Legal information
Privacy
Last updated: July 10, 2026
CustomLoL collects the strict minimum needed to run the lobbies and your statistics. No advertising trackers, no data resale, no third-party analytics tools.
What we collect
| Data | When | Why |
|---|---|---|
| Nickname and Riot ID | On your first visit | Identify you in a lobby |
| Browser identifier | On your first visit | Recognise you from one lobby to the next, without an account |
| Declared rank | If you fill it in | Filter lobbies by rank |
| Email address | Google sign-in only | Link your statistics to your account |
| Discord nickname and avatar | Discord sign-in | Display your profile (no email is requested) |
| Game statistics | At the end of a game | Games played, won, lobbies created |
| Game history | At the end of a game | Lobby name, mode, team, result, date |
| IP address | When sending a message via the form | Limit abuse (anti-spam) |
Chat messages and lobbies are never durably written to disk: they live in memory and disappear with the lobby.
Voice chat
Your voice travels directly between players (WebRTC, peer-to-peer). The server only transmits the technical information needed to establish the connection. Your voice is neither recorded, nor stored, nor listened to. When a direct connection is impossible, a relay server forwards the encrypted stream without keeping it.
Cookies
No advertising or analytics cookies. Only these are set:
| Cookie | Role | Duration |
|---|---|---|
clol_auth | Keep you signed in via Discord | 30 days |
clol_google | Keep you signed in via Google | 90 days |
clol_state, clol_google_state | Secure the sign-in (anti-CSRF) | 10 minutes |
Sign-in cookies are inaccessible to JavaScript and transmitted over HTTPS only.
The site also uses your browser's local storage to remember your nickname, your identifier, your rank and your sound preference. Clearing the site data is enough to erase everything.
For how long
- Lobbies and messages: deleted when the lobby closes, at the latest after three hours of inactivity.
- Account, statistics and history: kept as long as the account exists.
- Form IP addresses: kept in memory for fifteen minutes, solely for anti-spam.
Who receives your data
Nobody. It is neither sold, nor rented, nor passed on to advertisers. Three technical parties are needed for the service to work:
- Discord and Google, if you choose to sign in with them — they recognise you, as with any site using their sign-in button.
- Riot Games, when you open the link of a custom game.
Your rights
The European data protection regulation (GDPR) gives you the right to access your data, correct it, erase it, restrict its processing or object to it.
To delete your account and everything attached to it, or to obtain a copy of your data, write to us via the “Contact us” button at the bottom of the site. You can also sign out at any time, which erases the session cookies.
If an answer does not satisfy you, you can contact the Belgian Data Protection Authority, or the authority of your country of residence.
Security
The site is served over HTTPS, and sign-in cookies are signed and inaccessible to JavaScript. No password is stored: signing in goes entirely through Discord or Google.