Privacy Policy

Contents 12

1 Who we are
2 Data we collect
3 What we do not do
4 Legal bases
5 Sharing
6 Retention
7 Your rights
8 Children
9 International transfers
10 Changes
11 Contact
12 Riot Games

1. Who we are

Trackimo (“we”, “us”) operates the website https://trackimo.lol (“Service”), a fan-made tool for League of Legends players to view ranks, match-related statistics, and related information. This policy explains what personal data we process and why.

2. Data we collect

2.1 Riot account (optional sign-in)

If you use “Sign in with Riot” (Riot Sign-On), Riot Games shares with us the data allowed by that login flow (for example, identifiers needed to link your Riot account to your Trackimo session). We use this to provide account features (such as groups and preferences). We do not sell this data.

Each time someone signs in with Riot, whatever they answer to analytics, we record the attempt: when it happened, whether it worked (a first sign-in, a returning one, or a failure), for a failure the reason and the step that failed (for example the sign-in was declined on Riot's page, or expired), whether it started from a group invitation, and your Trackimo account when it is known. We never record your password, Riot's sign-in codes or tokens, your IP address or your browser. While you are signed in, we also note when you last visited (at most every 15 minutes). We use this to see how many people sign up and come back, and to fix sign-ins that fail. Sign-in records are deleted after 90 days (see section 6).

2.2 Player pages (also if you never used Trackimo)

Trackimo shows a page for League of Legends players ranked on the EU West (EUW) server, in Solo/Duo or Flex, whether or not they ever used the site: their Riot ID, rank and LP, and their match history. It comes from Riot Games' official API, and we show it in our legitimate interest in running a free statistics site. You can object to it or ask us to delete it at any time, see section 7, Your rights. The details, which we give you as we did not get this data from you (Article 14 GDPR):

What is published: your Riot ID (name#tag), profile icon and summoner level; your rank, LP, wins and losses in each queue, and your place on the ladder; the LP of every ranked game since 24 September 2026; match summaries (champion, role, K/D/A, CS, result, the other players of the match) and statistics made from them. Your Riot ID can also appear in the matches of other players shown on Trackimo and in lists of players (near an apex cutoff, on the apex ladder, among the day's top climbers). Each game is shown with its date and time. The summary of when you play, by hour of the day and day of the week (the Habits tab), is shown only to you and to the members of your Trackimo groups.
Where it comes from: the Riot Games API (ranked standings, matches and Riot IDs) and Riot's public ranked ladder.
Why, and on what basis: to let players look up ranks, LP and games, and to publish statistics about the ladder, on the basis of our legitimate interest and that of the players who use Trackimo (Article 6(1)(f) GDPR). We weighed it against yours: the data is already shown in the game and on other trackers, nothing sensitive is published, we publish no summary of when you play by hour and weekday, we never link accounts together (no "alt" or "main" labels) and never show former Riot IDs.
Who receives it: anyone who visits the site, search engines included, and our infrastructure providers (section 5).
How long: full match details 120 days, and game summaries and the players of each match 13 months, except for the matches of the players who use Trackimo: those, with every player of the match (Riot ID at the time and full game statistics), are kept for as long as Trackimo runs; the record of your LP for as long as Trackimo runs. We review both every year. Statistics about the whole ladder are anonymous.
Your rights: you can ask us to stop showing and recording your data, or to delete it, see section 7.

2.3 Technical data

Like most websites, our servers and hosting provider may process technical information such as IP address, browser type, and request timestamps for security, debugging, and reliability. Session cookies may be used to keep you signed in when you use Riot Sign-On. The site's fonts are served by Trackimo itself, so loading a page sends your IP address to no font provider.

2.4 Product analytics and session replay (only with your consent)

If you accept analytics in the consent banner, we use PostHog, hosted in the European Union (PostHog Cloud EU), to understand how the Service is used and to fix what is confusing or broken. PostHog then stores a cookie and local storage entries with a random identifier, and receives:

the pages you visit, clicks and the actions you take (for example signing up, searching a player and whether the search found anyone, opening a profile tab, creating a group), with timestamps. Why a sign-in failed is sent as a reason code; what you type in the search never is;
errors the pages run into: the error message, where in our code it happened, and the page;
technical data: browser, device type, screen size, referrer, page performance, and an approximate location derived from your IP address. We shorten the address before it is sent (the last part of an IPv4 address, most of an IPv6 address, is removed), so PostHog never receives or stores your full IP address;
session recordings: a replay of what happens on the page (clicks, scrolling, page content, and the messages the page writes to the browser's console). What you type (your searches included) and invite links are masked, and invite codes are removed from every page address sent to PostHog;
if you sign in with Riot, your Riot PUUID, Riot ID (name#tag) and plan, so your visits are linked to your account.

If you decline, PostHog is not loaded and nothing is sent to it (visits are still counted without cookies, see 2.5). You can change your choice at any time below; withdrawing consent stops the collection and removes the identifier from your browser. Session recordings are kept for 30 days; analytics events are kept as long as they are useful to follow usage over time, and deleted on request (see section 7).

2.5 Audience measurement without cookies (every visitor)

To know how many people visit Trackimo and which pages they use, we count visits with Plausible Analytics, which we run ourselves (Plausible Community Edition, on a server we operate), and with Cloudflare Web Analytics, provided by Cloudflare, which delivers the site. Neither sets cookies or stores anything on your device, and neither follows you across websites or builds a profile of you, so they need no consent: they count every visitor, whatever you answer in the consent banner (which is about PostHog, see 2.4). We only see aggregate numbers about:

the pages viewed: Plausible gets them by kind of page, never with a Riot ID, a group, a game or an invite code (a profile is counted as /profile/:username/:tagLine, whoever it shows), and Cloudflare gets the page address without any identifier that would link it to the other pages you view; the referring website and campaign tags (such as utm_source), the time spent on a page and how far it was scrolled;
browser, operating system and device type, derived from your browser's user agent, and your country;
page load performance (Cloudflare);
how many visitors take a few steps, without any account, player, group or invitation details: clicking “Sign in with Riot”, signing in for the first time, creating a group, creating an invitation, opening one (and whether the link still works) and accepting it (and whether it happened right after signing in), and being told on your own profile that we found no ranked EUW game of yours;
how many visitors accept or decline the analytics banner (2.4), and whether they answered in the banner or on this page, so we know what share of visits PostHog sees;
how many times each player's profile was shown, per day: the profile shows the total and the last 30 days (“1,204 views”). When a profile is shown, your browser sends our server one small request. To count you once a day for each profile, the server mixes the profile, your IP address and your browser's user agent with a random value that it keeps in memory only and replaces every day, and remembers the result for that day, not the address. What is stored is the profile, the day and the number of views, never your IP address, your browser or who you are. The player's own visits, crawlers and hidden profiles are not counted.

Plausible never stores your IP address. It only uses it, together with your browser's user agent and a random value that is replaced every 24 hours (the previous one is deleted), to compute an anonymous daily identifier that counts a visitor once a day, and to look up your country; the address is then discarded. The same visitor cannot be recognised from one day to the next, nor across websites. Cloudflare Web Analytics does not use your IP address or user agent to identify visitors either.

3. What we do not do

We do not use advertising trackers or cross-site tracking.
Without your consent, apart from the record of your sign-ins and the time of your last visit kept with your account (2.1), we only count visits anonymously, without cookies (2.5): product analytics and session replay (2.4) only run if you accept.
We do not sell your personal data.

4. Legal bases (EEA/UK users)

Where the GDPR applies, we process data as necessary to perform our contract with you (providing the Service), based on our legitimate interests (security of the Service, keeping a record of sign-in attempts to see sign-ups and fix failed sign-ins and noting when signed-in players last visited to see whether they come back, see 2.1, counting visits without cookies to understand how it is used, see 2.5, and the public pages about players, see 2.2), or with your consent (product analytics and session replay, see 2.4; you can withdraw it at any time).

6. Retention

We keep data only as long as needed for the purposes above, unless a longer period is required by law; section 2.2 gives the periods of the game data shown on the public pages. You may request deletion of your account-related data where applicable; some aggregated or de-identified information may remain. Records of sign-in attempts (2.1) are deleted 90 days after the attempt, and when your account is deleted; the time of your last sign-in and last visit is kept with your account. Audience measurement (2.5) keeps only anonymous statistics, which cannot be traced back to you: the daily counts of a profile's views are kept 400 days and their total for as long as the page is shown, and both are deleted when a player's page is hidden or deleted at their request.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. You may also lodge a complaint with your local data protection authority.

To use them, whether or not you use Trackimo, email contact@trackimo.lol with your Riot ID (name#tag); we may ask you to confirm the account is yours, and we reply within 30 days. Your right to object: you can ask us to stop showing and recording your data (Article 21 GDPR). You can also ask to see your data, or to have it deleted (Article 17 GDPR); a deletion cannot be undone, as an LP history cannot be rebuilt. We also act on Riot's deletion requests.

8. Children

The Service is not directed at children under the age where parental consent is required in your country. If you believe we have collected such data, please contact us and we will delete it.

9. International transfers

Your data may be processed in the European Union and/or other countries where our providers operate. We use appropriate safeguards where required (such as standard contractual clauses).

10. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after changes means you accept the updated policy.

11. Contact

Questions about this Privacy Policy: contact@trackimo.lol

12. Riot Games

Trackimo is not endorsed by Riot Games and does not reflect the views or opinions of Riot Games or anyone officially involved in producing or managing Riot properties. Riot Games and all associated properties are trademarks or registered trademarks of Riot Games, Inc.