Privacy Policy

Chample (chample.lol) is a free and non-commercial League of Legends and Teamfight Tactics statistics site. The controller of the personal data described here, under the EU General Data Protection Regulation (GDPR), is the individual who runs Chample, based in Slovenia ("we", "us").

Contact for anything about this policy or your data: contact@chample.lol.

• Your account: username, password (only as a salted scrypt hash), role, when the account was created and when it was last active, whether the operator marked it premium and on which day, whether you have seen the premium notice, and whether you show the Chample mark.
• Sign-in sessions: a random token in a cookie on your device. We keep only a one-way hash of it and its expiry.
• Linked Riot ID: the game name, tag, region and Riot player identifier you link.
• Profile banner: the champion skin you choose as the banner of your profile. Signed-in members who open your profile see it.
• Match data: match histories, ranks, league points and statistics from League of Legends and Teamfight Tactics, provided by Riot Games. This covers linked players, players looked up on Chample and the other players in those matches, and for Teamfight Tactics comp statistics, a sample of games from the Master and higher ladders on EUW and EUNE. This information is public inside the games.
• Esports data: schedules, results and game statistics of professional matches, with professional players' handles, roles, teams, photos and the solo queue Riot IDs that Leaguepedia or lolpros.gg list for them. We do not store their real names.
• Feedback: messages you send with the Feedback button, the page you sent them from, your username and the time.
• Emails you send us: your address and your message.
• Removal requests: when someone asks us to remove a player's data, the Riot ID and region in the request, its date and the Chample username, contact and message if given, so we can handle it. After a removal we keep the player's Riot player identifier on an exclusion list, so their games are never stored under their name again.
• Server logs: our server records requests (IP address, time, page and result) in short technical logs. Sign-in, registration and removal requests also use your IP address to limit repeated attempts; we keep only a one-way hash of it, for at most an hour.

The Chample desktop app is given by the operator to premium members only and is not published. In champion select it sends only champion ids, roles and the queue, never names or identifiers of other players, and these requests are not stored.

• To run Chample for you (accounts, sign-in, profiles, your banner, match history and statistics): performance of our agreement with you, Article 6(1)(b) GDPR.
• To show other members which Riot IDs belong to Chample members (the Chample mark, and whether the account is premium): our legitimate interest in letting members recognise each other, Article 6(1)(f) GDPR. You can turn the mark off on the Account page.
• To show statistics about other players and professional players from public game data, within Riot Games' developer policies: our legitimate interest, Article 6(1)(f) GDPR.
• To keep Chample secure (limiting sign-in attempts, finding abuse and errors in the logs): our legitimate interest, Article 6(1)(f) GDPR.
• To answer feedback and removal requests: our legitimate interest, and our legal obligations where a request uses your GDPR rights.
• Optional browser storage: your consent, Article 6(1)(a) GDPR, which you can withdraw at any time.

We do not sell personal data, show advertising, use analytics or tracking tools, or build marketing profiles.

• Your account, linked Riot ID, profile banner, premium status and mark setting: until you delete the account (the banner also until you change it).
• Sign-in sessions: 14 days, or until you sign out.
• League of Legends and Teamfight Tactics matches of a member's linked player: kept in full while they are a member, and for 7 more days after they unlink or delete their account.
• Other League of Legends matches: per-game statistics only, removed once the match is older than the two most recent game patches, or earlier when our sample of recent games is full. When a profile is looked up, the full record of its recent games is kept until the game is 7 days old. The rank we record for each player in a match is removed with the match.
• Other Teamfight Tactics matches: 30 days. The comp sample keeps final boards without names or identifiers for 14 days, and the ladder list used to pick it drops a player 3 days after they leave the ladder.
• Esports data: from January 1 of the previous year. A professional player's handle, photo and solo queue links are deleted once they are no longer on a tracked team and have no stored games.
• Feedback: while it is useful for the beta, or until you ask us to delete it.
• Emails: as long as we need them to answer you, or until you ask us to delete them.
• Removal requests and the exclusion list: as long as the exclusion applies.
• Server logs: a short time, normally a few days.

Deleting your account removes your account, linked Riot ID, banner and sessions. Your match history then follows the rules for non-members above. We delete any of your data sooner if you ask.

Strictly necessary, always on:

• chample_session: keeps you signed in for up to 14 days. Scripts cannot read it and it is sent only over secure connections.
• chample_consent: remembers whether you accepted or rejected optional storage, for 12 months.
• chample_app: set only inside the desktop app window, so the site draws the app's window frame. Never set in a browser.
• Settings you choose on purpose and files the pages need: the game data version, refresh timers, the automatic live game setting, the Hide results setting and, in session storage that is cleared when you close the tab, the pages you opened in that tab (for the back links) and the profile you just opened.

Optional, only after you accept: your recent searches and layout hints that keep a profile the same size while it loads (how many Playstyle chips it had and whether it showed Sessions).

If you reject, nothing optional is written and what was stored before is removed. You can change your choice at any time in Cookie settings, also at the bottom of the site. Browser storage stays on your device and is not sent to us.

• Other members: signed-in members can see profiles on Chample, with the linked Riot ID, banner and game statistics. When your Riot ID is linked, they also see a Chample mark, and whether your account is premium, on your profile and on your card in the live game board of a game they share with you, on either team. The mark is never shown for players in streamer mode. You can turn it off on the Account page.
• Riot Games: our server sends Riot IDs and Riot player identifiers to Riot Games to fetch game data. Riot's own privacy notice covers what Riot holds.
• Game asset services: your browser loads game data files and some images directly from Riot's Data Dragon (ddragon.leagueoflegends.com) and from CommunityDragon (communitydragon.org), which receive your IP address like any website you visit. Most images, including team logos and player photos from static.lolesports.com, reach you through our own server.
• Fonts: served from our own server. Your browser does not contact Google Fonts.
• Email: messages to contact@chample.lol pass through Cloudflare Email Routing, which forwards them to the operator's own mailbox.

We share personal data with no one else unless the law requires it.

Under the GDPR you can ask for access to your data, a copy in a portable format, correction, deletion, restriction, and you can object to uses based on our legitimate interest. You can delete your account yourself on the Account page; for anything else write to contact@chample.lol. We reply within one month.

You can also complain to a data protection authority. In Slovenia that is the Information Commissioner of the Republic of Slovenia (ip-rs.si); you can also go to the authority where you live.

Anyone who plays League of Legends or Teamfight Tactics can ask us to remove their game data from Chample and exclude it in future, also without an account. Use the Remove player data page or write to contact@chample.lol. Professional players can also ask us to remove the link between them and a solo queue account.

Passwords are hashed with scrypt, session tokens are stored only as hashes and all traffic uses HTTPS. No system is completely secure, so use a password you do not use anywhere else, and never your Riot password.

Accounts are for people aged 15 or older. Younger users need the consent of a parent or legal guardian. If you think a child uses Chample without it, contact us and we will remove the account.

We update this policy when Chample changes how it uses data. The date at the top shows the current version, and we point out significant changes on the site before they apply.