RankCard

Privacy Policy

1. Data controller

Luca Wanjura
Uranusweg 18
45770 Marl, Germany
Email: info@rankcard.app

2. Overview

RankCard connects your League of Legends, Valorant, and CS2 accounts into one public profile. We only store what's necessary for that: your login data, your profile name, and the game accounts you choose to connect. We don't sell your data to third parties and we don't run ads.

3. Registration & user account

When you register, we process your email address, your (hashed) password, and your chosen username. You can optionally add a profile picture and a short bio. The legal basis is Art. 6(1)(b) GDPR (performance of the user contract). This data is stored with Supabase, our database and authentication provider. This may involve a transfer of data to the USA, safeguarded through the European Commission's Standard Contractual Clauses.

4. Connected game accounts

When you connect League of Legends, Valorant, or CS2 to your profile, we store the in-game name (or SteamID) you provide. We use this to fetch publicly available rank and match data through the respective official or community APIs (Riot Games API, Henrik Dev API, Leetify, Steam Web API). We never store passwords or login credentials for your game accounts. Connecting an account only relies on publicly visible profile data.

5. Hosting

This website is hosted by Vercel Inc. When you visit the site, Vercel automatically processes technical connection data (e.g. IP address, time of request), as is technically necessary for any web hosting. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely and reliably).

6. Web analytics

We use Vercel Web Analytics for anonymized, cookieless analysis of page views. No personal profiles are created and no cookies are set. The legal basis is Art. 6(1)(f) GDPR.

7. Email delivery

Transactional emails (e.g. confirmation links, password resets) are sent through Resend. This involves processing your email address and the respective email content. The legal basis is Art. 6(1)(b) GDPR.

8. Local storage (no tracking cookies)

To keep you signed in, your browser stores a technically necessary session token in local storage (not a classic cookie). This is strictly required for the login to function (Art. 6(1)(b) GDPR) and doesn't require separate consent under § 25(2) TTDSG. We don't use marketing or tracking cookies.

9. Retention & deletion

We store your data for as long as your account exists. You can delete your account and all associated data yourself, at any time, from your account settings (the account menu on your profile → "Delete account"). This permanently removes your profile, all connected game accounts, and your login.

10. Your rights

You have the right at any time to:

  • Request access to the data we hold about you (Art. 15 GDPR)
  • Correct inaccurate data (Art. 16 GDPR)
  • Request deletion of your data (Art. 17 GDPR)
  • Request restriction of processing (Art. 18 GDPR)
  • Request data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

Just reach out to info@rankcard.app. You also have the right to lodge a complaint with a data protection supervisory authority.

11. Contact

Questions about privacy? Email us at info@rankcard.app.