Privacy Policy

This Privacy Policy explains how Facem (“Facem,” “we,” “us”) collects, uses, stores, and shares personal data when you use facem.gg (the “Service”). Facem is a competitive team league platform for VALORANT players.

1. Who we are

The data controller is Killian Paulic, an individual based in France, operating the Service at facem.gg.

Contact for any privacy question or request: killian@facem.gg.

2. Data we collect

From your sign-in (Discord or Google OAuth)

• Your display name, email address, and profile picture.
• A unique provider identifier and OAuth tokens used to keep you signed in.

From you (profile)

• Your VALORANT Riot ID (e.g. Name#TAG).
• Your declared peak rank.
• Optional social links you choose to add (X, Twitch, Instagram, vlr.gg, tracker.gg).

From your activity on Facem

• Team membership, invitations, and roles.
• Matches you take part in (matchups, map veto picks/bans, scores, results).
• In-match chat messages between captains.
• Reputation ratings you give or receive after matches.

Technical data

• Session tokens, last sign-in time, IP address (in server logs).
• Basic analytics (page views, performance metrics) collected by Vercel Analytics and Speed Insights. We do not use third-party advertising trackers.

3. Riot Games data and Riot Sign-On (RSO)

When you link your Riot account through Riot Sign-On, we access a limited set of data from the Riot Games API solely to verify your Riot identity and to record results from matches you play within the Facem league.

The data we may retrieve and store from Riot APIs:

• Your Riot account identifier (PUUID) and Game Name#TAG.
• Region / shard your Riot account is registered on.
• Match identifiers and match results (final score, map, agents, basic per-player stats) only for matches played within the Facem league. We do not pull or store data from your private VALORANT matchmaking history outside Facem.

We never sell Riot data, never share it with third parties for advertising, and never combine it with data from sources Riot would not approve.

You can disconnect your Riot account from your Facem profile at any time. When you do, we immediately stop fetching any new data from the Riot Games API for your account. Your previously stored Riot identifiers remain attached to your Facem profile so you can reconnect later without losing your history.

If you want your Riot identifiers removed entirely, you have two options:

• Delete your Facem account from your profile settings: within 30 days, all your personal data — including your Riot identifiers — is anonymised (replaced by an internal, non-reversible pseudonym). Past league match results in which your team took part remain on record under that pseudonym, for the competitive integrity of the league. They are no longer personal data of yours.
• Email us at killian@facem.gg requesting removal of your Riot identifiers without deleting your full Facem account. We will action this within 30 days.

4. Why we use your data

• To create and operate your Facem account and team (legal basis: contract).
• To verify your VALORANT identity and record league match results (contract).
• To compute team standings, Facem Points, and reputation (contract).
• To send essential service messages (account, match invitations, security) (contract / legitimate interest).
• To prevent fraud, abuse, cheating, and to enforce our Terms (legitimate interest).
• To improve the Service through aggregated analytics (legitimate interest).

5. Who we share your data with

We only share data with service providers that help us run Facem, and only to the extent they need. We do not sell your personal data.

• Vercel — hosting, edge runtime, analytics, blob storage for uploaded team logos.
• Our managed PostgreSQL provider — primary database storage.
• Discord and Google — to authenticate you when you sign in with those providers.
• Riot Games — to verify your Riot identity through RSO and retrieve match data from the official Riot Games API.

We may disclose data if required by law, court order, or to protect the rights, safety, or property of Facem, our users, or the public.

6. International data transfers

Some of our providers process data outside the European Union (notably in the United States). Where this is the case, transfers are governed by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

7. How long we keep your data

We keep your personal data only as long as we need it to run the Service and meet our legal obligations. Specifically:

• Account data (name, email, profile picture, Facem profile): for as long as your account exists. When you delete your Facem account, your personal data is anonymised within 30 days; we may keep minimal records (a hash of your email) for up to 6 months to prevent re-registration abuse and to honour ban decisions.
• League match history (matches, scores, map veto, ratings given/received): kept for the lifetime of the league for competitive integrity. After you leave Facem, this history is retained under your anonymised pseudonym and is no longer linked to you.
• Riot-derived identifiers (PUUID, Game Name#TAG): kept while your Facem account exists, so you can reconnect after disconnecting without losing your history. They are anonymised within 30 days of you deleting your Facem account (or sooner on explicit request, as described in section 3).
• Server logs and security data: up to 12 months, then deleted.

8. Your rights

If you are in the EU/EEA, under the GDPR you have the right to: access your data, correct it, delete it, restrict or object to processing, receive a copy in a portable format, and withdraw any consent you have given. You can also lodge a complaint with your local data protection authority (in France: CNIL).

To exercise any of these rights, email killian@facem.gg. We will respond within 30 days.

9. Cookies

We use a small number of strictly necessary cookies (mainly a secure session cookie set by NextAuth) to keep you signed in. We do not use advertising or cross-site tracking cookies.

10. Children

Facem is not directed to children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use industry-standard measures (HTTPS, hashed credentials handled by our OAuth providers, role-based database access, regular backups). No method of transmission or storage is 100% secure, but we work hard to protect your data.

12. Changes to this policy

We may update this Privacy Policy. The “Effective date” above will always reflect the latest version. Material changes will be announced in-app or by email.

13. Contact

Killian Paulic — killian@facem.gg — France.