Privacy Policy

Who to contact

LoLdoku (“we”, “us”) is a free, independent fan-made puzzle game at loldoku.gg. Contact us at thedlenetwork@gmail.com for privacy questions or requests.

Browsing the website

You can browse without an account. Our hosting provider, Vercel, processes requests to serve the website, including technical information such as IP addresses, requested URLs, browser details, and request times. Operational logs may be used to investigate errors and protect the service.

Optional Google and Discord sign-in

If you choose an enabled provider, it authenticates you and shares basic profile information such as your name, email address, and profile identifier. Authentication responses may also include a profile image. We use this information to establish your session and show your name on the Account page. LoLdoku does not receive your Google, Discord, or Riot password.

Your provider processes information under its own policy. See Google’s Privacy Policy or Discord’s Privacy Policy. Supabase Auth handles sign-in and stores your account identity and session information. See Supabase’s Privacy Policy. You can permanently delete your LoLdoku account from the Account page; this removes the identity record held by Supabase Auth but does not delete your Google or Discord account.

Cookies we set

Sign-in uses cookies for security checks and Supabase access and refresh tokens. Session lifetime follows the Supabase project settings. Signing out ends the current browser session and clears its authentication cookies; it does not delete your account. When you finish a daily puzzle, we set a signed, random player cookie (loldoku-grid-player) that lasts one year so repeat submissions from the same browser are counted once. It contains no name, email address, or account link. Google Analytics sets measurement cookies only after you opt in as described below. When advertising is enabled, advertising and consent partners may also set cookies, as described below. Puzzle guess histories are kept in your browser, not on a server.

Saved games and preferences

We use browser local storage to save your daily and unlimited runs for the Grid, Classic, Silhouette, Attributes, Abilities, and Connections modes, including guesses, results, and revealed hints where applicable. We also save analytics choices and preferences such as Classic difficulty, silhouette zoom, background, and display settings. This information stays in the browser where you play and is not synced to your sign-in account. Browser settings, private browsing, or clearing site data may prevent saving or remove progress. Your first completed daily result is preserved. Grid replays save separately and replace only the previous replay.

Daily solve counts and community stats

To show how many people solved today’s puzzle and, for the Grid, which champions the community picked, we record completed daily rounds on a server. For each completion we store the puzzle number, the random player identifier from the cookie above, the outcome (solved or gave up), and the submission time. For the daily Grid we also store the correct champion placed in each cell. A win, running out of lives, or giving up counts as a completed game; replays and unlimited rounds do not add another completion. Full guess histories, account names, and email addresses are not stored with these statistics. These records are held in our Supabase database and are only ever published as aggregate counts.

Google Analytics

With your permission, we use Google Analytics to understand visits and improve the website. It uses cookies and collects information such as pages visited, session activity, approximate location, and browser and device details. Requests to Google also include technical information such as your IP address. Our sign-in integration does not send your name or email address to Analytics.

Read how Google uses information from sites that use its services. You can use the Google Analytics opt-out browser add-on on supported browsers. Browser controls can block or delete cookies; deleting cookies alone does not stop future analytics requests.

Advertising and NitroPay

LoLdoku uses NitroPay (Nitro, operated by Overwolf Ltd.) and its advertising partners to help fund the site on loldoku.gg. When enabled, NitroPay and its partners may use cookies, web beacons, local storage, and similar technologies to deliver and measure ads, limit repeated ads, and prevent fraud. They may process IP addresses, approximate location, browser and device details, page URLs, and cookie or advertising identifiers. Personalized advertising may use activity across websites, subject to your consent or opt-out rights.

Read Nitro’s Privacy Policy for its processing practices, partners, retention, and privacy contacts. Google may participate as an advertising partner; see how Google uses information from partner sites. We do not pass your sign-in name or email address to NitroPay.

Your privacy choices

Google Analytics is off until you choose Allow analytics below. You can withdraw that permission using Reject analytics. We store this choice in your browser as loldoku-analytics-consent; clearing site data resets it to off. Rejecting analytics does not affect gameplay or sign-in. A Global Privacy Control signal disables Analytics even if you previously allowed it.

When NitroPay is enabled, its consent tool asks for advertising consent in regions where required. Use the consent preferences control in the footer to review or withdraw that consent. You can use the Do Not Sell or Share My Personal Information link in the footer or the button below to opt out of sale, sharing, or targeted advertising in this browser. Nitro may also display its regional opt-out control. The regional consent controls appear when Nitro’s tool loads. Our opt-out button below also works without that tool. For help, contact us at thedlenetwork@gmail.com.

We do not sell personal information for money. Advertising disclosures to partners may be considered a sale or sharing under some US privacy laws. We pass a Global Privacy Control opt-out to NitroPay using its CCPAOPTOUT cookie, which lasts one year. You can also contact us to exercise applicable rights without discrimination. Browser and device choices apply to that browser or device; clearing cookies may require choosing again.

Champion images and external services

Some champion images load directly from Riot Games’ Data Dragon servers. Loading those images sends Riot technical request information, such as your IP address and browser details. See Riot Games’ Privacy Notice. Opening a social sharing link sends the selected result or page link to that platform, which handles it under its own policies.

Optional push reminders

If you enable reminders, your browser’s push service provides an endpoint and encryption keys that we store in Supabase to deliver notifications. We also store your reported streak, last played day, timezone offset and preferred play time when provided, and your account identifier if you are signed in. You can turn reminders off in Settings; we remove the subscription when you unsubscribe through the site and remove endpoints reported expired by the push service. Browser permission revocation alone may not immediately remove the database record. Where configured, we send aggregate notification delivery counts to Google Analytics using fixed service identifiers, without your endpoint or account identity; this server reporting is separate from optional browser analytics.

Contacting us

If you contact us, we receive the information you choose to send and use it to address your request. Public social messages are visible to others and are also governed by the platform’s policies. Do not share passwords, session cookies, or other secrets.

Retention and your choices

Session cookies expire according to the session configuration or are removed when you sign out. The player cookie expires after one year, or when you clear site cookies. Hosting logs follow the provider’s configured retention. Daily completion records are kept so historical solve counts stay accurate; clearing the player cookie removes the browser’s identifier but does not automatically erase existing database records. Support correspondence is kept while needed to handle the request and any related obligations. Locally saved games and preferences remain until cleared, replaced, or removed by your browser. Analytics and advertising retention follow the settings of our Google properties and NitroPay’s and its partners’ own policies. You can clear site cookies and local storage, stop signing in, delete your account, or revoke access through your provider’s settings. Signing out does not clear saved games or analytics or advertising cookies.

Depending on applicable law, you may have rights to access, correct, delete, or object to processing of your personal information, and to opt out of targeted advertising. Visit Contact for the available contact options. We may need information to verify a request; do not send identity documents in a public message.

US state privacy rights

Depending on your state and whether its law applies to us, you may request access to and a portable copy of your information, correction, deletion, and information about its collection and disclosure. You may opt out of sale, sharing for cross-context behavioral advertising, and targeted advertising without creating an account. California residents also have the right to limit qualifying uses of sensitive personal information and to receive equal service when exercising privacy rights.

The categories described above include identifiers (account details, IP addresses, cookie IDs), internet activity (visits and game completions), and approximate location and device information. Sources are you, your browser, and your chosen sign-in provider. We use and disclose these categories to the service providers described above for operating the game, account access, security, optional measurement, and advertising. Advertising partners may receive IP addresses, cookie IDs, device details, approximate location, and browsing activity for purposes considered sale or sharing. We do not send account names or emails to advertising partners. We do not use sensitive personal information to infer characteristics about you.

Send privacy requests to thedlenetwork@gmail.com. An authorized agent may submit a request on your behalf; we may need evidence of authorization and information to verify access, correction, or deletion requests. We do not require identity verification for the browser opt-out. Where applicable, you can appeal a denied request by replying to our response and asking for an appeal.

European privacy rights

Where European or UK data protection law applies, we rely on consent for optional analytics storage and advertising processing that requires consent, providing the requested service for account and game functions, and legitimate interests for security and service operation where appropriate. You may withdraw consent at any time without affecting earlier lawful processing, request access, correction, erasure, portability or restriction where applicable, object to processing based on legitimate interests, and complain to your local data protection authority. Contact us using the email above to exercise these rights.

Service providers and international processing

Hosting (Vercel), sign-in and database (Supabase), analytics (Google), advertising when enabled (NitroPay / Overwolf and their partners), and image (Riot Games) providers may process information in countries different from yours, including the United States. Their privacy policies describe their handling of that information.

Children and policy updates

LoLdoku is intended for players aged 16 and older, or the higher minimum age required in their jurisdiction. The service is not directed to children under 16. We do not knowingly collect their personal information or provide it to advertising partners. A parent or guardian can contact us about a concern. Material changes to processing will be reflected here with an updated date.