subscription, Paddle becomes the contracting party and merchant. Paddle processes payment and billing data under its own responsibility; Paddle's privacy policy applies. We only receive the subscription status and the necessary contact details. This section will be completed when subscriptions launch.

AI (planned): An AI summary will only be offered once its use has been clarified with Riot Games. It will be labelled, available only to logged-in users and only for their own games. This section will be completed before launch.

Advertising: None at present. Before introducing any, we will update this policy and obtain your consent where required.

Riot Games: For requests, we send the Riot ID or PUUID to the Riot Games API. Riot Games processes these requests under its own responsibility.

Authorities: only where we are legally obliged to.

9. Retention periods

A season is the ranked period set by Riot Games, currently one calendar year [P].

Replacing the match ID after 12 months: 12 months after a game, we replace Riot Games' match ID in all data derived from it with an internal random key, including games in which account users took part. For players without an account, the PUUID and rank history are also removed; the game's raw data has been deleted by then. We do not keep any mapping from the old to the new identifier. To avoid counting a game twice, we keep only a secret one-way check value (hash) of the old match ID for 24 months. After that, the games can no longer be linked to a person without additional knowledge, and they continue to be included in overall statistics.

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability for data you have provided to us (Art. 20), and to withdraw any consent you have given with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation. For game data, we do not require a reason and honour every objection.

If we have reasonable doubts that the Riot ID belongs to you, we may request proof for requests concerning game data, so that no one can access or delete other people's data (Art. 12(6)).

Complaints: You can lodge a complaint with a data protection supervisory authority, e.g. the one responsible for us: the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (LfDI RLP), Hintere Bleiche 34, 55116 Mainz, Germany.

11. How the opt-out works

1. Open laneprio.com/opt-out and enter your Riot ID.
2. Confirm that the Riot ID belongs to you: set the displayed profile icon in your client (you can change it back afterwards) or, once available, sign in with Riot.
3. We hide your profile immediately, delete your data without undue delay, usually within 72 hours, at the latest within one month, and confirm this to you.
4. Your identifier is added to a block list. New games you take part in are cleaned of your data when we retrieve them.

The only things not deleted are: the block list entry (your identifier as an encrypted check value, no Riot ID in plain text), a deletion log without Riot ID as evidence ([3 YEARS]), your email address, if you wrote to us, until confirmation (at most [30] days), and backups until they are overwritten (at most [30] days).

We remove your identifier from games you took part in; these games may still be included in overall statistics (e.g. a champion's win rate). In doing so, we immediately replace the match ID of all games you took part in with an internal random key, for all ten participants. Your rows in these games receive a new random identifier that is not linked to the block list, and we delete the raw data of these games. After that, these games can no longer be linked to you without additional knowledge. New games you take part in are stored without raw data and without Riot Games' match ID. In other players' game details you appear as "hidden player".
No access to your Riot account? Write to info@modernit365.de and we will find another way.

12. Automated decisions

We do not make automated decisions with legal or similarly significant effects (Art. 22). Coaching tips, form and key figures are automatic analyses of game data without such effects.

13. Security

Encrypted transmission (TLS), access only for the operator, access-protected backups, regular updates. Our own servers are located in the EU (Austria). Service providers under section 8 only receive data to the extent described there.

14. Changes

We update this policy when features or the legal situation change. The version published here applies; we will announce significant changes to account users by email.