Arena Legacy

Privacy

A plain-language explanation of the information Arena Legacy uses for the tracker, accounts and Arena Queue.

Last updated: September 22, 2026

Who controls your information

Techers Vlad Constantin, Romania, is the Arena Legacy service operator and data controller. Contact details are available in the Legal Notice.

Contact vpfunited@proton.me for privacy requests or questions.

Your Arena Legacy account is separate from Riot

Signing in here does not sign you in to Riot. The tracker uses a Riot ID lookup and never asks for your Riot password.

Riot ID lookups and match history

When you look up a Riot ID, Arena Legacy processes the Riot ID, selected region, Riot PUUID, public profile information returned by Riot, and available completed Arena match data. Match data can include champions, placements, match timing, post-game combat statistics, augments and items. We do not ask for, receive or store your Riot password.

Arena Legacy accounts

If you create a community account, the account service processes your email address, password credential, authentication records, password-reset requests and session information. Our application database stores the account service's user identifier and your public Arena handle; it does not copy your password into Arena match records. Your Arena Legacy account is separate from your Riot account.

Arena Queue and community content

Arena Queue processes your handle and any party title, description, region, language, party-size and voice-chat preferences you submit. These details are shown to other Arena Queue users while the post is active.

A join-request message is intended for the party host. Party chat becomes available only to accepted members and the host. Party messages are access-controlled, but they are not end-to-end encrypted; authorized service operators may access them when reasonably necessary for security, support or moderation. Hosts can accept or decline requests and remove members from their party.

Technical, security and device information

The service and its hosting providers may process IP addresses, request timing, browser or device information, error details and similar network data to deliver the site, diagnose failures, prevent abuse and enforce request limits. Short-lived rate-limit counters use a network-derived identifier; stale counters are periodically removed.

Essential cookies keep signed-in sessions working. Your browser may also remember the last Riot profile opened on that device; the "Change user" control clears that shortcut. Vercel Web Analytics helps us understand site traffic.

Advertising is paused. Cookiebot presents and records cookie choices; you can change them through its cookie settings control.

Windows desktop public beta

The Windows application opens the hosted Arena Legacy service in a dedicated Microsoft Edge WebView2 profile. Cookies, local storage, the remembered Riot profile and account sessions may therefore remain on that Windows device until you sign out, clear them or uninstall the app and remove its local application data.

The application stores local window preferences and basic recovery state needed to reopen the service. The unsigned public beta does not install updates automatically, does not contain a Riot API key and does not add separate advertising or analytics tracking beyond the requests described for the hosted service. Installer downloads are delivered from public Vercel Blob storage, whose network logs may process IP address, request timing and device information.

Windows, Microsoft Edge WebView2, Microsoft Defender and SmartScreen are Microsoft components and may process device or security information under Microsoft's own terms and privacy notice.

Standalone Windows desktop preview (0.2 and later)

The standalone desktop preview bundles its interface on your device and requests product data from Arena Legacy's service. Its native network layer handles account cookies; it stores the primary session credential using Windows encryption tied to your Windows user. Signing out clears this stored credential. This preview uses separate local interface storage from the earlier hosted-service beta.

Match data and private chat are not deliberately saved as an offline data cache. Chat drafts stay in application memory and are cleared when their party access is lost, you sign out or the application closes. Choosing Export my account data creates an unencrypted JSON file in your Downloads folder; that exported copy remains until you remove it yourself.

When optional realtime chat is configured, Ably processes connection information, your pseudonymous community profile identifier and a party-specific subscription. It carries small refresh notifications, not message text. The desktop obtains actual messages through Arena Legacy's access-controlled service. Without this integration, periodic refreshes keep chat available. This desktop preview adds no advertising or analytics SDK.

How and why we use information

We use information to create and secure accounts, resolve Riot IDs, import and display post-game Arena history, operate Arena Queue and private party chat, maintain the community leaderboard, answer support and safety reports, prevent spam or abuse, enforce rate limits and improve reliability. Depending on the law that applies, this processing is necessary to provide the service you request, supports our legitimate interests in operating a safe and reliable service, or is based on your consent. You can withdraw cookie consent at any time without affecting processing that already occurred lawfully.

Storage, providers and international processing

Arena Legacy uses Riot Games APIs for match data, Neon for the PostgreSQL database and account service, Vercel for hosting, analytics and installer storage, Resend for transactional feedback and legal-report email, Ably for optional desktop chat refresh notifications, and Microsoft components in the Windows application. Providers process data under their own terms and may operate in countries outside yours. We may also disclose information when required by law, to protect users or the service, or as part of a service transfer subject to appropriate safeguards. We do not sell your personal information.

While advertising is paused, Cookiebot manages optional cookie choices.

Retention and automatic cleanup

Completed match and profile records remain in our PostgreSQL database while they are useful for the tracker, unless removal is requested or they are no longer needed. A completed lookup with no stored Arena matches becomes eligible for automatic deletion after 24 hours.

Arena Queue posts expire after the 30, 60, 90 or 120 minutes selected by the host. An expired post is hidden immediately and becomes eligible for deletion after a 24-hour grace period during the daily cleanup. Its membership, join requests and party messages are then deleted with it. Account and authentication records remain while the account is active or as needed for security and legal obligations. Legal notices and related correspondence are kept for the time reasonably needed to investigate, communicate a decision, defend rights and meet applicable legal duties, then deleted or anonymized when those purposes no longer require them. Provider logs and consent records follow the relevant provider's retention schedule.

Your choices and requests

Depending on your location, you may have rights to access, correct, export or delete your personal information, or to object to or restrict certain processing. To make a request concerning an Arena Legacy account, Riot ID history or community content, email vpfunited@proton.me with the account email or public handle, or the Riot ID and region concerned. We may ask for reasonable verification before acting so that another person cannot delete or obtain your data.

Required details and automated decisions

A Riot ID and region are required only when you ask us to find match history. Account credentials and a public handle are required only when you create an account or use signed-in community features. A legal notice needs the fields identified on its form so it can be assessed, except for the child-safety identity exception shown there. If required information is not provided, the relevant request or feature cannot be completed. Arena Legacy does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Questions and supervisory complaints

Contact vpfunited@proton.me first if you would like us to review a privacy concern. You also have the right to lodge a complaint with a competent data-protection authority. In Romania, complaint information is published by the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Community safety and reports

Do not place passwords, payment details or other sensitive information in a party post, join request or chat message. To report harassment or another non-legal community issue, email vpfunited@proton.me with the relevant handle or party details. For content you believe is illegal, use the legal notice form. The form processes the reported URL, claimed legal ground, explanation, good-faith confirmation, contact details unless the child-safety exception is selected, delivery metadata and the resulting reference. We use those records only as reasonably necessary to investigate, acknowledge, decide and document the report.

See also our Terms of Use and Legal Notice or report illegal content.