Privacy Policy

1. How We Collect and Use Information

PivotTFT has no reader accounts, sign-up or contact forms, or newsletters. You can read everything on the site without telling us who you are.

To deliver a page, our server has to receive your IP address and the page you asked for. We use this only to send you the page; we do not write it to log files or keep it.

Cloudflare, which delivers the site, counts visits for us with Cloudflare Web Analytics. For visitors outside the European Union it adds a small script to each page, loaded from static.cloudflareinsights.com. Once the page has loaded, the script reports to Cloudflare how fast it loaded, along with the page's address and the page you came from; Cloudflare adds your country, worked out from your IP address, and your browser, operating system and kind of device, read from what your browser sends. The script sets no cookies, keeps nothing in your browser, and is not used to identify you or follow you across websites. We see only totals, such as page views per day, per page or per country. Visitors in the European Union do not get the script.

The people who write the tier lists sign in to a private editor. For them we store an email address, a display name if they give one, a salted password hash, and a record of when they sign in and of the changes they make, so the editor can be run securely. When a sign-in fails, the server keeps the IP address it came from in memory for 15 minutes to stop password guessing, and never writes it down.

Champion, item and augment images come from CommunityDragon, but our server fetches them for you, so CommunityDragon never receives your IP address.

The team builder keeps the board you build only in the page's address (the part after the #), which your browser does not send to our server. A team code you paste into it is turned into that board in your browser too. Nothing about it is stored.

The Copy link and Copy team code buttons put a link or a team code in your clipboard when you press them. The site never reads your clipboard and sends nothing anywhere.

2. Cookies

Three cookies are set on this site:

• pivottft_view, set by PivotTFT when you switch the comp tier list between list and grid. It remembers your choice so the list opens that way. Kept for one year.
• cf_clearance, set by Cloudflare, which delivers and protects the site. It records that your browser passed Cloudflare's automated bot check, so you are not checked again on every visit. Kept for one year.
• FCCDCF, set by Google's consent tool, which loads with Google's AdSense script (see section 3). It holds a random identifier and a time. Kept for 13 months.

The site also keeps copies of the comps list (pivottft_comps_cache_v2) and the item and augment lists (pivottft_tiers_cache_v1) in your browser's local storage so pages load quickly. Editors who sign in also keep a sign-in token there.

The first two cookies and the local storage contain no personal data and are not used to track you. They are needed for something you asked for or for the site's security, so they do not require your consent. Google lists the cookies it uses at business.safety.google/adscookies.

3. Sharing Your Information

We do not sell or rent personal information. Two other companies receive data when you use the site. Cloudflare carries traffic to our server, protects it from attacks and counts visits (see section 1). Google's AdSense script loads with every page while Google reviews the site for AdSense; it is set not to request or show ads, and none appear on the site. Loading it gives Google the details any web request carries, such as your IP address and browser; the script can also see which page you are on, and Google's consent tool sets the FCCDCF cookie described in section 2. Each company processes that data under its own privacy policy (Cloudflare, Google), and Google may do so in the United States under the EU-US Data Privacy Framework. We will disclose information only if the law requires it.

4. How We Store and Protect Your Information

The site runs on our own server in the European Union, and copies of its database are kept on that server and on our own computer, also in the European Union. All traffic is encrypted with HTTPS, access to the server is restricted, and editor passwords are stored only as salted hashes.

5. Your Choices About Your Information

You can delete the cookies and local storage in your browser settings at any time. The site keeps working: the comp tier list opens as a list again and Cloudflare may check your browser again.

6. Do Not Track

PivotTFT does not track you across websites. Google's script (see section 3) does not change what it does for a Do Not Track signal.

7. Children's Privacy

The site is a general-audience game guide and is not directed at children under 13. We do not knowingly collect personal information from children; if you believe a child has sent us some, contact us and we will delete it.

8. California Privacy Rights

We do not sell personal information or share it for advertising, and we do not collect sensitive personal information. California residents may ask what personal information we hold about them and ask us to delete it, and will not be treated differently for doing so.

9. Other States' Privacy Rights

Residents of other US states with privacy laws have the same options: ask what we hold, ask for a correction or deletion, and appeal a decision by writing to us again.

10. Users in the European Union and the United Kingdom

Cloudflare Web Analytics (see section 1) does not run for visitors in the European Union. Where it runs, we use it on the basis of our legitimate interest in knowing how many people read the site and how fast its pages load (GDPR art. 6(1)(f)).

We process editors' data, and the IP address of a failed sign-in, on the basis of our legitimate interest in running the editor securely, and load Google's script on the basis of our legitimate interest in having the site reviewed for AdSense (GDPR art. 6(1)(f)). Under the GDPR you can ask to access, correct or delete your personal data, restrict or object to its processing, and receive it in a portable form. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the authority where you live.

11. Data Retention

Our server does not store page requests. Cloudflare keeps the Web Analytics figures for six months, and after the first seven days only a sample of about one in ten. The IP address of a failed sign-in is kept in memory for 15 minutes. Editor accounts are kept until the account is removed, and the database backups that include them are deleted after 30 days. Cookies are kept for the times listed in section 2.

12. Links to Third-Party Websites and Services

The site links to other websites. We are not responsible for their content or how they handle your data; read their privacy policies before sharing anything with them.

13. Contact Us

For questions about this policy or to make a request about your data, email [email protected].

14. Governing Law

This policy is governed by the law of Bulgaria and the European Union. This does not take away any protection you have under the law of the country where you live.

15. Changes to the Privacy Policy

We may update this policy. The new version is posted on this page with a new effective date.