Privacy policy

What Heimerdinger.lol collects when you use the site, how it uses that information and when it shares it.

Last updated

1.Who we are

Heimerdinger.lol is a free fan site run by one person in the European Union ("we"). We are the controller of the data below under the GDPR. Contact: [email protected].

2.What we collect

  • Visits. Cloudflare and our EU server see your IP address, browser and the page you request. We use them to serve pages, block abuse and rate-limit requests, and keep logs only as long as needed for that.
  • Analytics. Umami, self-hosted in the EU, records pages, referrer, browser, device, approximate location, page speed and some actions such as search terms and filters. It sets no cookies and doesn't store your IP address.
  • X pixel. Every page loads X's (Twitter's) conversion pixel, which sends X your IP address, browser details and the page you're on. It loads without asking first. A content blocker stops it. X uses this data under its privacy policy.
  • Contact form. We receive your name, email, optional Discord username and message, and store a copy in a private Discord channel. Cloudflare Turnstile checks you're not a bot on that page. We delete messages after 12 months, or sooner if you ask.
  • Riot ID lookups. We send the Riot ID to Riot's API and cache the result for two minutes. We don't store it or link it to you.
  • Ranked ladder. LP cutoff pages show the Riot ID, LP, wins and losses of Master+ players from Riot's API. We keep only current Riot IDs. Listed players can object by email.
  • Streamers. The streamers page shows public channel information. Streamers can ask us to change or remove their entry.

We rely on our legitimate interest in running, securing, measuring and promoting the site (GDPR Art. 6(1)(f)). We don't sell personal data.

3.Cookies

We set only functional cookies: heimerdinger-session and XSRF-TOKEN (2 hours), appearance for your theme (1 year), and sign-in cookies for staff. The X pixel may use X's own cookies.

4.Other services

Your data may reach Cloudflare, X, Discord, Riot Games, Google (YouTube thumbnails and videos), Buy Me a Coffee (donations) and the directory sites whose badges appear in the footer. Some are in the United States and protect transfers under their own privacy policies.

5.Your rights

You can ask to access, correct, delete, restrict or export your data, and object to its use, by emailing [email protected]. You can also complain to your national data protection authority.

6.Changes

We update the date at the top of this page when this policy changes.