← Back

Privacy Policy

Last updated: 3 September 2026

This Privacy Policy explains what information point-one ("we", "us") collects, how we use it, and what choices you have. It applies when you use this website and its related services (the "Service").

1. Who we are

point-one is operated as a small, invite-oriented Valorant tracker. The person or team running the server you are using is the data controller for information processed on that deployment. For requests about your data, contact the site administrator (the same person who invited you or maintains this instance).

2. Information we collect

We collect only what the Service needs to work:

  • Waitlist. If you join the email waitlist, we store the address you submit and the time you signed up so we can invite people in order. We do not use waitlist addresses for marketing.
  • Account and sign-in. If you use Discord, we receive your Discord user ID, username, and avatar hash from Discord's identify scope. If you use Riot Sign On or link a Riot ID, we store your game name, tag, region, and Riot PUUID.
  • Session data. A random session token stored in an HTTP-only cookie so you stay signed in (30-day sliding lifetime). A CSRF token to protect form submissions.
  • Match data. Compact rows for games you have played: match ID, timestamp, map, queue, result, agent, and summary stats (for example K/D/A, ACS, headshot rate). Where enabled, compact round events (kills, plants, defuses) with player positions for the in-site match review.
  • Check-ins. Optional mood or custom survey answers you submit yourself, tied to a date.
  • Preferences. Tracker widget layout and check-in feature toggles you save in your profile.
  • Technical logs. Basic server logs (for example IP address, request time, error messages) needed to operate and secure the Service. We do not use advertising or analytics trackers.

3. What we do not collect

  • Voice or text chat, screen captures, or .vrf replay files.
  • Images stored in our database — avatars are loaded from Discord's CDN using a hash we already have.
  • Other players' private accounts or data you have not authorized.
  • Payment or billing information — the Service is free.

4. How we use your information

We use the information above to:

  • Invite waitlist signups when access opens, in the order they joined.
  • Authenticate you and keep your session secure.
  • Fetch and display your Valorant match history and charts.
  • Store optional check-ins and show how they lined up with your sessions.
  • Remember your tracker and profile settings.
  • Protect the Service against abuse and fix errors.

We do not sell your personal information. We do not use your data for targeted advertising.

5. Legal basis (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we process your data on these bases:

  • Contract. To provide the Service you signed up for.
  • Consent. For optional features such as mood check-ins and linking a game account.
  • Legitimate interests. To secure, maintain, and improve the Service, balanced against your rights.

6. Sharing with third parties

We share information only as needed to run the Service:

  • Riot Games. API requests to look up your account and match history when you link a Valorant account. Riot's own privacy policy applies to data held by Riot.
  • Discord. Only when you choose Discord sign-in; governed by Discord's policies.
  • Hosting. Data is stored on a VPS (currently Hetzner in the EU) operated for this deployment. The hosting provider processes traffic and disk storage on our behalf.

We do not share your personal information with data brokers or ad networks.

7. Cookies

We use essential cookies only:

  • session_token — keeps you signed in (HTTP-only, SameSite=Lax, secure in production).
  • csrf_token — prevents cross-site form abuse.
  • Short-lived OAuth state cookies during Discord sign-in, deleted after the flow completes.

There are no advertising or third-party tracking cookies.

8. Retention

  • Waitlist emails are kept until we invite you, you ask us to remove the address, or we no longer operate the waitlist.
  • Session records are removed when you log out or expire after 30 days of inactivity.
  • Profile, linked accounts, matches, check-ins, and preferences are kept until you ask us to delete your account or we no longer operate the Service.
  • Server logs are kept for a limited period needed for security and troubleshooting, then rotated or deleted.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact the site administrator.

If you are in the EEA or UK and believe we have not handled your request properly, you may also lodge a complaint with your local data protection authority.

10. Security

We use HTTPS in production, HTTP-only session cookies, CSRF protection, rate limiting, and host restrictions appropriate to a small self-hosted deployment. No online service is perfectly secure; use a strong Discord password and do not share your session.

11. Children

The Service is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact the administrator so we can delete it.

12. International transfers

Your data is processed on servers in the European Union for typical deployments. If you access the Service from outside the EU, your information may still be processed in the EU under this policy.

13. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be reflected on this page.

14. Contact

Privacy questions or deletion requests: contact the administrator of this site — the person who invited you or runs this deployment.