Privacy Policy

BestBuilds.LOL is an independent, community-run analytics site for the video game League of Legends. We are not affiliated with, endorsed, sponsored, or specifically approved by Riot Games, Inc.

The data controller for personal data processed through this site is the operator of BestBuilds.LOL. You can contact us for any privacy-related matter at contact@bestbuilds.lol.

This policy applies to bestbuilds.lol and its language subpaths (/en, /ro, /fr, etc.). It does not apply to third-party websites we link to, to Riot Games’ services, or to ads served by our advertising partners, each of which has its own privacy policy.

Because our service is a public stats tracker, most of the data we handle is public game data that Riot Games makes available through its official public APIs. We do not receive your Riot account password, email, phone number, payment information or private messages.

Categories of data we process:

• Public summoner data (from Riot Games APIs): Riot ID, tag line, region/platform, PUUID, summoner level, rank, mastery, match history, champion picks, KDA, items, runes, spells, timestamps, teammates and opponents in each match.
• Search inputs you type into the site (Riot IDs, champion names, filters).
• Technical & log data automatically collected: IP address, user-agent, referrer URL, pages viewed, timestamps, approximate country/city (derived from IP), device type, screen size, browser language.
• Preferences stored locally in your browser (localStorage / cookies): selected language, UI settings, consent choices.
• Advertising and measurement data collected by Google AdSense and, where applicable, our Consent Management Platform: cookies, device identifiers, ad interactions, coarse location, fraud-prevention signals.
• Correspondence you send to us (e.g. by email), including your email address and message content.

We do not operate user accounts on this site, do not require you to sign up, and do not intentionally collect special-category data (racial or ethnic origin, health, religion, sexual orientation, biometric or genetic data).

• You — searches you make and messages you send.
• Your browser / device — technical and log data described above.
• Riot Games APIs — public game data about summoners and matches.
• Advertising partners (e.g. Google) — measurement signals related to ads shown on the site.

• Provide the service — displaying summoner profiles, match history, tier lists, meta stats and leaderboards. Legal basis: legitimate interests (Art. 6(1)(f) GDPR — running a free public analytics service based on publicly available game data).
• Aggregated statistics — computing win rates, pick rates, item builds, meta trends. Legal basis: legitimate interests; the output is non-identifying aggregate data.
• Security & abuse prevention — rate limiting, blocking scraping, protecting against DDoS/injection. Legal basis: legitimate interests and, where applicable, legal obligation (Art. 6(1)(c) GDPR).
• Non-personalised advertising — funding the free service. Legal basis: legitimate interests.
• Personalised advertising and non-essential analytics — only where you consent through the cookie / consent banner. Legal basis: consent (Art. 6(1)(a) GDPR and, for cookies, Art. 5(3) of the ePrivacy Directive). You may withdraw consent at any time using the “Manage consent” link in the footer.
• Handling correspondence and legal requests — responding to you and complying with law. Legal basis: legitimate interests and legal obligation.

Ads on this site are served by third-party vendors, including Google, using Google AdSense. Google and its ad-tech partners may use cookies and device identifiers to serve and measure ads (including based on your prior visits to this site and other sites), to cap frequency, to detect fraud and — where you consent — to personalise ads.

In the EEA, UK and Switzerland we display a Google-certified Consent Management Platform (Google Funding Choices) before enabling personalised advertising, in accordance with Google’s EU user consent policy and the IAB Transparency & Consent Framework. You can withdraw or change your choice at any time using the “Manage consent” link in the footer.

You can also control ads independently:

• Google Ads Settings — disable personalised ads on Google services and partner sites.
• youronlinechoices.eu (EU), aboutads.info (US), NAI opt-out.
• Read Google’s policy: How Google uses information from sites that use their services.

Cookies are small text files stored on your device. We also use similar technologies such as localStorage. We use three categories:

• Strictly necessary — required to make the site work (language preference, UI theme, load balancing, CSRF/security tokens, basic abuse prevention). These do not require consent.
• Analytics — lightweight measurement of visits and page popularity. In the EEA, UK and Switzerland these are set only after you consent.
• Advertising — Google AdSense and ad-tech partners, used to serve/measure ads and, with your consent, personalise them.

Manage your choices via the “Manage consent” link in the footer, or block/delete cookies in your browser settings. Blocking all cookies may break parts of the site.

Where required by law (e.g. California), we honour the Global Privacy Control (GPC) browser signal as an opt-out of the “sale” or “sharing” of personal information for cross-context behavioural advertising.

We share personal data only as necessary and only with:

• Hosting & infrastructure providers — Cloudflare (edge/CDN, DDoS protection), Lovable (hosting) and equivalent infrastructure partners.
• Database and backend providers — used to store cached game data and serve API endpoints.
• Advertising partner — Google (AdSense and Funding Choices CMP).
• Analytics providers — privacy-respecting analytics used to count visits.
• Riot Games — when we call Riot’s APIs, technical request metadata (e.g. our API key, request path, timestamps) is sent to Riot; user data is not sent to Riot beyond the identifiers you search for.
• Legal authorities — when we are legally required to disclose (court order, valid subpoena, lawful request).
• Successors — in the context of a merger, acquisition or sale of assets, subject to equivalent protections.

We do not sell personal data for money. In some jurisdictions (notably California), the use of advertising cookies may be classified as “sale” or “sharing” even without money changing hands — see §12 below for how to opt out.

Our processors may store or process data outside your country, including in the European Union, the United Kingdom and the United States. Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, adequacy decisions where they apply (e.g. the EU-US Data Privacy Framework), or equivalent mechanisms. A copy of the safeguards can be requested at contact@bestbuilds.lol.

We keep personal data only as long as necessary for the purposes described above, then delete or anonymise it. Indicative periods:

• Cached public game data: refreshed periodically; retained as long as it is useful for statistics.
• Aggregate, non-identifying statistics: may be retained indefinitely.
• Server access logs: typically up to 90 days, longer if needed for security investigations.
• Consent records: up to 24 months, to demonstrate compliance.
• Correspondence: as long as needed to handle the request and for a reasonable follow-up period.

Subject to conditions and exceptions in applicable law, you may:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure (“right to be forgotten”).
• Request restriction of processing.
• Object to processing based on legitimate interests, including profiling.
• Request data portability in a machine-readable format.
• Withdraw consent at any time (without affecting past lawful processing).
• Lodge a complaint with your local data protection authority. In Romania this is ANSPDCP (dataprotection.ro).

To exercise any right, email contact@bestbuilds.lol. We will respond within the time limits set by applicable law (typically one month under GDPR). We may need to verify your identity before acting.

Riot ID removal: if you would like your public Riot ID and match history removed from our cache and excluded from future indexing, contact us with proof of ownership of the account (for example, a screenshot from the in-game client that ties the message to the account).

If you are a California resident, you have the right to know what personal information we collect, use, disclose and “sell” or “share”; to delete personal information; to correct inaccurate personal information; to opt out of “sale” or “sharing” for cross-context behavioural advertising; to limit the use of sensitive personal information; and to not be discriminated against for exercising these rights.

The categories of personal information we collect are described in §3. Categories of sources are in §4. Business/commercial purposes are in §5. Categories of recipients are in §8. We do not knowingly sell or share the personal information of consumers under 16.

How to opt out of “sale/sharing”: use the “Manage consent” link in the footer to disable advertising cookies, and/or send a Global Privacy Control (GPC) signal from your browser. You can also email us at contact@bestbuilds.lol.

If you are located in Brazil, you have rights under Lei Geral de Proteção de Dados (LGPD), including confirmation of processing, access, correction, anonymisation, portability, deletion of unnecessary data, information about sharing, and revocation of consent. Contact us at contact@bestbuilds.lol to exercise these rights. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Aggregate rankings, tier lists and build recommendations are computed automatically from public game data, but they are informational only and do not affect your legal rights.

The site is not directed to children under 13 (or the equivalent minimum age in your country — 16 in some EU member states). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

We use HTTPS, access controls, key rotation and reasonable technical and organisational measures to protect data. No online service can guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected users, in accordance with applicable law.

The site may link to third-party websites (e.g. Riot Games, Data Dragon, partner sites). We are not responsible for their content or privacy practices. Please review their policies.

We may update this policy from time to time. Material changes will be signalled by updating the “Effective” date at the top and, where required by law, by a more prominent notice on the site. Continued use of the site after changes take effect means you accept the updated policy.

Privacy questions, requests or complaints: contact@bestbuilds.lol.