Privacy policy

Heimerdinger.lol is a free fan site run by one person in the European Union ("we"). We are the controller of the data below under the GDPR. Contact: [email protected].

• Visits. Cloudflare and our EU server see your IP address, browser and the page you request. We use them to serve pages, block abuse and rate-limit requests, and keep logs only as long as needed for that.
• Analytics. Umami, self-hosted in the EU, records pages, referrer, browser, device, approximate location, page speed and some actions such as search terms and filters. It sets no cookies and doesn't store your IP address.
• Ad blocker check. Once per page load, your browser tests whether a content blocker stops a test image and hides a test element on our own site. It sends us whether each test was blocked, whether Umami loaded and whether you use a touch screen, and Umami gets the same result as an event. We store only daily totals with no IP address or identifier, and nothing is stored on your device.
• Contact form. We receive your name, email, optional Discord username and message, and store a copy in a private Discord channel. Cloudflare Turnstile checks you're not a bot on that page. We delete messages after 12 months, or sooner if you ask.
• Site name contest. While the contest runs, you can send up to three name ideas with an accent color, your League server and an email address or Discord username. Only we see entries. We use your contact only to reach the winner, Cloudflare Turnstile checks you're not a bot, and we delete every entry 90 days after you send it, or sooner if you ask.
• Riot ID lookups. We send the Riot ID to Riot's API and cache the result for two minutes. We don't store it or link it to you.
• Ranked ladder. LP cutoff pages show the Riot ID, LP, wins and losses of Master+ players from Riot's API. We keep only current Riot IDs. Listed players can object by email.
• Streamers. The streamers page shows public channel information and whether a listed Twitch channel is live. Streamers can ask us to change or remove their entry.
• Twitch player. The streamers page plays a live stream through Twitch's embedded player as soon as it loads. Twitch then receives your IP address and browser details and may set its own cookies, under Twitch's privacy policy.

We rely on our legitimate interest in running, securing and measuring the site (GDPR Art. 6(1)(f)). We don't sell personal data.

We set only functional cookies: heimerdinger-session and XSRF-TOKEN (2 hours), appearance for your theme (1 year), and sign-in cookies for staff. Your browser's local storage remembers your recent searches and whether you closed or entered the site name contest. That never leaves your device.

Your data may reach Cloudflare, Discord, Riot Games, Google (YouTube thumbnails and videos), Twitch (the live player on the streamers page), Buy Me a Coffee (donations) and the directory sites whose badges appear in the footer. Some are in the United States and protect transfers under their own privacy policies.

You can ask to access, correct, delete, restrict or export your data, and object to its use, by emailing [email protected]. You can also complain to your national data protection authority.

We update the date at the top of this page when this policy changes.