This policy explains what Vouchant (“we”, “us”) collects, why, and the choices you have. Vouchant is an independent trust tool for the Valorant community and is not affiliated with or endorsed by Riot Games.
The short version
- We never collect your Riot password. Ownership is proven on Riot’s own login page; your credentials never touch our servers.
- We collect only what is needed to run your account, your connections, and your proof links.
- We do not sell your data. We do not run advertising trackers.
- You can delete your account and all associated data at any time.
What we collect
- Account identity. If you sign up with email and password, we store your email address and a one-way hash of your password (never the password itself). If you sign in with Google or Discord, we store the identity and OAuth tokens those providers return.
- Riot account data. After you authenticate on Riot’s own login, we store a snapshot of the public account data needed to build a proof (e.g. Riot ID, region, level, inventory items, restriction status) and a Riot-verified identifier (PUUID). We do not receive or store your Riot password.
- Proof links. The signed proof payloads, signatures, and visibility/revocation state for links you create.
- Technical data. Session cookies to keep you logged in, and limited request metadata (such as a derived key) used for rate limiting and abuse prevention.
How we use it
- To authenticate you and operate your dashboard and connected accounts.
- To generate, display, and verify the proof links you create.
- To keep the service secure — rate limiting, fraud and abuse prevention.
- To respond to your support and legal requests.
Who we share it with
We share data only with the infrastructure providers needed to run Vouchant, acting on our instructions:
- Hosting & database — our cloud hosting and managed Postgres providers.
- Sign-in providers — Google and Discord, if you choose to sign in with them.
- Riot Games — for the ownership-verification flow you initiate.
A public proof link displays the account data contained in that proof to anyone who has the link. You control whether a link is public, private (owner-only), or one-time, and you can revoke any link at any time from your dashboard.
Data retention
We keep your data while your account is active. When you delete your account, your user record and all data linked to it — connected Riot accounts, proof links, and sessions — are permanently removed. Some records may persist briefly in encrypted backups before rotating out.
Your rights
Depending on where you live (for example under the GDPR or CCPA) you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:
- Delete everything yourself from your dashboard — the “Delete account” control removes your account and all associated data.
- Contact us for any other request at privacy@vouchant.space.
Cookies
We use a strictly-necessary session cookie to keep you signed in, plus small browser-local preferences (theme, video mute). We do not use advertising or cross-site tracking cookies. See the Cookie Policy for the full list.
Children
Vouchant is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.
Changes
We may update this policy as the product evolves. Material changes will be reflected by the “Last updated” date above.
Contact
Questions or requests: privacy@vouchant.space.