Privacy Policy

1. Scope

This policy explains how CoachDiff handles personal data when you use the website, create an account, connect a Riot ID, or request a replay review.

2. Data we collect

• Account data: your email address, display name, password hash when you set a password, Google account identifier when you use Google sign-in, account dates, and review balance.
• Session and security data: hashed session tokens, CSRF protection data, sign-in attempts, expiration times, and basic request data used to protect the service.
• Riot account data: Riot ID, PUUID, region, profile icon, level, rank, match history, favorites, and your chosen main account.
• Match and replay data: Riot match and timeline responses, replay files, recordings, extracted gameplay observations, processing logs, and job status.
• Review data: matchup plans, timestamped coaching insights, evidence references, and final game reviews.
• Billing data: Stripe customer and subscription identifiers, payment-event identifiers, plan state, and review-credit transactions.
• Analytics and session replay data: page activity, clicks, referral source, device and browser details, typed non-password form values, rendered account and Riot data, billing state, coaching content, media, and other content shown during a recorded browser session. Password fields remain masked.

We do not store your plain-text password, Google access or refresh tokens, or full payment-card details. Stripe collects and processes payment details on its hosted pages.

3. How we use data

We use this data to:

• create and secure your account and browser session;
• find Riot accounts and show match history;
• queue, process, deliver, and support replay reviews;
• save your main Riot account and favorites;
• process purchases, maintain subscriptions, and enforce review credits;
• detect abuse, diagnose errors, and improve service reliability; and
• comply with legal duties and enforce our terms.

4. Where data comes from

Data comes from you, from Google when you choose Google sign-in, from Riot Games APIs and replay systems, and from your use of CoachDiff. Google and Riot Games handle data under their own terms and privacy notices.

5. Sharing and service providers

We do not sell your personal data. We may share only the data needed with service providers that host the app, authenticate your chosen Google account, measure website traffic through Google Analytics, store product analytics and browser session replays through PostHog, process payments through Stripe, protect the service, or generate coaching output. These providers may process data for CoachDiff under their own security and privacy duties. We may also disclose data when law requires it or to protect rights, safety, and service integrity.

6. Storage and retention

Account records, server-side sessions, account preferences, job records, match data, and delivered reviews are stored on CoachDiff systems. The worker removes its local temporary replay media after verified delivery by default. A delivered review bundle can retain recordings and evidence needed to show the review. Completed review data, security records, and backups can also remain for service, safety, and legal needs.

CoachDiff does not yet publish fixed retention periods. We will not keep data longer than reasonably needed for the uses in this policy and will update this policy as those periods become fixed.

7. Security

CoachDiff uses password hashing, server-side sessions, secure production cookies, CSRF protection, rate limits, and access controls. No system can guarantee complete security.

8. Your choices

You can change your main Riot account and favorites in the product. Email the contact below to request access, correction, or deletion of your account data. Some records can be kept when law, security, fraud prevention, or an unresolved dispute requires it.

9. Children

CoachDiff is not directed to children under 13, and children under 13 may not create an account. If we learn that we collected a child's personal data, we will delete it. A parent or guardian can use the contact below to request deletion.

10. Changes and contact

We may update this policy as CoachDiff changes. We will post a new effective date and give suitable notice for material changes. Email privacy@coachdiff.com for privacy questions or requests.

11. Riot Games notice

CoachDiff isn't endorsed by Riot Games and doesn't reflect the views or opinions of Riot Games or anyone officially involved in producing or managing Riot Games properties. Riot Games, and all associated properties are trademarks or registered trademarks of Riot Games, Inc.