Privacy & legal

TFT Arena is a non-commercial hobby project that shows Teamfight Tactics leaderboards and stats for the Italian community. This page explains what data it uses, why, and how you can ask for it to be removed.

Who handles the data

The data controller is the operator of TFT Arena. For any request, write to matteo@fabbianelli.it.

Players' game data

List, profile and match pages show public data obtained through the official Riot Games APIs: Riot ID, profile icon and level, rank and LP, ranked TFT match history (placements, traits, champions, items) and any game in progress. It is the same data visible in the game client and on other stats websites.

We use it on the basis of legitimate interest, to provide leaderboards and stats to the community. It is kept while the player is in a list or until removal is requested.

User accounts

If you sign up for the members' area, we store:

• name, email and password (stored as a hash), plus any passkeys;
• if you sign in with Twitch or Google: the ID, name and email of your account on that service (no access to your data or channel; you can unlink it from your profile);
• the Riot account you choose to verify and the Twitch or X links you add to your profile;
• the lists you create and the users you share them with.

This is used only to run the service. You can ask at any time for your account and related data to be deleted.

Visit statistics

Visits are counted by an internal system, with no third-party services and no cookies. For each visit we store the anonymised, hashed IP address, the page, the referring site, browser and device type, language and approximate country or city. Individual visits are deleted after at most 400 days; only daily totals are kept.

The server also keeps standard technical logs (IP address, requested page, time) for security and troubleshooting.

Cookies

TFT Arena only uses technical cookies required for the site to work, so no consent is needed:

• the session cookie and the form protection cookie (XSRF-TOKEN);
• locale, which remembers the language you picked.

No profiling or advertising cookies.

External services

• Riot Games API: the source of the game data;
• Twitch API: to know whether a player is live and, if you choose, to sign in with Twitch;
• Google: if you choose, to sign in with Google (and for tournament sheets, if you create them);
• Data Dragon (ddragon.leagueoflegends.com) and CommunityDragon (raw.communitydragon.org): the source of icon, champion, trait and item images. Our server downloads them and keeps a copy, so visitors never connect to these services;
• Google Cloud: the server the site runs on.

Fonts are hosted on our own server and are not loaded from Google Fonts.

Profile removal and other rights

You can ask to access, correct or delete your data, or object to its use. To remove a profile from the site, write to matteo@fabbianelli.it with the Riot ID (Name#TAG): we remove it together with its matches and stats. To prevent abuse we may ask you to prove the account is yours, for example by verifying it in the members' area.

The quickest way: sign up, verify your Riot account under My Riot accounts and use Request removal next to the account. Once approved, the profile disappears from the site and can no longer be added to lists or searched.

If you think your data is being handled incorrectly you can contact your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Riot Games

TFT Arena isn't endorsed by Riot Games and doesn't reflect the views or opinions of Riot Games or anyone officially involved in producing or managing Riot Games properties. Riot Games, and all associated properties are trademarks or registered trademarks of Riot Games, Inc.