Privacy Policy

PeakedGG ("we", "us", or "our") operates the peaked.gg website and the PeakedGG Discord bot. This Privacy Policy explains what personal information we process, why we process it, how long we keep it, and the choices available to you.

We use a legal basis for each purpose: contract to provide accounts, requested features, and subscriptions; legitimate interests to secure and operate the Service and produce aggregated game statistics; consent for optional Riot access, non-essential cookies, product analytics, and personalized advertising; and legal obligations for payment, tax, and valid requests. You may withdraw consent at any time and object to processing based on legitimate interests by contacting us.

We collect the following categories of data when you use our platform:

• Discord account information — Your Discord user ID, username, avatar, and guild (server) memberships, obtained via Discord OAuth when you sign in.
• Riot Games account information — Your Riot PUUID, game name, tag line, and region, obtained when you link your Riot account.
• Match and game data — Match history, champion/agent statistics, ranked data, and performance metrics retrieved from the Riot Games API.
• Discord activity data — Per-member message, word, character, reaction, attachment-type, link, and voice activity counts, plus XP, levels, achievements, and economy transactions in servers using the bot. The bot may inspect message text transiently to calculate those counts and run configured commands, automations, XP, and safety checks. A configured community feature may repost a selected message inside Discord, but PeakedGG does not store Discord message bodies, attachment names, or URLs in its database, logs, analytics, or backups. Message reports retain only IDs, a Discord jump link, and the reporter's reason.
• Guild membership data — Your association with specific Discord servers, roles, and permissions relevant to bot features.

We use the data we collect to provide and improve PeakedGG's features:

• Player profiles — Display your linked Riot account stats, rank, and match history.
• Leaderboards — Rank you against other members in your Discord server based on XP and activity.
• Analytics — Generate champion meta statistics, tier lists, and aggregated game data.
• Achievements — Track and award achievements based on your activity and milestones.
• Economy — Manage server currency balances, shop purchases, and transaction history.
• Duo/Squad Finder — Match you with other players based on rank, role, and game preferences.

PeakedGG integrates with the following third-party services:

• Riot Games API — We retrieve game data (match history, ranked stats, champion data) from Riot's official API. Your data is subject to Riot Games' privacy policy.
• Discord OAuth — We use Discord for authentication. We only access the information you authorize (identity, guilds).
• Google AdSense — Planned advertising provider. Its script is disabled during the private beta and will not load until PeakedGG has prior consent, easy withdrawal, and adult-only personalization controls.

We never sell personal data. We do not rent or trade it, and advertising is not an exception.

We rely on the following providers to run the Service. Each one processes only the data it needs for the purpose listed:

• Riot Games — Match history, ranked data, and account lookups for the Riot accounts you link.
• Discord — Sign-in via OAuth, and the bot that runs inside the servers you use it in.
• Stripe — Payment processing, subscription management, and VAT calculation for paid plans. We never receive your card details.
• Google AdSense — Planned advertising provider; inactive during the private beta.
• Cloudflare R2 and MinIO — Object storage for raw match payloads and for files you upload. Our MinIO storage is self-hosted rather than operated by a third party.
• Microsoft Azure AI Content Safety — Automated checks on images you upload, so that unlawful or harmful media is caught before it is published.
• Hetzner — Dedicated servers in the European Union that run the Service and the PostgreSQL, Redis, and ClickHouse databases we operate ourselves.

During the private beta we use only cookies necessary for the platform to function:

• NextAuth session cookie — Maintains your authenticated session.
• NEXT_LOCALE — Stores your language preference (e.g., "en" or "fr").
• Advertising cookies — Disabled during the private beta. We will not load non-essential advertising or product-analytics cookies before a clear opt-in, and consent will be easy to withdraw.

We never sell personal data. During the private beta we do not currently load advertising scripts. Before ads are enabled, contextual advertising will be the default. Personalized advertising will require a clear opt-in and confirmation that the viewer is 18 or older; viewers whose age is unknown or who are minors will not receive personalized ads. Ads will never include adult content. Refusing or withdrawing advertising consent will remain as easy as accepting it and will not block the Service.

Different categories of data are kept for different lengths of time:

• Raw match payloads (JSON) — Kept in object storage and deleted roughly 30 days after the match has been normalized. A payload that has not been normalized yet is kept with no time limit, because it has not been processed. Deleting your account does not remove raw match payloads.
• Derived match statistics — The normalized facts we compute from matches are stored against your Riot PUUID and kept indefinitely, so that historical statistics, tier lists, and meta analysis stay accurate. Older data is moved to cheaper cold storage rather than deleted, and deleting your account does not remove it.
• Discord activity counts, including word and character totals, voice time, XP, and related server records are retained while the relevant account and server feature remain active. PeakedGG does not retain Discord message bodies, attachment names, or URLs outside Discord; historical report snapshots are cleared by a forward database migration.
• Account data is retained until you delete your account or unlink your accounts.

You can delete your account yourself, at any time, from your dashboard settings. Deletion is permanent and removes:

• Your PeakedGG account and profile, and the sign-in tokens attached to it.
• Your linked Riot accounts, your guild memberships, achievements, wallet balances and economy history, your personal match links, and your Duo/Squad Finder posts.
• Our records of your subscription, along with any cached copies of your data held in Redis.

Account deletion does not reach the following:

• Derived match statistics and raw match payloads, as described under Data Retention. These are keyed to your Riot PUUID rather than to your PeakedGG account.
• Warnings you issued as a moderator, and the moderation and audit log entries we keep to run the platform safely. Audit entries are anonymized on deletion: the reference to your user account is cleared.
• Your customer and payment records held by Stripe, which are kept for accounting and tax purposes.
• Data held by Discord about your Discord account, and our server-side application logs.

You have the following rights regarding your personal data:

• Access — Ask for a copy of the personal data we hold about you. There is no self-service export today, so this is handled manually by email.
• Rectification — Correct the profile details we store from your dashboard settings, or email us if something we hold about you is wrong.
• Erasure — Delete your account yourself at any time from your dashboard settings. The section above sets out exactly what this removes and what it does not.
• Portability — Ask for your personal data in a portable, machine-readable format. Like access requests, this is handled manually by email; the dashboard does not offer a download yet.
• Unlinking — Remove your linked Riot or Discord accounts at any time through the dashboard.

For anything that is not self-service, email [email protected] from the address linked to your account. We reply within one month of receiving your request, as required by Article 12 of the GDPR, and may ask you for information that confirms the request is yours.

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected].