Privacy Policy

1. Introduction

LCL League ("we," "our," or "us") operates as a community-run gaming league. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at lcleague.online.

Data Controller: LCL League (community-run organization)
Contact: Discord server (https://discord.gg/bbAcWsCrj8) or website contact form

Note: LCL League is a community-run gaming league operated by volunteers. We are not a registered business entity.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Register an account: Email address, username, password
• Create a player profile: Player name, position, shirt number, profile picture
• Register a team: Team name, logo, colors, contact information
• Link Discord: Discord user ID and username
• Contact us: Any information you include in communications

2.2 Automatically Collected Information

When you use our service, we automatically collect:

• Usage data: Pages visited, features used, time spent
• Device information: Browser type, operating system, IP address
• Performance data: Page load times, errors encountered
• Cookies: Session data, preferences, authentication tokens

2.3 Game Statistics

We collect and store:

• Match results and scores
• Player statistics (goals, assists, clean sheets, etc.)
• Team standings and performance data
• Transfer history

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide services: Manage accounts, teams, and league operations (contractual necessity)
• Display information: Show player profiles, team rosters, and statistics (legitimate interest)
• Communication: Send essential service notifications (password resets, transfer confirmations, match schedules) and optional league updates (with your consent)
• Improve service: Analyze usage patterns and fix issues (legitimate interest)
• Security: Detect and prevent fraud, abuse, and security incidents (legitimate interest and legal obligation)
• Legal compliance: Comply with legal obligations and enforce our terms

Email Communications

We send two types of emails:

• Essential emails: Account verification, password resets, security alerts (you cannot opt out)
• Optional emails: League updates, match reminders, transfer notifications (you can opt out in settings)

4. Information Sharing

4.1 Public Information

The following information is publicly visible on our website:

• Player names and statistics
• Team names, logos, and rosters
• Match results and standings
• Profile pictures (if uploaded)

4.2 Third-Party Services

We share information with trusted third-party services:

• Supabase (US): Database hosting and authentication - stores all user data
• Cloudinary (US): Image hosting and optimization - stores uploaded images
• Discord: Community integration (only if you link your account) - receives Discord ID and username
• Netlify (US): Website hosting and deployment
• Sentry (US): Error tracking and monitoring (optional) - receives anonymized error data

These services may process data in the United States and other countries. We ensure appropriate safeguards are in place through their respective privacy policies and data processing agreements.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal requests from authorities
• Protection of our rights or property
• Investigation of potential violations
• Protection of user safety

4.4 Business Transfers

If LCL League is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.5 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share your data with advertisers.

5. Data Security

We implement security measures to protect your information:

• Encryption: HTTPS encryption for all data transmission
• Password security: Passwords are hashed and never stored in plain text
• Access controls: Limited access to personal data
• Regular updates: Security patches and updates
• Monitoring: Continuous monitoring for security threats

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Rights

6.1 Access and Update

You can access and update your personal information through your account settings at any time. For additional access requests, contact us through Discord or our website.

6.2 Data Deletion

You can request deletion of your account and personal data by contacting us. We will respond within 30 days. Note that:

• Some information may be retained for legal compliance (e.g., audit logs)
• Anonymized statistics may be retained for historical records
• Publicly visible game statistics may remain in anonymized form

6.3 Data Portability

You can request a copy of your personal data in JSON format. We will provide this within 30 days of your request.

6.4 Opt-Out

You can opt out of non-essential communications through your account settings. Essential service emails (password resets, security alerts) cannot be disabled.

6.5 Request Verification

To protect your privacy, we verify your identity before processing data requests. We may ask for additional information to confirm you are the account holder.

6.6 Response Time

We respond to privacy requests within 30 days. Complex requests may take up to 60 days, and we will notify you if additional time is needed.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences (theme, language)
• Analyze site usage and performance
• Improve user experience

You can control cookies through your browser settings. Disabling cookies may limit some functionality.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Age Verification: By creating an account, you confirm you are at least 13 years old. We do not have automated age verification but rely on user representations.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately. We will delete such information within 30 days.

9. Data Retention

We retain different types of data for different periods:

• Account data: Retained while your account is active, deleted within 90 days of account deletion request
• Match statistics: Retained indefinitely in anonymized form for historical league records
• Audit logs: Retained for 2 years for security and compliance purposes
• Uploaded images: Deleted within 30 days of account deletion
• Session data: Deleted after 30 days of inactivity

After account deletion, your personal information is removed, but anonymized statistics (goals, assists, etc.) may be retained for historical league records without identifying information.

10. International Data Transfers

Your information is primarily stored and processed in the United States through our service providers (Supabase, Cloudinary, Netlify).

For EU/UK Users: By using our service, you consent to the transfer of your data to the United States. We rely on:

• Standard Contractual Clauses with our service providers
• Service providers' compliance with applicable data protection frameworks
• Your explicit consent for data transfers

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users via email within 72 hours of discovering the breach
• Post a notice on our website and Discord server
• Describe the nature of the breach and data affected
• Explain steps we're taking to address the breach
• Provide recommendations for protecting your information
• Notify relevant authorities as required by law

12. Third-Party Links

Our website may contain links to third-party websites (Discord, social media, etc.). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any information.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via:

• Email notification to registered users
• Prominent notice on our website
• Announcement in our Discord server

The "Effective Date" and "Last Updated" dates at the top indicate when the policy was last revised. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Discord Integration

If you choose to link your Discord account:

• We store your Discord user ID and username
• Our Discord bot can access your Discord username and ID
• The bot does not access your messages or other Discord data
• This enables Discord bot features and notifications
• You can unlink your Discord account at any time in profile settings
• Discord's privacy policy applies to their services: discord.com/privacy

Discord Bot Permissions: Our bot requests minimal permissions (read messages, send messages) and only operates in designated league channels.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through:

• Discord: Join our server at discord.gg/bbAcWsCrj8 and message an admin
• Website: Use the contact form on our website

Response Time: We aim to respond to privacy inquiries within 5 business days.