1. Who we are

ValoBoard (valoboard.app) is operated by Lewis James Ziemer, an individual based in the United Kingdom, who is the data controller for any personal data described here.

Privacy questions: valoboardsupport@valoboard.app

2. The short version

ValoBoard currently collects very little. There are no user accounts, no payments, and no analytics or advertising trackers. The player data shown on the site is computer-generated simulation, not real people.

The only personal data involved is standard hosting logs and — if you choose to send it — feedback.

3. What we collect

a) Server logs

Our hosting providers automatically record technical information when you visit: IP address, browser type, pages requested, and timestamps. This is standard for any website and is used to keep the service running and secure.

b) Settings stored in your own browser

Display settings and similar preferences are saved locally in your browser. They are not transmitted to us and we cannot see them. Clearing your browser data removes them.

Saving custom leaderboards is planned and not yet active — a board you build today lasts only until you leave the page.

c) Feedback submissions

If you submit feedback, we store:

• which pages you selected, and your overall satisfaction rating for each
• your answers to the structured questions — for example how severe a bug is, how often it happens, or whether a change would matter to you
• your written message, if you add one
• a timestamp
• basic technical details so we can reproduce problems: the general type of device (mobile, tablet or desktop), an approximate screen-size band, your browser and operating system family, premium status, account age in days, age-verification status and which version of the site you were using
• your VALORANT rank, matches played, and whether you are on a team
• your age in years, if you are signed in and have a date of birth saved to your account — the age is worked out in your browser and the date itself is never sent to us
• if you are signed in: whether you have a premium subscription, how long you have held an account, and whether a date of birth is on file
• your email address, only if you choose to provide one for a reply

We store this so we can understand which features work for which players — for example, whether newer or younger players find something confusing. We store your age in years, never your date of birth. Feedback is not accepted from anyone under 13.

The technical details are recorded only with feedback you choose to send, and are kept deliberately approximate — a screen-size band rather than your exact dimensions, a browser name rather than a version number. They are enough to reproduce a layout problem and not enough to identify your device. They are not linked to any advertising system and are not used to track you.

We may automatically label written messages with keywords — such as "slow" or "crash" — so we can group similar reports together. This is simple word matching done on our own server; no third party is involved and no automated decision is made about you.

4. What we do not collect

• Names, addresses, phone numbers or dates of birth
• Your Riot account name or PUUID
• Payment or card details — we do not currently take payments
• Riot account credentials — we never ask for these, and never will
• Analytics or advertising tracking data — we do not track you across websites or build a profile of you
• Device fingerprints — the technical details attached to feedback are deliberately kept too coarse to identify a device

5. Why we are allowed to hold it

Under UK GDPR we rely on legitimate interests — keeping the site running securely (logs) and improving it based on user feedback. Feedback is entirely voluntary; if you do not send any, we hold nothing about you beyond routine logs.

6. Who else sees it

We do not sell or share personal data. It is processed by the services that host the site:

• Vercel — hosts the website
• Railway — hosts our backend and database
• Cloudflare — manages our domain

These providers may process data outside the UK. We may also disclose information if legally required.

7. How long we keep it

Hosting logs are retained according to our providers' standard periods (typically a few weeks). Feedback submissions are kept for up to 12 months and then deleted automatically.

8. Your rights

Under UK GDPR you may request a copy of any personal data we hold about you, ask us to correct or delete it, or object to our use of it. Email valoboardsupport@valoboard.app and we will respond within one month.

In practice we usually hold nothing that identifies you unless you have sent feedback with your email address. If you are unhappy with how we handle a request, you can complain to the Information Commissioner's Office at ico.org.uk.

9. Children

ValoBoard is intended for VALORANT players, who must meet Riot Games' minimum age requirements for their region.

We do not knowingly collect any personal information from children under 13. Where we know your age — because you are signed in and have a date of birth on your account — our feedback form refuses submissions from anyone below that age. We do not ask anonymous visitors to state an age, because an unverified answer would prove nothing; instead we rely on this policy and our Terms of Service. This reflects the minimum age under UK data protection law and the United States Children's Online Privacy Protection Act (COPPA).

Some countries set a higher age for consent to online services — in much of the European Union it is 16. Where that applies, a parent or guardian should review this policy with you.

If you believe a child has sent us personal information, contact us and we will delete it promptly.

10. International visitors

ValoBoard is operated from the United Kingdom and is available worldwide. Wherever you are, we apply the same standard described in this policy — we collect very little, and we do not sell data to anyone.

Because our hosting providers operate globally, information may be processed in countries outside your own, including the United States. Where UK or EU data is transferred internationally, our providers rely on recognised safeguards such as standard contractual clauses.

If you are in the European Union or European Economic Area, the UK GDPR rights described in section 8 apply to you equivalently under the EU GDPR.

If you are in California, you may request to know what personal information we hold about you, ask us to delete it, and are entitled not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law. Use the same contact address to make a request.

Anywhere else — contact us and we will honour the same access and deletion rights regardless of whether local law requires it.

11. What is coming

We are planning features that will change what we collect. When they launch, this policy will be updated before they go live:

• Riot Sign-On — you would sign in with your Riot account and choose whether your stats appear publicly
• Advertising — will introduce third-party cookies and a consent banner
• Discord linking — you would be able to connect a Discord account so a recruitment listing can show a verified handle instead of one typed by hand. We would store your Discord user ID and handle and nothing else, never your email or your servers, and you would be able to unlink at any time
• Payments — would be handled by a payment provider; we would not store card details ourselves

12. Changes

We will update this policy as the site develops, and the "last updated" date above will change.