Privacy policy

The controller of the data processed by TrueRoaster is «legal entity», tax ID «tax ID», registered at «postal address».

Contact details: «contact email». «Data protection officer, if one is appointed».

You can write to that address about anything related to this policy or to exercising your rights.

Account. You sign in with Discord, so TrueRoaster never creates or stores passwords. From that sign-in we keep your Discord account identifier and the email attached to it, which is what lets us recognise you when you come back.

Player profile. The Riot ID you claim, your main role, rank, bio, languages, time zone, available days, your Discord tag and whether you are open to teams.

Data obtained from Riot Games. From your Riot ID we obtain the internal identifier Riot assigns to that account (the puuid) and sync match statistics: rank and LP, win rate, KDA, CS per minute, vision score, damage per minute, champions played, mastery, match history and rank progression. We also store when the last sync ran and, if it failed, the error it returned.

Riot ID verification. The summoner icon we ask you to wear, its expiry, when it was last checked and whether the verification ever completed.

Team profile. Name, tag, region, competitive tier, description, Discord link, founding year, roster and published vacancies.

A team's training schedule. The days, the time window and the time zone a team declares for scrims. This is private data: it never appears on the team's public page or in the listings, and is used only to work out how well a candidate's playing hours match.

Platform activity. The applications you send or receive and their status, a record of which teams have viewed your profile — one entry per team per day —, the notifications shown to you and whether you have turned notifications off.

Compatibility scores. The result of the calculation described under “Automated candidate evaluation”, stored together with its breakdown, the algorithm version and the date it was computed.

Billing. If a paid plan is arranged, we store the plan, the billing period, the agreed amount and the history of plan changes and charges. TrueRoaster does not process payments in-app: we never ask for or store card details.

To build your profile and show it with statistics that can be checked, instead of self-reported numbers nobody can verify.

To handle applications: so a team can evaluate whoever applies, and so you know where yours stands.

To compute the compatibility score and the candidate report explained below.

To notify you in-app about what affects you: an application received, accepted or rejected, or a visit to your profile.

To administer the plans in force and keep the billing history.

To keep the service secure and to settle who legitimately owns a Riot ID claimed by more than one person.

We do not build advertising profiles, we do not sell data to third parties, and we do not use your data to train artificial intelligence models.

Performance of a contract: creating your profile, showing it, handling applications and computing the compatibility score is exactly the service you ask for when you register.

Consent: appearing in the public listings is optional, and you can withdraw it at any time from your dashboard settings. Withdrawing it does not affect the lawfulness of processing carried out beforehand.

Legitimate interest: keeping the platform secure and stopping anyone from claiming a Riot Games account that is not theirs.

Legal obligation: retaining billing records for as long as the applicable accounting and tax rules require.

The statistics come from the official Riot Games API, queried using the Riot ID you declare. We only reach information Riot exposes about an account; we have no access to your password and we never sign in to your Riot account.

Some of that data does not come from you but from Riot Games. This section, together with “What we store”, is the information on the source of the data that the General Data Protection Regulation requires.

We keep a temporary copy of Riot's responses so we don't ask the same question over and over. Rank and match-list responses expire after ten minutes; the detail of a match already played, which no longer changes, after thirty days.

A Riot ID typed into a form is a claim, not proof. To verify it we ask you to wear a specific summoner icon for a few minutes and check it against the API. Until that happens, your profile is shown marked as unverified.

If several people claim the same Riot ID and one of them verifies it, the remaining claims lapse: those profiles stop syncing and stop appearing in the listings, and their owner can correct the Riot ID from their settings.

TrueRoaster is not affiliated with Riot Games.

When you apply to a vacancy, TrueRoaster automatically computes a compatibility score from 0 to 100 between your profile and that vacancy, and builds a candidate report from your synced statistics. This is automated profiling, which is why we explain it in detail.

The score starts at 100 and is split across five dimensions: rank against the vacancy's minimum (30 points), fit to the role being recruited (25), depth of champion pool (20), consistency against players of your own rank and role (15) and overlap with the team's training hours (10). An inactivity reduction is applied to that total, and the score is capped at 40 if you are three or more divisions below the minimum rank required.

The calculation runs on your actual match history, not on what you typed into a form: the role assessed is the one you play, not the one you declare.

Where it is we who lack data — because there are not enough comparable players, because the team has not declared its schedule, or because the vacancy sets no minimum rank — that dimension is excluded and the score is rescaled over the remaining ones, rather than charging you for a gap of ours. Where it is you who lacks data, the dimension scores zero. Below fifteen ranked games the four history-derived dimensions score zero and the report says so explicitly.

The score makes no decisions. It is an aid for ranking applications: no rejection is automatic, and the decision always rests with a person on the team. Nor does it produce legal effects or similarly significantly affect anyone within the meaning of Article 22 of the General Data Protection Regulation.

The breakdown is always shown next to the score, dimension by dimension, with the points awarded, the maximum available and the reason for each — precisely so that it can be argued with. The figures given above are those of the calculation version currently in force, which is recalibrated from time to time; the breakdown accompanying each score is at all times the authoritative, up-to-date statement of how it was arrived at.

A stored score is not recomputed every time somebody looks at it: it is refreshed when a team opens your report and the previous one is more than seven days old, or when the algorithm version changes.

Your public profile — Riot ID, role, rank, synced statistics, bio and availability — is visible to any visitor. Your email address is never published.

If you keep the option to appear in the listings switched on, your profile is also an indexable page: we include it in the sitemap we hand to search engines and it may show up in their results. Switching it off removes you from the listings and from the sitemap, and the page then asks search engines not to index it; removing whatever was already indexed is up to each search engine.

Teams you apply to also see the candidate report and the compatibility score built from those same statistics.

A team's training schedule is shown to nobody outside that team — not even to the candidates whose schedule overlap is computed from it.

Players can see which teams have viewed their profile. The team's name is only revealed to those on the corresponding plan; otherwise the visit is shown without identifying the team.

The providers that keep the service running process data on our behalf: Supabase (database and authentication), Vercel (hosting and compute), Discord (sign-in) and Riot Games (source of the statistics).

TrueRoaster administrative staff can look at profiles and plans in force in order to run the service and provide support.

We may disclose data to courts, law enforcement or public authorities where we are under a legal obligation to do so.

We do not sell or hand over your data to third parties for commercial purposes.

Some of the providers in the previous section are companies established outside the European Economic Area, mainly in the United States, so their involvement may entail an international transfer of data.

The infrastructure is configured to stay inside the European Union wherever the provider allows it: the service's functions run in the Frankfurt region and the database is hosted in «database region».

Where a transfer does take place, it relies on whichever mechanism applies to each provider: an adequacy decision — including the EU-US Data Privacy Framework for certified providers — or standard contractual clauses approved by the European Commission, with any supplementary measures required: «mechanism applicable to each provider».

You can request a copy of those safeguards by writing to «contact email».

Your profile data and synced statistics are kept for as long as the account stays open.

Statistics are refreshed at most once every twenty-four hours, and each sync replaces the previous one: we do not accumulate a copy per query.

The temporary copy of Riot's responses deletes itself on expiry, on the schedule described in the previous section.

Applications, notifications, the record of visits to your profile and the compatibility scores are kept while the account stays open and are deleted with it. A score also disappears if the application it belongs to is withdrawn.

Billing history is retained for the applicable legal period even if you delete your account, as explained below.

You can cut any of these periods short by deleting the account sooner.

All traffic travels encrypted. Access to the database is restricted to the service itself and to the people who administer the platform.

We store no passwords — sign-in is delegated to Discord — and no card details, because payments are not processed in-app. Those are two categories of data we cannot lose because we do not hold them.

In the event of a personal data breach we will notify the Spanish Data Protection Agency within the legally prescribed period, and will tell you directly where the breach poses a high risk to your rights.

You can delete your account yourself, from the Account section of your dashboard. We ask you to type your Riot ID — or your team tag — to confirm, because the action cannot be undone.

Deleting it removes your profile, the synced statistics, your applications and their scores, the record of visits to your profile, your notifications and the sign-in account itself: we keep neither your email nor your Discord identifier.

What survives is the billing history — subscriptions, charges and plan changes — with a label identifying who it belonged to. This is not an exception we grant ourselves: accounting and tax law require those records to be kept, and the right to erasure does not reach what the law obliges us to retain. It contains no card details, because we never held any.

In a team with several members, it is the person who created it who can delete it. When the team goes, the other members keep their accounts and land back on team registration.

Deleting your TrueRoaster profile does not delete your Discord account or your Riot Games account, which are not ours.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to «contact email». We may ask you to prove your identity if we cannot otherwise establish it.

Most of them need no request at all: from your dashboard settings you can correct your profile, change your Riot ID, remove yourself from the listings, turn notifications off and delete the whole account, at any time and without asking us.

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

We will respond within one month of your request, extendable by a further two months if the request is particularly complex, in which case we will tell you.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

TrueRoaster uses no advertising cookies, no profiling cookies and no third-party analytics tools.

The only cookies we set are technical ones: the cookie Supabase issues to keep you signed in, which expires when you sign out or when the session lapses, and the one that remembers the language you picked.

Both are strictly necessary to provide a service you asked for yourself, so they fall under the exemption in Article 22.2 of the Spanish Information Society Services Act. That is why you will not see a cookie banner: there would be nothing to consent to.

Discord and Riot Games set their own cookies on their own pages, under their own policies, over which we have no control.

The service is not directed at anyone under «minimum age», and by registering you state that you are at least that old.

On top of that, using League of Legends and Discord is subject to the minimum age set by their own terms.

If we find an account below that age, we will delete it. If you believe a minor has registered, write to «contact email» and we will look into it.

If we change this policy we will update the date in the header, and when a change materially affects how we process your data we will tell you in-app.

We recommend checking back from time to time: the version published on this page is always the one in force.

For any question about this policy or about your data, write to «contact email».