Account informationWhile you have an account
The stable account identifier Riot issues, the server region you play on, and your current rank. Your in-game name and tagline are shown to you while you are signed in but are not kept in our records.
This is the document the sign-in checkbox asks you to accept. It explains what Questheim collects about you, why, and what you can ask us to do about it.
Questheim is an independent coaching service for League of Legends players. It is not made by, endorsed by or affiliated with Riot Games.
Questheim is built and run from Sweden. The operator is the controller of the personal information described in this policy, which means they decide what is collected and why, and they are the party accountable for it. Write to privacy@questheim.com about anything in here.
Everything below is filed against the account identifier Riot issues for you. We do not ask for, and do not hold, your email address, your date of birth, your payment details or any government identifier. We do not collect any category of sensitive personal information.
The stable account identifier Riot issues, the server region you play on, and your current rank. Your in-game name and tagline are shown to you while you are signed in but are not kept in our records.
Statistics from your ranked matches: the result, your champion and role, kills, deaths and assists, farm, vision, gold and experience measured against your opponent in lane, and objective participation. This comes from Riot, not from watching you play.
Your position on the ladder recorded over time, so progress can be shown as a trend rather than a single number.
The quests we generate for you, your progress against them, and anything you type into one yourself.
What you ask the coach and what it answers, so that it can refer back to earlier conversations instead of starting over each time.
Your main role and the champions you play.
What we conclude from the above: your likely strengths and weaknesses, and how much a given piece of coaching appeared to help you.
Server logs generated when you use the site, which include your account identifier, your IP address and the pages you requested, and the cookies described further down.
We do not use your information for advertising, and we do not build profiles for anyone else’s purposes.
This section applies if you are in the European Economic Area, the United Kingdom or Switzerland. We rely on:
The tick box at sign-in records that this policy was shown to you. It is not what makes the processing above lawful, except where this section says a purpose runs on consent.
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We have not done either in the previous twelve months, and we have no plans to.
The categories of recipient are:
Aggregated statistics that cannot identify you, such as how a type of coaching performs across a rank band, are not personal information and are not covered by the restrictions above.
Questheim is run from Sweden but hosted in the United States, so your information is processed there whichever country you are in.
We are established in the European Union, so sending your information to our United States providers is a transfer we make as exporter. For that, and for transfers concerning people in the United Kingdom and Switzerland, we rely on the European Commission’s Standard Contractual Clauses together with the UK Addendum and the Swiss equivalent, which form part of our agreements with our providers. Where a provider is certified under the EU-US Data Privacy Framework and its UK and Swiss extensions, we rely on that certification instead. For transfers from Japan, Korea, Singapore and other Asia Pacific jurisdictions we rely on equivalent contractual protections, and on your consent where local law requires it.
You can ask us for a copy of the safeguards that apply to your transfer by writing to privacy@questheim.com.
The periods are shown against each category above. In summary: your coach conversations are kept for 90 days, your detailed match statistics for up to 90 days, and the rest for as long as you have an account with us.
We keep technical logs only for as long as we need them for security and troubleshooting. When you ask us to delete your account we remove your information within 30 days, except where we have to keep something to comply with the law or to defend a legal claim. Backups are overwritten on their own cycle, so a copy can persist for a short period after deletion.
Signing out. Signing out ends your session and deletes the token that keeps you signed in. It does not delete your account or the information listed above, and it does not stop us refreshing your gameplay record. If you want that to stop, ask us to delete your account.
Editing. You can edit the quests you have been given, including their text, and set your main role, from inside the app.
Deleting. Ask from your profile page, under Your data. The request waits 7 days before it is carried out, so you can change your mind; nothing is deleted during that time. After it, your account and everything held against it is removed, including the sign-in token, your quests, your rank history and your stored matches. You can write to privacy@questheim.com instead if you prefer.
At Riot. You can withdraw Questheim’s access to your Riot account at any time from your Riot account settings. Be aware of what that does and does not do. It stops us acting on your behalf at Riot and it stops you signing in here. It does not stop us reading your games and rank: those come from the public Riot API using our own developer key, and they are keyed to your player id, which survives withdrawing access. So tell us as well, using the delete request above, if what you want is for us to stop. Separately, if you ask Riot to delete your player data, Riot passes that request on to developers who hold it, and we act on it here too. You do not have to ask us twice.
Cookies. Questheim sets three cookies and all of them are strictly necessary: one to keep you signed in, one to protect the sign-in itself against interference, and one to carry your acceptance of this policy through sign-in. There are no analytics, advertising or tracking cookies, so there is nothing to opt out of. We do not act on browser Do Not Track signals because there is no tracking to disable, and Global Privacy Control signals do not change anything either, because we do not sell or share personal information.
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the rights below. Exercise any of them by writing to privacy@questheim.com. We answer within one month, and will tell you inside that month if we need up to two months more because the request is complex.
We do not charge for these, and we will not treat you differently for using them. If we cannot identify you from your request we may have to ask you to confirm control of the Riot account, since the alternative is disclosing one player’s data to another.
This section is for players in US states with a comprehensive privacy law, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana. Questheim is a small service run from Sweden, and several of those laws only bite above a size threshold, but we apply this section to you whether or not your law currently requires it. Californians should read it as their notice under the California Consumer Privacy Act as amended by the California Privacy Rights Act.
In the statutory categories, we collect identifiers (your Riot account identifier and IP address), internet or network activity (how you use the site), approximate location (the server region you play on, and what your IP address implies) and inferences (our assessment of your play). Your gameplay statistics sit under identifiers and inferences rather than any special category. We collect them from you, from your browser and from Riot Games, for the business purposes listed under “Why we use it”, and we disclose them only to the recipients listed under “Who we share it with”.
We do not collect sensitive personal information as that term is defined, so there is nothing for you to limit. We do not sell personal information and do not share it for cross-context behavioural advertising, including for anyone we know to be under 16, which is why you will not find a “Do Not Sell or Share My Personal Information” link on this site.
Subject to your state’s law, you can ask us to:
Write to privacy@questheim.com. We confirm receipt within 10 business days and respond within 45 days, extendable once by a further 45 days if we tell you why. We verify a request by confirming control of the Riot account concerned, and ask for nothing beyond that. An authorised agent can act for you if you give them written permission, which we may ask to see.
We will never deny you service, charge you a different price or give you a lesser experience for exercising these rights. If we refuse a request you can appeal by replying to our response, and we will answer within 60 days.
Wherever you are in Asia Pacific, you can ask us for a copy of your information, ask us to correct it, ask us to delete it, or withdraw a consent you have given, by writing to privacy@questheim.com.
Japan. The purposes for which we use your information are set out under “Why we use it”, and we do not use it for anything else without telling you. Your information is transferred to and stored in the United States, and our providers there are bound by contractual protections equivalent to those the Act on the Protection of Personal Information requires. You may request disclosure, correction, suspension of use or deletion, and we will explain our reasons if we cannot comply.
Korea. The items we collect, the purposes and the retention periods are set out above. You may refuse consent, though in most cases that means we cannot provide the service, and you may withdraw it later. We entrust the hosting and processing of your information to the providers described above and remain responsible for their handling of it. Your information is transferred to and stored in the United States for the purposes and periods stated in this policy.
Singapore. We collect, use and disclose your information for the purposes set out above, and only with your consent or as the Personal Data Protection Act otherwise permits. You may withdraw consent at any time, which we will act on within a reasonable period after explaining what it means for the service. Requests for access and correction go to the address below.
Elsewhere. If your local law gives you rights we have not named, including in Australia, India, the Philippines or Thailand, write to us and we will honour them.
Questheim analyses your play automatically. It compares your statistics against benchmarks built from other ranked players, ranks what is most likely holding you back, has a language model write coaching and quests from that ranking, and afterwards estimates how much each piece of coaching appeared to help. The benchmarks are aggregate figures and contain nothing that identifies the players they came from.
None of this produces a decision with legal or similarly significant effects. It produces suggestions, which you can ignore, dismiss or edit. You can object to the analysis entirely by writing to privacy@questheim.com, and you can ask for human review of anything the coach tells you.
Questheim is not directed at children. You may not use it unless you meet the minimum age for a Riot Games account where you live, which is 13 in most countries and 16 in some.
We do not ask your age and Riot does not tell us, so we cannot verify it. We do not knowingly collect information from anyone below that age, and we do not sell or share the information of anyone we know to be under 16. If you are a parent or guardian and believe a child has used Questheim, write to privacy@questheim.com and we will delete everything we hold about them.
You sign in on Riot’s own page, so your password never reaches us. The token that keeps you signed in is encrypted before it is stored, and its key is held separately. Your session is sealed so that it cannot be read or altered in your browser. Information is encrypted in transit and at rest, access to production systems is limited to those who need it, and our own credentials for Riot never leave our servers.
No service is perfectly secure. If we become aware of a breach affecting your personal information we will notify you and the relevant authorities where the law requires it, within the deadlines it sets.
This policy is versioned, and the version you accepted is recorded against your account with the date. If we change it in substance we issue a new version and ask you to accept that one the next time you sign in. An acceptance of an older version is never treated as agreement to a newer one.
Write to privacy@questheim.com for anything in this policy: a copy of your data, a correction, a deletion, an objection, a question, or a complaint. We would rather hear from you than have you go to a regulator first, but you are entitled to do either.
Questheim is not endorsed by Riot Games and does not reflect the views or opinions of Riot Games or anyone officially involved in producing or managing Riot Games properties. Riot Games and all associated properties are trademarks or registered trademarks of Riot Games, Inc.