Draft 0.1 · 9 October 2026. This is a draft under review and not yet in effect.

Privacy Policy

Who we are

LetMeScry.lol (letmescry.lol; letmescry.com redirects there) is run by [owner: a private individual or a company, and the country]. Questions and requests about your data: [owner: contact address].

This policy covers the website. The let me scry desktop app for ARAM Mayhem is not released yet; it will get its own notice before release.

Browsing without an account

• No analytics, advertising or tracking. We don’t keep logs of individual visits.
• Some images (for example augment icons) load directly from CommunityDragon (raw.communitydragon.org), so your browser sends them your IP address, as with any image on the web.
• Your display settings (theme, time zone, cards per row, filters) are saved in your browser’s local storage and never sent to us.

With an account

• Sign-in: your email address. If you sign in with Google, also your Google account id and the name on your Google profile. If you set a password, we store only a scrypt hash of it.
• Cookies: a sign-in cookie that lasts 30 days, plus two short-lived security cookies (1 hour and 10 minutes). They are needed for the site to work; there are no other cookies.
• Email links: one-time links to verify your address, sign in or reset your password. They expire and are only used once.
• Your collection: the skins and chromas you wishlist or mark as owned, and your wishlist order.
• Sharing (optional): your wishlist can be opened by anyone with its link, by signed-in users only, or by nobody — you choose on your account page (the default is “anyone with the link”). If you add your Riot ID and server so friends can gift you skins, the link becomes a readable /profile/<server>/<name> address showing that Riot ID.
• Screenshot import (optional): screenshots of your collection are processed in your browser and never uploaded. We receive only the skins you confirm and, for cards you corrected, a tiny 12×18-pixel thumbnail of the skin art to improve matching.
• Sale alerts: when a wishlisted skin goes on sale we email you, and we record which alerts we sent so we don’t repeat them. [owner: add a way to turn these off]

Why we use it

To provide the features you sign up for (GDPR Art. 6(1)(b)) and to keep the site and accounts secure (Art. 6(1)(f), legitimate interests). We don’t sell your data, show ads or build profiles for anyone else. [lawyer: confirm the legal basis for sale alerts and screenshot thumbnails]

Who else handles it

• Hetzner Online GmbH hosts the site; our server is in Helsinki, Finland (EU).
• Google, only if you choose to sign in with Google.
• [owner: email provider] delivers our emails.

Your data is stored in the EU. [lawyer: the operator’s access from outside the EU; an EU representative under GDPR Art. 27]

How long we keep it

Account data stays until you delete your account. Sign-in sessions end after 30 days, email links when they are used or expire. When you ask us to delete your account, we delete it within 30 days [owner: confirm].

Your rights

You can ask to see, correct, export or delete your data, restrict or object to how we use it, and withdraw any consent. Write to [owner: contact address]; self-service deletion is not available yet. You can also complain to your local data protection authority.

Children

The site is not meant for children under 16.

Changes

If we change this policy, we update the date at the top; for important changes we also email account holders.