Privacy Policy
Last updated:
Heimerbuild is a free League of Legends build calculator made by an independent developer in Brazil. This page explains what data is processed when you use heimerbuild.com, why, and by whom. Questions and requests: privacy@heimerbuild.com.
The short version
- You can use Heimerbuild without an account. We don't sell your data and there are no ads.
- Analytics (PostHog) and error reports (Sentry) receive your IP address and browser details. They don't store anything in your browser, and they are never linked to your account.
- If you sign in, Clerk keeps your account: your email address, plus your name and picture if you use Google or Discord.
- Your recent builds and display settings stay in your browser.
When you visit
- Analytics (PostHog). The pages you view and what you do in the calculator, such as the champion you pick, the items you add and what you type in the shop search (cut to 50 characters), along with your browser, device and approximate location (country and city) worked out from your IP address. We use it to learn which features are used and what to improve. PostHog runs in cookieless mode: it stores nothing in your browser and counts visitors with a hash of your IP address and browser that changes every day, so it can't recognise you from one day to the next.
- Error reports (Sentry). When something breaks: the error, the page, your browser and device, and your IP address. Sentry also keeps a replay of up to a minute before an error and the rest of that visit, showing the page layout and where you clicked, with all text masked and images and media blocked. It also measures page speed on some visits. We use it to find and fix bugs.
- Hosting (Cloudflare). Cloudflare serves the site and, like any web host, processes your IP address and the requests your browser makes. Requests handled by our server code, such as pages that don't exist and the forwarding below, are logged with the address requested, the result and the timing.
Analytics and error reports go through heimerbuild.com (/ingest and /monitoring) so ad blockers don't drop them; from there they go to PostHog and Sentry.
When you sign in
Accounts are handled by Clerk. Clerk keeps:
- your email address, and sends the one-time codes for email sign-in;
- if you sign in with Google or Discord: the name, profile picture and account ID they share. We never see your password for those services;
- your sessions: when you signed in, your device and browser, and the IP address and approximate location, so you can see and end active sessions.
We use this to keep you signed in and to tie features to your account, such as the daily limit of AI questions. We don't send marketing email.
When you ask the AI
The Ask feature is not available yet. When it is:
- Your question, and the champion and build it is about, are sent to a third-party AI provider to write the answer: the Google Gemini API or models served through OpenRouter, starting on their free tiers.
- These providers may store your questions and use them to improve their products. On the Gemini API free tier, this can include review by people.
- Heimerbuild doesn't store your questions, only how many you asked each day, to apply the daily limit.
- Please don't include personal data in your questions.
When you email us
Emails to hello@heimerbuild.com and privacy@heimerbuild.com are forwarded to the developer's inbox by Cloudflare Email Routing. We keep them as long as we need to answer you.
What is stored in your browser
- Heimerbuild saves a few things in your browser so the app remembers them: your recent builds and display choices such as the shop grouping, the combo view and whether the champion list is expanded. A timestamp in session storage stops the page from reloading in a loop after an update. None of this is sent anywhere, and you can clear it in your browser settings.
- When you sign in, Clerk sets the cookies that keep you signed in and protect sign-in from abuse. Sign-in can't work without them.
- There are no advertising or tracking cookies, which is why there is no cookie banner. If that changes, we will ask you first.
Other services your browser contacts
To show the site, your browser loads fonts from Google Fonts and champion and item images from Riot Games' Data Dragon and CommunityDragon. Like any website you visit, they receive your IP address and browser details.
Who processes your data
- Cloudflare (worldwide): hosting, request logs, email forwarding (Email Routing) and email spoofing protection (DMARC Management). Privacy policy
- PostHog (United States): analytics. Privacy policy
- Sentry (United States): error reports and replays. Privacy policy
- Clerk (United States): accounts and sign-in. Privacy policy
- Google (Gemini API) and OpenRouter (United States): answering AI questions, when available. Gemini API terms, OpenRouter privacy
Each one handles data under its own privacy policy. Because most of them are in the United States, your data may be processed outside your country.
How long data is kept
- Your account: until you delete it.
- Analytics, error reports and logs: for the limited time each service keeps them, then deleted.
- AI question counts: only as long as the daily limit needs them.
- Emails: as long as we need to answer you.
Why we can process it
Under Brazil's LGPD and Europe's GDPR, every use of personal data needs a legal basis:
- analytics, error reports, hosting and security rely on our legitimate interest in running and improving a free service, using as little data as we can;
- your account and the AI answers are needed to provide the features you ask for.
Your rights
Wherever you live, you can ask to access, correct, export or delete your data, and to object to or limit how we use it. Under the LGPD and the GDPR these are your legal rights.
- You can delete your account yourself at any time: open the account menu (your picture, top right), then Manage account, Security, Delete account. This removes your account from Clerk.
- For anything else, email privacy@heimerbuild.com. We will answer within 15 days.
- Analytics and error reports aren't tied to your name or account, so we may not be able to find the ones about you.
- You can also complain to your data protection authority (in Brazil, the ANPD).
Children
Heimerbuild is not meant for children under 13, and they shouldn't create an account. If you think a child has given us personal data, email us and we will delete it.
Changes
When what we collect changes, we update this page and the date at the top. If a change matters, we will say so on the site.
Contact
Heimerbuild's developer is responsible for your data: privacy@heimerbuild.com.
