LEGAL
Privacy Policy
Last updated: August 27, 2026
1. Information We Collect
Account data: authentication identifiers from Supabase Auth.
Game profile data: Riot ID, Riot PUUID, rank, and Valorant match history when you sync or link your account.
Social data: Discord username and Discord user ID if you connect Discord.
Service data: online presence (last seen timestamp), match queue status, duo match connection preferences (voice choice, party code), match history, and records of penalties for abandoning matches.
Automatically collected data: IP address, access timestamps, and similar information generated as you use the Service.
2. How We Use Information
We use this information to operate the Service: login, duo matching, showing match history, connecting partners after a match, and preventing abuse.
We do not sell your personal information.
3. Processors & Sharing
We engage the following processors to operate the Service: Supabase (authentication and database storage) and Vercel (web hosting).
The Riot Games API is called server-side only, to verify accounts and fetch match data. Discord data is processed only if you choose to link Discord.
Linking a Riot account is required to sign in to the Service — it is the only way to log in — and happens only through Riot's official login (Riot Sign On). Duorant never receives or stores your Riot password. The access token issued during linking is used once to verify your account and then discarded — we do not store it.
When you sign in, your Riot ID, rank, main agents, and recent match history are shared with Duorant. When a duo match is made, your Riot ID, rank, main agents, and microphone preference are disclosed to your matched partner; your Discord username is shared only when both of you have linked Discord.
Because linking your Riot account is the only way to sign in, it cannot be withdrawn on its own without losing access to the Service. To withdraw it, close your account entirely — this deletes your Riot-linked data along with your account.
Apart from the above we do not share your personal information with third parties, and we never sell it. We may disclose information if required by law or to protect the Service and its users.
4. International Transfers
Some processors operate servers outside your country, so personal data is transferred abroad automatically over the network when you use the Service.
Vercel Inc. (United States) — Data: connection data sent while using the Service / Purpose: web hosting / Retention: until the processing agreement ends.
Riot Games, Inc. (United States) — Data: Riot ID, Riot PUUID / Purpose: account verification and match history lookup / Retention: for the duration of the request only.
Discord Inc. (United States) — Data: authorization request data / Purpose: Discord account linking / Retention: until you unlink. (Applies only if you choose to link Discord.)
The database holding member data (Supabase) is located in the Seoul region, Republic of Korea.
You may refuse international transfers, but doing so may prevent you from logging in or using the Service.
5. Retention & Deletion
Account data (authentication identifiers): until you delete your account or request deletion.
Game profile data (Riot ID, Riot PUUID, match history) and Discord link data: until you unlink or delete your account.
Presence data, match records, match queue records, and penalties for abandoning matches: kept for up to 6 months for abuse prevention and troubleshooting, then deleted.
Where retention is required by law, we keep the data for the period that law prescribes.
Once the retention period passes or the purpose is fulfilled, we delete the data without undue delay; electronic files are erased in a manner that prevents recovery.
6. Your Rights & How to Exercise Them
You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time.
Send requests to the contact email at the bottom of this page. We act on them and inform you of the outcome within 10 days of receipt.
For children under 14, a legal guardian may exercise these rights on their behalf.
Depending on your request, some features such as matching may become unavailable.
7. Cookies & Automatic Collection
We use an authentication cookie to keep you signed in, and a cookie that remembers your language preference (duo-lang).
You can refuse or delete cookies in your browser settings. However, refusing the authentication cookie means you cannot log in or use matching.
We use Vercel Web Analytics to measure aggregate traffic such as visits and page views. It does not use cookies, does not identify you personally, and does not track you across other sites.
We do not use advertising cookies or cross-site tracking tools.
8. Security & Children
We use industry-standard practices such as server-side API keys, row-level security, and authenticated API routes. No method of transmission over the Internet is 100% secure.
The Service is not directed to children under 14 (or the minimum age required in your region), and we do not collect personal information from children under 14 without consent from a legal guardian.
9. Privacy Officer
Privacy Officer: Service Operator (sole operator)
Contact: leedoo101009@gmail.com
Please direct questions, complaints, and remedy requests about personal data handling to the contact above.
Users in the Republic of Korea may also contact the Personal Information Dispute Mediation Committee (1833-6972), the Privacy Infringement Report Center (118), the Supreme Prosecutors' Office (1301), or the National Police Agency (182).
10. Changes & Contact
If this policy changes, we announce it in the Service at least 7 days before it takes effect — or at least 30 days before, for changes that materially affect your rights.
For privacy questions or deletion requests, use the contact email shown below. The “Last updated” date at the top shows the latest revision.
CONTACT EMAIL
leedoo101009@gmail.com