Privacy Policy

Who we are

Mystero.gg (“we”, “us”) provides League of Legends profile tools, quests, cosmetics, and related features. Publisher and host details: Legal information. Contact: Contact or mystero@mystero.gg.

What we collect

• Account data: email, username, password hash, and verification status.
• Riot-linked data: Riot ID, PUUID, platform, profile icon, summoner level, ranked entries, champion mastery, and recent match summaries we cache to power quests and profiles.
• Gameplay / economy on Mystero.gg: quest progress, badges, showcase, Mystero Coins ledger, shop cosmetics, pacts, and daily/weekly quest entries.
• Support: messages you send through Contact (topic + message + your account email for replies).
• Technical logs: IP addresses, user agent, timestamps, and security audit events as needed to run and protect the service.

We do not process or store payment card numbers on Mystero.gg. Card payments go through Stripe. Virtual Mystero Coins are not real-world currency and are not sold.

Why we use data (purposes)

• Create and secure your account (including email verification and optional two-factor authentication).
• Claim ownership of a Riot profile and sync Riot API data into your Mystero.gg cache.
• Track quests, rewards, cosmetics, leaderboards, and live/profile features.
• Prevent abuse (rate limits, claim review, soft-disable, audit logs).
• Respond to support requests you submit.
• Process paid orders (Supporter and shop cosmetics) and send receipts.

Legal bases (EU / GDPR)

Where GDPR applies, we typically rely on:

• Contract - providing the service you signed up for.
• Legitimate interests - security, fraud prevention, product improvement, and keeping caches fresh.
• Consent - where required (e.g. certain optional cookies if we add non-essential analytics later).
• Legal obligation - when we must retain or disclose information.

Cookies

Mystero.gg uses essential cookies for signed-in sessions and CSRF protection. We do not currently use advertising trackers. If that changes, we will update this policy and surface an appropriate notice.

Sharing

We share data only as needed to operate Mystero.gg, for example:

• Riot Games API (to fetch public game data you ask us to sync).
• Hosting / database providers that run the Mystero.gg infrastructure (see Legal).
• Email delivery providers for verification, password reset, and contact routing.
• Stripe, to take payment and manage subscriptions. Stripe’s privacy policy applies to data they process as a payment provider.

We do not sell your personal data.

Retention

Account and profile data are kept while your account is active. Unclaiming a Riot profile resets Mystero.gg progress on that claim. For 24 hours that Mystero.gg account cannot claim, and nobody can claim that Riot ID. Deleting the account from Account settings removes the data we store for it and cancels an active supporter subscription. Cached match and rank data may be refreshed or pruned as part of normal operations. Security logs are kept for a limited period for abuse investigation.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing. Use Contact and choose Data access request (GDPR). You may also lodge a complaint with your local data protection authority. In France that is the CNIL (cnil.fr).

Children

Mystero.gg is not directed at children under 16 (or the digital consent age in your country). Do not create an account if you are under that age.

Riot Games

Mystero.gg isn't endorsed by Riot Games and doesn't reflect the views or opinions of Riot Games or anyone officially involved in producing or managing Riot Games properties. Riot Games, and all associated properties are trademarks or registered trademarks of Riot Games, Inc.

Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use of Mystero.gg after updates means you accept the revised policy.