Privacy Policy
Data Controller
- Anthony Guerrero, sole trader (auto-entrepreneur), France
- Email: [email protected]
- The data controller's postal address is available on request via the email above.
Data We Collect
When creating an account
- Email address
- User ID (auto-generated)
- Account creation date
When using the service
- Core balance and transaction history
- Current plan (free or MVP)
- Draft analysis history
- Connection timestamps (security logs)
When making a purchase
- Payment data processed exclusively by Stripe (Wild Rift Core stores no card numbers)
- Stripe customer ID linked to your account
- Transaction history (amount, date, offer type)
Navigation data (analytics)
- Pages visited, session duration, interactions (via Google Analytics)
- Anonymised IP address
- Browser type and device
Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Account authentication and management | Contract performance |
| Billing and subscription management | Contract performance |
| Transactional emails (confirmations, invoices) | Contract performance |
| Service improvement and usage statistics | Legitimate interest |
| Contextual advertising (Journey by Mediavine) | Consent |
| Fraud prevention and security | Legitimate interest |
Sub-processors
| Provider | Role | Country |
|---|---|---|
| Supabase | Database, authentication | Singapore / EU |
| Stripe | Online payments | USA (SCCs) |
| Resend | Transactional emails | USA |
| Cloudflare | Hosting, CDN | USA |
| Google Analytics | Traffic analytics | USA |
| Journey by Mediavine | Ad network and its programmatic partners | USA |
| Google Cloud (Vertex AI / Gemini) | AI analysis generation (draft, Nexus coach, counter sheets) — website and app | United States |
Retention Periods
- Account data: lifetime of account + 3 years after deletion (legal obligations)
- Billing data: 10 years (accounting obligation)
- Connection logs: 12 months
- Analytics data: 26 months maximum
Your Rights (GDPR)
Under the GDPR (EU Regulation 2016/679), you have the right to:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: delete your account and data
- Portability: receive your data in a standard format
- Objection: object to processing based on legitimate interest
- Restriction: temporarily restrict a processing activity
To exercise these rights, contact us at [email protected]. You may also lodge a complaint with your national data protection authority.
WRC Nexus Mobile App
The WRC Nexus mobile app (iOS and Android) is published by the same data controller as this website and uses the same account: an account created on wildriftcore.com works in the app, and vice versa. Everything above (data collected, purposes, sub-processors, retention, your rights) applies to the app, with the following specifics.
Sign-in
- Sign in with email and password, with Google, or with Sign in with Apple (iOS). With Apple you may hide your email address (private relay); in that case the account created is separate from your web account and does not share its Cores or VIP status. The name Apple provides on first sign-in is stored only to display your account.
- Your session is kept on the device (the app's secure storage) until you sign out.
Data stored on your device only
- Usage preferences: role played, language, favourite champions and recent searches, draft in progress (45 minutes), choices made during first launch.
- A local copy of game data (champions, items, runes, tier list, patch notes) for offline use — no personal data.
Data synced with your account (when signed in)
- Favourite champions, coach profile (main role, champion pool), draft history and results, questions asked to Nexus and practice missions, daily chest claims, Cores balance and VIP status — these are the same tables as the website, there is no separate database.
- Draft analyses and Nexus answers are produced by the same engine and sub-processors as on the website (Supabase, Cloudflare, Google Gemini via Vertex AI). Only the draft's champions and the question context are sent, never your identity.
What the app does not do
- No advertising SDK and no third-party behavioural analytics embedded in the app (no Google Analytics, Clarity or ad network inside the app).
- No access to contacts, location, microphone or camera.
- No access to your photos without your action: your photo library is only opened if you choose to attach an end-of-game screenshot to an analysis. The image is sent to Nexus to be read; it is not published, not added to your profile, and not kept after the analysis.
In-app purchases
The app offers in-app purchases (Cores packs and the MVP subscription). Payment is handled by Apple (App Store) or Google (Play Store) depending on your device: we never receive or store any payment card data. The receipt issued by the store is verified by our server before your account is credited; we keep the transaction identifier, the product purchased, the date and the subscription status, linked to your account, as proof of purchase and for accounting obligations. Purchases made on the website are still handled by Stripe as described above.
Deleting your account from the app
Me tab → Delete my account: deletion is immediate and permanent, identical to the one offered on the website (same procedure, same legal retention for billing records). If you signed in with Apple, you can also revoke access from iOS Settings → your Apple ID → Sign in with Apple. Questions: [email protected].
International Transfers
Some sub-processors are established outside the European Union (USA). These transfers are governed by standard contractual clauses approved by the European Commission or equivalent GDPR-compliant certifications.