Privacy Policy

1. DATA WE COLLECT

VALODEX does not collect, store, or process any personal data you enter into the application. All skin selections, arsenal names, player card choices, and export configurations are stored locally in your browser (localStorage) or encoded into shareable URLs. We never send this information to any server.

However, we use Firebase Analytics (a service provided by Google) to collect anonymous usage data that helps us understand how the app is used and improve it.

2. RIOT ACCOUNT IMPORT

VALODEX offers an optional "Import Riot Account" feature that lets you automatically populate your arsenal with the skins, player card, sprays, buddies, flex, level, and rank you own in Valorant.

HOW IT WORKS

• You sign in to Riot's official login page and are redirected to a URL (the "access URL") that contains a short-lived access token.
• You paste that URL into VALODEX. The app reads the token entirely inside your browser and uses it to call Riot's own game servers to fetch the items your account owns.
• The retrieved items are added to your collection, which stays in your browser like any other selection you make in VALODEX.

SAVED SESSIONS (OPTIONAL)

• If you tick "Remember this account on this device", the access URL is encrypted with AES-GCM and stored in your browser's local storage together with the token's expiry time. This is what lets you switch accounts without signing in to Riot again.
• A saved session never leaves your device and is never sent to VALODEX's servers or any third party. It can only be decrypted inside the same browser profile where it was saved.
• Saved sessions are deleted automatically once Riot's token expires. You can also forget any saved account at any time from the Accounts menu, or by clearing your browser's site data.

WHAT WE DO NOT STORE OR SEE

• We do not store, log, or transmit your access token, access URL, or any Riot credentials on any server.
• VALODEX has no backend that can read your tokens. The import requests go directly from your browser to Riot's servers, never through us.
• We cannot access or view your Riot password, email, or any other account credentials, because they are never entered into or sent to VALODEX.

Anyone with access to the browser profile on which you saved a session may be able to use it while Riot's token remains valid. Only remember accounts on devices you trust, and forget them when you are done. The remaining data after an import is the list of items shown in your arsenal, stored locally on your device. This feature is not affiliated with, endorsed by, or sponsored by Riot Games.

3. WHAT WE TRACK (FIREBASE ANALYTICS)

Firebase Analytics automatically collects the following anonymous information:

• Page views and screen sessions
• App interactions (buttons clicked, features used)
• Skin browsing and collection actions (skins added/removed, filters used)
• Export events (when you export an image, settings changed, template selected)
• General demographic data (country, language, device type), anonymized and aggregated

We do NOT track: your real name, email address, IP address (beyond approximate location), or any personally identifiable information. All analytics data is anonymized and used solely to improve VALODEX.

4. COOKIES

VALODEX does not use cookies for tracking or advertising. Firebase Analytics may use local storage and similar technologies to distinguish unique users, but this data remains anonymous and is not used for cross-site tracking.

5. DATA SHARING

We do not sell, trade, or share your personal data with third parties. Firebase Analytics data is governed by Google's Privacy Policy.

6. CONTACT

If you have any questions about this privacy policy, you can reach out via GitHub.

7. CHANGES TO THIS POLICY

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date.