Privacy Policy

brains.gg is an independent Teamfight Tactics analytics website. We are not affiliated with Riot Games, Inc. This policy applies to visitors and signed-in users of brains.gg.

Account data (when you sign in). If you choose to authenticate with Google or Discord, we receive and store:

• A stable account identifier (provider-specific ID, stored as authId).
• Email address, display name, and profile image URL when your provider shares them.
• Account creation timestamp.

We do not receive your OAuth password. Sign-in is handled by Auth.js (NextAuth) with your chosen provider.

Subscription data. When you purchase brains.gg Premium, Paddle (our merchant of record and payment processor) processes payment and sends us subscription events. We store your account ID, Paddle subscription ID, plan/price ID, status, and current billing period end. We do not store full card numbers on our servers.

Product usage data. Depending on which features you use, we may store:

• Saved comps (game, set, comp ID, optional notes) linked to your account.
• Profile refresh rate-limit counters for Premium profile lookups.
• Public TFT match and leaderboard data we ingest from Riot APIs (not tied to your login unless you look up your own profile).

Analytics. When NEXT_PUBLIC_GA_MEASUREMENT_ID is configured in production, we use Google Analytics 4 to collect aggregated usage metrics (pages viewed, approximate geography, device/browser type). GA4 is disabled when that variable is unset (e.g. local development).

Technical logs. Our hosting provider and application may log IP address, request timestamps, and error diagnostics for security and reliability. These logs are retained for a limited period.

• Provide and improve TFT analytics, Premium features, and saved comps.
• Authenticate you and enforce subscription access.
• Process webhooks from Paddle to keep subscription status in sync.
• Measure traffic and product usage (GA4, when enabled).
• Respond to support requests and protect against abuse.

Where GDPR applies, we rely on: (a) contract — to deliver the service and Premium you request; (b) legitimate interests — site security, analytics, and product improvement, balanced against your rights; (c) consent — where required for optional cookies/analytics in your region. You may withdraw consent where applicable without affecting the lawfulness of prior processing.

We use trusted third parties to run the service:

• Paddle — payment processing, invoicing, tax, and customer billing portal (merchant of record).
• MongoDB Atlas — database hosting for users, subscriptions, and saved data.
• Vercel — web application hosting.
• Google / Discord — OAuth sign-in (only if you choose those providers).
• Google Analytics — usage analytics when enabled in production.
• Cloudflare R2 / CDN — static game asset delivery.

We do not sell your personal information. We may disclose data if required by law or to protect our rights, users, or the public.

Account and subscription records are kept while your account is active and for a reasonable period afterward for billing, tax, and dispute resolution. Saved comps are deleted when you remove them or delete your account (contact us). Server logs are rotated on a short schedule. Paddle retains payment records according to its policies and legal obligations.

Depending on where you live, you may have rights to access, correct, delete, or export your data, object to or restrict processing, and lodge a complaint with a supervisory authority. To exercise these rights, email [email protected]. Subscription billing data held by Paddle can also be accessed through the Paddle customer portal linked from Premium.

Our infrastructure and processors may store or process data in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

brains.gg is not directed at children under 13. We do not knowingly collect personal data from children. Contact us if you believe a child has provided us data and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated date. Continued use after changes take effect constitutes acknowledgment.

Privacy questions: [email protected]