Privacy Policy

Overview

CollegeRankers ("we", "our", "the platform") is a collegiate esports analytics tool built by students at Cleveland State University. This privacy policy explains how we collect, use, and protect data obtained through our integration with the Riot Games API and Riot Sign On (RSO).

Information We Collect

When you connect your Riot account via Riot Sign On, we receive and store:

• Your Riot ID (in-game name and tag)
• Your PUUID (a unique player identifier used by Riot APIs)
• OAuth tokens (access, refresh, and identity tokens) to query your match history
• Match history data including performance statistics (kills, deaths, assists, combat score, etc.)
• Agent selections and map performance data

Information We Never Access

• Account passwords or login credentials
• Payment or billing information
• Personal contact information (email, phone, address)
• Private messages or social features
• Data from non-collegiate matches unless publicly available
• MMR, Elo, or hidden ranking data

How We Use Your Data

• Display individual and team performance statistics for CSU esports teams
• Track CVAL (College VALORANT) match results and trends
• Help players and coaches analyze gameplay for improvement
• Aggregate team-level statistics (win rates, map performance, etc.)

We do not sell, share, or distribute your data to any third parties. Data is used exclusively for the purposes described above.

Third-Party Services

• Riot Games API — Match data is retrieved via the official Riot Games API under our registered application. Riot Games' own privacy policy applies to data processed on their servers.
• MongoDB Atlas — OAuth tokens and cached match data are stored in a secure MongoDB Atlas database with encryption at rest and in transit.
• Netlify — Our frontend is hosted on Netlify. Netlify may collect standard web analytics (IP addresses, browser type) as described in their privacy policy.

Data Retention

OAuth tokens are stored for as long as your account is linked. Match data and performance statistics are retained for the duration of the current collegiate season and may be archived for historical reference.

When you disconnect your account, your OAuth tokens are deleted immediately. Aggregated statistics that have already been computed may remain as part of team-level records.

Your Rights

• Revoke access — You can revoke our access at any time through your Riot Games account settings at account.riotgames.com
• Disconnect — Use the "Disconnect Account" button on our Riot Sign On page to unlink your account and delete stored tokens
• Request deletion — Contact us to request full deletion of all your stored data

Security

All API keys and OAuth secrets are stored server-side and are never exposed in client-side code. Our site uses HTTPS for all communications. Session tokens are cryptographically signed and transmitted via HTTP-only cookies to prevent tampering and cross-site scripting attacks.

Contact

For questions about this privacy policy or to request data deletion, contact the CSU Esports team through Cleveland State University's Washkewicz College of Engineering.