Data controller
- Owner
- VICXELCODE, S.L.
- Tax ID (NIF)
- B25961590
- Address
- Calle Doctor Casares 164
27400 Monforte de Lemos, Lugo (España) - support@ulty.gg
- Phone
- +34 611 542 014
The controller of the personal data processed on ULTY.GG (website, desktop app and mobile app) is VICXELCODE, S.L.. For any question about your data, write to us at support@ulty.gg.
What data we process
- Account data: email address, name, password (we only store an Argon2id hash, never the password itself), plan (free or Premium), language and, if you link them, your Riot ID and region.
- Public Riot Games data: profiles, rankings and match history obtained from the Riot Games API when someone looks up a profile, and the public matches we use to calculate aggregate statistics for each champion.
- Desktop app usage: the status of the League of Legends client and of the match in progress (phase, champions, items, stats), your matches for tracking your progress, and the reports generated by the coach.
- What you send to the artificial intelligence: in-game chat messages you ask us to translate, screenshots of the chat box (only that area of the screen) so it can be read, your match statistics and your conversations with the coach.
- Linked devices: the name and platform of each device, the mobile push notification token, the notification language and which notifications you want to receive.
- Integrations: your Discord webhook URL, if you set one up.
- Technical data: IP address, date and details of each request in the server logs, and the number of translations per day so we can apply the daily limit (the count, not the text).
We do not store the in-game chat text, the screenshots or the messages you exchange with the coach on our servers: they are sent to get a response and then discarded. We do store coach reports, so you can view them again in your account.
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, signing you in and applying your plan | Performance of a contract (art. 6.1.b GDPR) |
| Providing the features you use: statistics, your profile, the desktop app, the coach, translation and chat reading | Performance of a contract (art. 6.1.b GDPR) |
| Mobile push notifications and messages to your Discord webhook | Consent: you turn them on and can turn them off at any time (art. 6.1.a GDPR) |
| Showing public profiles and match histories and calculating aggregate statistics from the data Riot Games makes available to developers | Legitimate interest in providing game statistics (art. 6.1.f GDPR) |
| Keeping the Service secure, preventing abuse and enforcing usage limits | Legitimate interest (art. 6.1.f GDPR) |
| Meeting tax and accounting obligations when payments are made | Legal obligation (art. 6.1.c GDPR) |
We do not use your data for advertising, we do not build commercial profiles and we do not sell data to anyone. If we ever wanted to send you marketing communications, we would ask for your consent first.
Who we share data with
We only share the data strictly necessary with the providers that help us run the Service, who process it on our behalf and in line with our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Anthropic, PBC (Claude API) | Chat translation, reading chat screenshots, coach reports and conversations. Under its commercial terms, it does not use data received through the API to train its models. | United States |
| Riot Games, Inc. | We query its API with your Riot ID and region to retrieve profiles and matches. | United States |
| 650 Industries, Inc. (Expo) | Sending push notifications to your phone, delivered through Apple or Google. | United States |
| Discord, Inc. | Only if you set up a webhook: we send it the messages you turn on. | United States |
| Arsys Internet, S.L.U. | Public-facing server that receives encrypted connections and forwards them to our server. | Spain |
| Cloudflare, Inc. | DNS: resolves the domain to the server address. Website traffic does not pass through Cloudflare. | United States and EU |
Data is stored on our own server located in Spain. We may also disclose data to the authorities when required by law.
International transfers
Some providers are based in the United States, so using certain features (especially the artificial intelligence ones) involves an international transfer of data. We only work with providers that offer appropriate safeguards: participation in the EU-U.S. Data Privacy Framework where they are certified, or the standard contractual clauses approved by the European Commission (art. 46 GDPR). You can ask us for a copy of these safeguards by writing to support@ulty.gg.
How long we keep it
- Account: for as long as it exists. If you delete it, we erase your data within 30 days at most, except for data we are legally required to keep, which remains blocked for that period.
- Session: access expires after 24 hours, or after 7 days if you tick “Remember me”, and is invalidated when you sign out.
- Coach reports, progress matches, devices and integrations: for as long as you have an account, or until you delete them or ask us to.
- Chat text, screenshots and coach conversations: we do not store them. Our providers may keep them for a limited time under their own terms, for example to detect abuse.
- Public Riot Games data: cached and refreshed or expired periodically. Aggregate statistics do not identify any player.
- Server logs: up to 90 days, unless needed to investigate a security incident.
- Billing data, when payments are made: for the period required by law (generally 6 years).
Your rights
You can exercise the following rights over your data at any time:
- Access: find out what data of yours we process and get a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete it, including your whole account.
- Objection: object to processing based on our legitimate interest.
- Restriction: ask us to stop using it temporarily while a complaint is being resolved.
- Portability: receive the data you gave us in a structured, commonly used format.
- Withdraw any consent you have given (for example, by turning off notifications or the webhook), without affecting anything done before.
To exercise them, write to us at support@ulty.gg from your account email address, or identify yourself in another way if you do not have an account. We will reply within one month, which may be extended to two in complex cases. It is free of charge.
If you believe we have not handled your request properly, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD), the Spanish Data Protection Agency, C/ Jorge Juan 6, 28001 Madrid, at www.aepd.es.
Minors
You must be at least 13 years old to use ULTY.GG, the minimum age Riot Games requires to play League of Legends. To create an account, you must also have reached the age at which your country allows you to consent to the processing of your data (14 in Spain and up to 16 in other EU countries). If you have not, you need the consent of your parent or guardian.
If we learn that we have collected data from a minor without that consent, we will delete it. If you are a parent or guardian and believe this has happened, please write to us.
Security
All connections are encrypted (HTTPS). Passwords are stored with Argon2id and sessions as a hash of the token, so they cannot be read even with access to the database. Access to the servers is restricted, and data does not leave Spain except for the providers listed above.
Automated decision-making
The coach and the translation feature use artificial intelligence to generate advice and text, but they do not make decisions that produce legal effects concerning you or similarly significantly affect you. We do not build profiles for that purpose.
Changes to this policy
We may update this policy when the Service or the law changes. We will publish the current version here with its review date and, if the change is significant, we will let you know on the website or by email.