Skip to content
FANFACTIONS
Log in

Privacy policy

Last updated: 19 octobre 2026. This is a translation; the French version is the reference text.

Data controller

Ricky Richard, entrepreneur individuel (EI) (Double R Digital), 25 rue Léon Gambetta, 62119 Dourges, France. For any question or request about your data: rickyrichard2205@gmail.com.

Data we collect

  • Account: username, email address, hashed password (never stored in plain text), creation date and last login date.
  • Participation: faction picked per match, votes (visible to you only), predictions, HypePulse reactions, XP and badges.
  • Profile photo (optional): visible to other fans next to your username. The server crops and re-saves it, which strips the image metadata (device, date, GPS location). You can remove it from your profile at any time.
  • Notifications (optional, turned on by you on each device): the technical address provided by your browser and its encryption keys, your preferences (match reminders, vote alerts). The content is end-to-end encrypted to your device; it passes through your browser’s push service (Google, Mozilla, Apple or Microsoft). You can turn them off at any time from your profile or your browser.
  • Fan League and friend leagues: favourite team and player, calculated points, leagues joined (other members of a league see your username and rankings).
  • War Room breaks: MVP votes, quiz answers and fan chants (counted in aggregate).
  • Last activity on the site (updated at most once a minute), used only for overall audience statistics.
  • Security: IP addresses are not stored in clear; the admin log only records a truncated, salted fingerprint of the network prefix.
  • War Room broadcast player: nothing is loaded until you click “Watch here”. After that, the player comes straight from Twitch or YouTube (privacy-enhanced mode for YouTube), under their own privacy rules.
  • Log in with Discord (optional): your Discord ID, name and verified email address, read once when you log in. FanFactions doesn’t read your servers, messages or friends.
  • Feedback sent from “Share your feedback” (optional): message type, rating, text, the page concerned and, if you’re logged in, your account. Only the site administrator reads it; a message is only quoted publicly with your username if you ticked the box for it.
  • Your language choice (a strictly necessary cookie, or your account setting).
  • No advertising cookies, no third-party trackers, no selling of data.
  • Champion icons are downloaded by the FanFactions server and served from our domain: your browser doesn’t contact Riot Games.

Purposes and legal basis

Providing the service (performance of the contract), sending the emails the account needs (address verification, password reset), protecting votes against fraud (legitimate interest). No marketing emails are sent. The cookies used are strictly necessary (session, persistent login if you ask for it, language) and don’t require consent.

Service providers

Your data is only shared with the technical providers the service needs, based in the European Union:

  • IONOS SARL (7 place de la Gare, 57200 Sarreguemines, France): hosting of the site and the database.
  • Discord Inc. (United States), only if you choose “Continue with Discord”: authentication of your Discord account.
  • Brevo SAS (9-17 rue Salneuve, 75017 Paris, France): sending verification and reset emails (your email address and the message content only).
  • If you turn on notifications: your browser’s push service (Google for Chrome and Android, Mozilla for Firefox, Apple for Safari, Microsoft for Edge on Windows), which may be located outside the European Union. It only receives an encrypted message it cannot read.

Retention periods

  • Guest accounts: anonymised after 24 hours.
  • Accounts: until you ask for deletion.
  • Profile photo: deleted as soon as you remove or replace it, or delete your account.
  • Verification and reset tokens: 48 hours and 1 hour.
  • Votes and points ledgers: kept in anonymised form after account deletion, to guarantee the integrity of published scores.
  • Feedback sent from “Share your feedback”: 12 months at most.
  • Database backups: 14 days.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. From your profile, you can export all your data (JSON) and delete your account: deletion erases your email, password, username and profile photo, and your past votes stay counted without any identifying link. For any other request, write to rickyrichard2205@gmail.com.

If you believe your rights aren’t being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).