Arena Legacy

Privacy

A plain-language explanation of the information Arena Legacy uses for the tracker, accounts and Arena Queue.

Last updated: September 4, 2026

Your Arena Legacy account is separate from Riot

Signing in here does not sign you in to Riot. The tracker uses a Riot ID lookup and never asks for your Riot password.

Riot ID lookups and match history

When you look up a Riot ID, Arena Legacy processes the Riot ID, selected region, Riot PUUID, public profile information returned by Riot, and available completed Arena match data. Match data can include champions, placements, match timing, post-game combat statistics, augments and items. We do not ask for, receive or store your Riot password.

Arena Legacy accounts

If you create a community account, the account service processes your email address, password credential, authentication records, password-reset requests and session information. Our application database stores the account service's user identifier and your public Arena handle; it does not copy your password into Arena match records. Your Arena Legacy account is separate from your Riot account.

Arena Queue and community content

Arena Queue processes your handle and any party title, description, region, language, party-size and voice-chat preferences you submit. These details are shown to other Arena Queue users while the post is active.

A join-request message is intended for the party host. Party chat becomes available only to accepted members and the host. Party messages are access-controlled, but they are not end-to-end encrypted; authorized service operators may access them when reasonably necessary for security, support or moderation. Hosts can accept or decline requests and remove members from their party.

Technical, security and device information

The service and its hosting providers may process IP addresses, request timing, browser or device information, error details and similar network data to deliver the site, diagnose failures, prevent abuse and enforce request limits. Short-lived rate-limit counters use a network-derived identifier; stale counters are periodically removed.

Essential cookies keep signed-in sessions working. Cookiebot presents and records cookie choices. Your browser may also remember the last Riot profile opened on that device; the "Change user" control clears that shortcut. Vercel Web Analytics helps us understand site traffic. If Google AdSense is enabled, advertising cookies and requests are allowed only according to the consent choices required in your location. You can revisit those choices through the Cookiebot control.

How and why we use information

We use information to create and secure accounts, resolve Riot IDs, import and display post-game Arena history, operate Arena Queue and private party chat, maintain the community leaderboard, answer support and safety reports, prevent spam or abuse, enforce rate limits and improve reliability. Depending on the law that applies, this processing is necessary to provide the service you request, supports our legitimate interests in operating a safe and reliable service, or is based on your consent. You can withdraw cookie consent at any time without affecting processing that already occurred lawfully.

Storage, providers and international processing

Arena Legacy uses Riot Games APIs for match data, Neon for the PostgreSQL database and account service, Vercel for hosting and analytics, Cookiebot for consent management, and Google AdSense if advertising is enabled. Providers process data under their own terms and may operate in countries outside yours. We may also disclose information when required by law, to protect users or the service, or as part of a service transfer subject to appropriate safeguards. We do not sell your personal information.

Retention and automatic cleanup

Completed match and profile records remain in our PostgreSQL database while they are useful for the tracker, unless removal is requested or they are no longer needed. A completed lookup with no stored Arena matches becomes eligible for automatic deletion after 24 hours.

Arena Queue posts expire after the 30, 60, 90 or 120 minutes selected by the host. An expired post is hidden immediately and becomes eligible for deletion after a 24-hour grace period during the daily cleanup. Its membership, join requests and party messages are then deleted with it. Account and authentication records remain while the account is active or as needed for security and legal obligations. Provider logs and consent records follow the relevant provider's retention schedule.

Your choices and requests

Depending on your location, you may have rights to access, correct, export or delete your personal information, or to object to or restrict certain processing. To make a request concerning an Arena Legacy account, Riot ID history or community content, email vpfunited@proton.me with the account email or public handle, or the Riot ID and region concerned. We may ask for reasonable verification before acting so that another person cannot delete or obtain your data.

Community safety and reports

Do not place passwords, payment details or other sensitive information in a party post, join request or chat message. To report harassment, impersonation, unsafe content or another community issue, email vpfunited@proton.me with the relevant handle or party details. We will process the report and related account or content records only as reasonably necessary to investigate and respond.