Lanelore — every lane has a lore
lanelore .

Privacy Policy

Last Updated: April 25, 2026

Lanelore ("we", "us", "our") operates the website lanelore.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information.

1. Who We Are

  • Operator: Erdi Genc, Turkey
  • Contact: [email protected]
  • Data Protection inquiries: [email protected]
  • Jurisdiction: Turkey (KVKK compliance) and European Union users (GDPR compliance)

Lanelore is an independent League of Legends community resource. We are not endorsed, sponsored, or affiliated with Riot Games, Inc. League of Legends and all associated properties are trademarks of Riot Games, Inc.

2. Information We Collect

2.1 Information You Provide

  • Account registration (optional): email address, display name, hashed password, optional two-factor authentication data
  • Profile preferences: region, language, notification settings
  • Communications: messages you send to us via contact forms or email

2.2 Information Collected Automatically

  • Log data: IP address, browser type, device identifiers, operating system, pages visited, referrer URL, session timestamps
  • Cookies and similar technologies: session cookies (required for login), preference cookies (language/region), analytics cookies (Google Analytics 4 and Yandex Metrika — the latter includes Webvisor session replay and Clickmap click-heatmap, both consent-gated), advertising cookies (Google AdSense) — all categorized in our cookie banner
  • Core Web Vitals telemetry: anonymous page performance metrics (LCP, INP, CLS) sent to our own endpoint to monitor site health

2.3 Information from Third Parties

  • Riot Games API (developer.riotgames.com): publicly available League of Legends ranked-match data — match metadata, participant champions, items, runes and outcomes. We aggregate this into per-champion build, counter, favourable and synergy statistics. No summoner-level public profile pages are served; no Riot account credentials are ever requested or stored.
  • Data Dragon (Riot's static data CDN): champion and item metadata (no personal data).

We do not buy or sell personal information.

3. Why We Use Your Information

Purpose Legal Basis (GDPR)
Provide and maintain the Service Contract / Legitimate Interest
Process account registration and logins Contract
Communicate service updates and security notices Legitimate Interest
Serve relevant advertising (when consented) Consent
Analyze usage to improve the Service Consent (analytics cookies)
Comply with legal obligations (tax, law enforcement requests) Legal Obligation
Detect abuse, fraud, or rate-limit violations Legitimate Interest

4. Third-Party Services

We share minimal data with the following processors strictly for the purposes below:

Service Purpose Data Shared
Riot Games API Fetch public ranked-match data for aggregation Server-side calls only; no end-user summoner name is shared
Cloudflare CDN, DDoS protection, caching IP address, request metadata
Google Analytics 4 Usage analytics (consent-gated) Anonymized traffic data, event interactions
Yandex Metrika Usage analytics, session replay (Webvisor), click heatmap (Clickmap) — all consent-gated Anonymized pageviews and, after consent, user-interaction recordings used to debug UX and measure feature adoption
Google AdSense Display advertising (consent-gated, planned Q2 2026) Ad interaction data, anonymous cookie IDs

We do not share data with advertising networks without your explicit cookie consent.

5. Cookies

We use the following cookie categories. You can review and change your choices at any time via the Cookie Preferences link in the footer.

  • Essential cookies (always active): session, CSRF token, authentication, rate-limit enforcement.
  • Preference cookies (active by default, opt-out via link): language, region, theme.
  • Analytics cookies (opt-in via banner): Google Analytics 4 and Yandex Metrika (including Webvisor session replay and Clickmap click-heatmap — these only activate after you accept; declining keeps the tag inert).
  • Advertising cookies (opt-in via banner): Google AdSense and any future ad network we adopt.

6. Data Retention

Data Type Retention Period
User account data Until account deletion + 30 days backup window
Aggregated match data Rolling 90-day window (publicly available Riot data, server-side aggregation only)
Server access logs 90 days
Activity logs (admin actions) 365 days
Analytics aggregates 14 months (Google default)
Error reports 30 days

7. Your Rights

Under GDPR (EU residents) and KVKK (Turkey)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectify: Correct inaccurate data
  • Erase: Request deletion ("right to be forgotten")
  • Restrict processing: Limit how we use your data
  • Data portability: Receive your data in a machine-readable format
  • Object: Object to processing based on legitimate interest
  • Withdraw consent: Revoke consent for analytics/advertising cookies at any time
  • Lodge a complaint: File with your local Data Protection Authority (KVK Kurumu for Turkey; relevant DPA for EU)

To exercise any right, email [email protected] with your request. We respond within 30 days.

8. Security

We implement reasonable technical and organizational measures:

  • HTTPS/TLS encryption for all traffic
  • Password hashing (bcrypt)
  • Two-factor authentication support
  • Rate limiting and abuse detection
  • Least-privilege database access
  • Regular security reviews via code audits

No system is 100% secure. We will notify affected users within 72 hours of confirming a data breach affecting personal information, as required by GDPR and KVKK.

9. International Transfers

If you access Lanelore from outside Turkey, your data may be processed on servers located in the European Union. Third-party processors (e.g., Cloudflare, Google) may process data in the United States under Standard Contractual Clauses or equivalent safeguards.

10. Children's Privacy

Lanelore is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be announced via a site banner or email (if you have an account) at least 30 days before taking effect. The "Last Updated" date at the top of this page always reflects the current version.

12. Contact