Privacy Policy

GiBiSociety ('we', 'us', 'our') operates GiBiArena (gibiarena.com), a fan-made strategy and statistics platform for League of Legends and Clash of Clans. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it, in compliance with EU Regulation 2016/679 (GDPR) and applicable Italian law. By using GiBiArena you accept this policy. If you do not agree, please stop using the platform.

The data controller is GiBiSociety, a private individual based in Italy. Contact: service@gibiarena.com. We will respond to data-rights requests within 30 days.

We collect the following categories of data:

• Account data: email address and hashed password when you register.

• Profile data: in-game usernames (Riot ID, Clash of Clans player tag) you optionally link to your account.

• Usage data: pages visited, features used, session duration — collected via Vercel Analytics in anonymised, aggregate form.

• Match data: publicly available match history fetched from the Riot Games API and Clash of Clans API to compute champion and troop statistics. We do not store raw match data beyond what is needed for aggregation.

• Payment data: if you purchase a premium feature, billing is handled by Stripe. We never see or store your full card number.

• Cookie data: see Section 6 below.

We process your data to:

• Provide and improve the service (legitimate interest / contract performance).

• Authenticate your account (contract performance).

• Display personalised statistics and recommendations (legitimate interest).

• Show advertising via Google AdSense and Brave Ads (consent, where required).

• Comply with legal obligations (legal obligation).

We share data with the following processors under appropriate agreements:

• Supabase (database hosting, EU region)

• Vercel (hosting and analytics)

• Stripe (payment processing)

• Google AdSense (advertising, requires your consent)

• Riot Games API (public match data)

• Supercell API (public player data)

We do not sell your personal data to any third party.

We use the following cookies:

• Strictly necessary: session authentication, CSRF protection. These cannot be disabled.

• Analytics: Vercel Analytics — anonymised and aggregate, no personal data.

• Advertising: Google AdSense sets cookies to show relevant ads. These are activated only after you give explicit consent via our cookie banner.

You can withdraw or change your consent at any time using the 'Cookie Settings' link in the footer.

We retain your account data for as long as your account is active. If you delete your account we erase your personal data within 30 days, except where a longer retention period is required by law. Aggregate, anonymised statistics are retained indefinitely.

Under the GDPR you have the right to: access your data, correct inaccurate data, request erasure, restrict processing, data portability, and object to processing. You also have the right to lodge a complaint with your national supervisory authority (in Italy: Garante per la Protezione dei Dati Personali — www.garanteprivacy.it). To exercise any right, email service@gibiarena.com.

We implement technical and organisational measures to protect your data, including TLS encryption in transit, bcrypt password hashing, Row-Level Security on the database, and restricted API key access. No system is 100% secure; please notify us immediately if you suspect a breach.

GiBiArena is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have done so, contact us and we will delete the data promptly.

We may update this policy. Material changes will be notified via a banner on the site. The date at the top of this page always reflects the latest version.