Privacy Policy

1. Data controller

• Name / Company: [NAME OR COMPANY]
• Tax ID: [NUMBER]
• Address: [FULL ADDRESS]
• Contact: contact form

Hereinafter referred to as "RelaxInGame", "we" or "the platform".

2. Data we collect

We only collect the data we need to run the service:

• Account data (only if you create a RelaxInGame account): email address and password (managed by Supabase Auth; we never see or store your password in plain text), username, display name and, if you choose to add them, last name, phone number, country, bio, avatar, banner and Discord / Twitch usernames.
• Riot Games data (only if you give permission with "Sign in with Riot"): your Riot ID (name#tag), your PUUID (Riot's player identifier), your Valorant match history and the statistics we calculate from it (rank, agents, maps, weapons, performance). We never receive your Riot password. See section 3.
• Payment data: if you subscribe to Premium, the payment is processed entirely by Mollie. We only keep your subscription status, plan and dates. We never see or store your card or bank details.
• Contact form: the name, email address and message you send us, so that we can reply.
• Account security: before sensitive changes (unlinking your Riot account or deleting your account) we email you a one-time code to confirm it's you, and we email you an alert after the change. Changing your password requires your current password, and we notify you by email when it changes. The code is generated and checked by Supabase; we never store it.
• Account activity log: if you have a RelaxInGame account, we keep a record of sign-ins (including failed attempts) and of changes to your account: the type of change, date and time, IP address, approximate country and device (browser and operating system). For private data (phone, bio, country, names…) we only record that it changed, never its value; we never record passwords, codes or payment details. You can see your recent activity in your account settings (with the IP shortened).
• Technical data: your IP address is used briefly to limit abuse (for example, how many profile updates can be requested in a few minutes) and appears in our server logs, which we use to detect errors and attacks.
• Advertising and analytics: only if you accept them in the cookie banner. See section 8.

3. Your Valorant profile and Riot permission

RelaxInGame only shows Valorant stats of players who have given us permission through Riot's official login, "Sign in with Riot". You don't need a RelaxInGame account to do this.

• What the permission allows: we can import your Valorant matches through the official Riot API, calculate your stats and show them on a public profile. Your profile is updated automatically every few minutes, and any visitor can ask for an update of your profile.
• Private profile: if you have a RelaxInGame account, you can make your profile private in your account settings at any time.
• Withdrawing your permission: you can withdraw it at any time on the Remove my profile page (you'll confirm with your Riot account) or, if you have a RelaxInGame account, by unlinking your Riot account in your account settings. It is as easy as giving it.
• What happens when you withdraw it: your profile and stats stop being shown, we stop updating your matches, your calculated stats are deleted and your Riot account is unlinked from any RelaxInGame account.
• What we keep: a record that you withdrew your permission (your PUUID and Riot ID), so that we don't import your data again. Matches are never deleted: a Valorant match also belongs to the other players who took part in it, so your rows inside matches stay as part of those match records. They are no longer shown as your profile, and no stats are calculated from them for you.

4. Purpose and legal basis

• Valorant profile and stats (consent): based on the permission you give with "Sign in with Riot". You can withdraw it at any time (see section 3); withdrawing it does not affect anything done before.
• Your RelaxInGame account (contract): creating and managing your account and its features.
• Premium subscription (contract): processing payments and keeping your subscription status.
• Replying to your messages (your request): answering what you send us through the contact form.
• Security and abuse prevention (legitimate interest): rate limits, server logs and the account activity log, to protect your account, detect unauthorised access and help you recover it.
• Advertising and analytics (consent): only if you accept them in the cookie banner.
• Legal obligations: keeping billing records for the periods required by law.

5. Data retention

• Valorant profile and stats: while your Riot permission is active. When you withdraw it, they are deleted as described in section 3.
• Account data: while your account is active. When you delete your account it is hidden right away and you are signed out everywhere; it is permanently deleted after 14 days. During those 14 days you can cancel the deletion from the email we send you or by signing in. After that, your account and personal data are erased, your Riot permission is withdrawn and your calculated stats are deleted (matches stay, as explained in section 3).
• Payment / billing data: for the period required by tax law (in Spain, generally 5 years).
• Contact messages: for as long as needed to handle your request.
• Account activity log: 12 months, then it is deleted automatically. It is also deleted when your account is permanently deleted.
• Abuse-prevention data: a few minutes. Server logs: for a short period, only to detect errors and attacks.

6. Service providers

We use the following providers, who process data only on our behalf to run the service:

• Supabase (database, authentication and file storage) — Privacy policy
• Riot Games (official login and Valorant data through the Riot API) — Privacy notice
• Mollie (Premium payments) — Privacy policy
• Brevo (sending emails: contact form replies, security alerts and account notices) — Privacy policy
• Google (AdSense advertising and Analytics, only with your consent) — Privacy policy
• Railway (server hosting) — Privacy policy

We do not sell your data.

7. Your rights

Under the GDPR (EU Regulation 2016/679) you have the right to:

• Access: know what data we hold about you.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your data. For your Valorant profile you can do it yourself on Remove my profile; for your account, with "Delete account" in your account settings (permanent after a 14-day grace period, see section 5).
• Withdraw consent: at any time, as easily as you gave it.
• Portability: receive your data in a structured, readable format.
• Objection and restriction: object to processing or ask us to restrict it.

If you believe we are not processing your data correctly, you can file a complaint with your data protection authority (in Spain, the AEPD).

8. Cookies and local storage

• Session cookie (necessary): keeps you logged in. It is deleted when you close the browser or log out.
• Local storage (necessary): your browser stores small preferences such as the selected game mode, recent searches or the profile update countdown. They never leave your device.
• Advertising and analytics (optional): Google AdSense and Google Analytics. They are off by default and only enabled if you accept them in the cookie banner. You can change your choice at any time. Premium subscribers don't see ads.

9. Security

We apply technical and organizational measures to protect your data:

• Encrypted connections (HTTPS/TLS).
• Passwords stored with secure hashing (managed by Supabase Auth).
• Database access restricted with row-level security policies.
• Secure session cookies and short-lived session tokens with automatic renewal.
• Riot account linking verified through Riot's official login.
• Input validation and rate limits to prevent abuse.

10. Contact

For any question about this policy or your data: