Privacy Policy
Last updated June 28, 2026
Who we are
Pepega (“we”) is a League of Legends duo-finder and player profile site at pepega.lol. This policy covers the data we process when you use it.
What we collect
- Riot identity. You sign in with Riot Sign-On (Riot Games' official login). We store your Riot ID (game name + tag), region, and a Riot account identifier (PUUID) used only server-side to fetch your data — it is never shown on the site or in URLs.
- Public League data. We fetch and cache public data from Riot's API: rank, champion mastery, and recent match history.
- Profile details you add. Bio, roles, playstyle and mentality tags, languages, availability, voice preference, and optional social links (Discord handle, Twitch, X) — all of which you control.
- Activity on Pepega. Duo listings, pact requests and pacts, direct messages, post-game ratings you give and receive, and reports you file or receive.
- Minimal technical data. A signed session cookie, a region preference, and privacy-respecting first-party product analytics. See Cookies.
How we use it
- To run the core product: match you with duos, show profiles, deliver messages, and compute your honor score.
- To keep the platform safe: detect abuse, action reports, and enforce blocks and the honor system.
- To improve Pepega using aggregate, first-party analytics.
What we don't do
We don't sell your data or share it with advertisers. We don't display hidden MMR. We don't expose internal Riot identifiers (PUUIDs) anywhere public. We don't run third-party advertising trackers. Your direct messages are private to you and the recipient; we don't read them except as strictly needed to keep the platform safe (e.g. an automated, informational toxicity flag).
Who can see your data
Your public profile is visible per your visibility setting (public, verified-only, or private). Public League data (rank, champions, matches) is public game data. Your email (if any), session, reports you file, and message contents are never shown to other players. Reports are anonymous to the reported user.
Service providers
We use Riot's API (League data), our hosting and database providers (to run the app), and — if you opt into the email digest — an email provider to deliver it. These process data only to provide the service.
Your rights & control
- Access & visibility. Set your profile public, verified-only, or private anytime.
- Block & mute. Cut off or silence any player from Settings or a conversation.
- Notifications. Per-type controls and an off-by-default email digest with one-click unsubscribe.
- Erasure. Permanently delete your account and associated data (profile, listings, pacts, ratings, messages) from Settings. This is irreversible.
- EU/UK users (EUW/EUNE). You have the right to access, correct, export, and erase your personal data under GDPR/UK GDPR. Account deletion satisfies the right to erasure; email us for access or export requests.
Data retention
We keep your data while your account is active. When you delete your account, we remove your personal data; some content may be retained in anonymized form or where required for safety or legal reasons.
Children
Pepega isn't directed to children under 13 (or the minimum age in your country), consistent with Riot's requirements.
Contact
Questions or data requests? Email privacy@pepega.lol.