Legal
Privacy Policy
Last updated: 2026-09-20. This policy explains how Nordic Daggers eSport processes personal data when you use the player portal. We follow the EU General Data Protection Regulation (GDPR, 2016/679) and the Swedish Data Protection Act (2018:218).
Sammanfattning på svenska
- Ansvarig: Hugo Caesar, privatperson i Sverige. Kontakta oss via Discord (se avsnitt 1).
- Uppgifter vi sparar: ditt Discord-ID, användarnamn, visningsnamn och profilbild, ditt Riot-ID (League of Legends-namn, samt ett frivilligt andra konto), din roll, lag och lane, dina tillgänglighetssvar, när du senast öppnade portalen, samt vilka scrims/matcher du lagt upp via Discord-botten. Statistiksidan räknar ut hur ofta varje medlem svarat i kalendern och vem som lagt upp eller avbokat matcher; inget extra sparas för det. Inför en match kan en admin eller coach sätta ihop en uppställning (vem som spelar vilken lane) med ditt Riot-ID, som skickas till motståndarlaget. Motståndarlagens uppställningar (in-game-namn och lane) hämtas av servern från ligans delade roster-ark (Google Sheets) några gånger per dygn; de sparas i högst 12 månader och syns bara för laget.
- Varför: för att driva lagets stängda portal och planera träningar och matcher (berättigat intresse, art. 6.1 f).
- Vem ser det: bara inloggade, whitelistade lagmedlemmar. Inget är publikt. Vi säljer inget, har ingen reklam och ingen spårning.
- Hur länge: tillgänglighetssvar raderas efter 60 dagar, matcher efter 12 månader, allt annat raderas automatiskt när du tas bort från laget.
- Dina rättigheter: ladda ner dina uppgifter på /api/me/export, radera dina tillgänglighetssvar själv, eller be oss radera allt. Du kan klaga hos Integritetsskyddsmyndigheten (IMY).
Den fullständiga policyn nedan är på engelska. Fråga oss på Discord om något är oklart.
1. Who is responsible (data controller)
Hugo Caesar, a private individual running the site for the ND eSport team, Sweden. This site is run privately and not by a company or association. You can reach the controller via:
- Discord: join our Discord server and send a direct message to @hugomolvackt.
2. What data we process, why, and on what legal basis
| Data | Source | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Discord user ID | Discord, when you log in | Identify you and check whether you are on the team whitelist | Legitimate interest (Art. 6(1)(f)) — running a members-only team portal |
| Discord username and display name | Discord, when you log in | Show who is logged in inside the portal | Legitimate interest (Art. 6(1)(f)) |
| Discord avatar URL | Discord, when you log in | Show your profile picture inside the portal | Legitimate interest (Art. 6(1)(f)) |
| Whitelist entry: your Discord ID, an optional short note written by the admin who added you (e.g. “new jungler”), which admin added you and when | A team admin, before or after your first login | Decide whether you may enter the portal; let admins see who they have invited | Legitimate interest (Art. 6(1)(f)) |
| Availability (which hours you marked as can play / maybe / can’t) | You, in the Availability calendar | Plan scrims and matches; shown to other whitelisted team members | Legitimate interest (Art. 6(1)(f)) — coordinating the team |
| Discord ID, username, display name and avatar (stored copy), and the time you last opened the portal | Discord, saved when you open the portal | Show your name next to your availability in the team view; show admins who is active | Legitimate interest (Art. 6(1)(f)) |
| Team role (admin / manager / coach / player / substitute), team and lane | Set by a team admin or manager (only an admin can make someone admin or manager) | Organise the roster; shown to other whitelisted members | Legitimate interest (Art. 6(1)(f)) — running the team |
| League of Legends Riot ID (name#tag), plus an optional second Riot ID for a secondary account | You, or a team admin or manager | Identify you in game for scrims and reviews; shown to other whitelisted members with a link to the public op.gg profile. The secondary account is only sent to opponents when the admin or coach picks it in Prep | Legitimate interest (Art. 6(1)(f)) — running the team |
| Scrim and match events: title, opponent, time, notes, the opponent’s roster as free text (in-game names), and the Discord name of the member who posted or cancelled the event | Our Discord bot, when a member creates or cancels a match in Discord | Show the schedule in the portal and prepare for games | Legitimate interest (Art. 6(1)(f)) — scheduling and preparing for games |
| Opponent teams: team name and, for each of their players, lane and Riot ID(s) (in-game names) | The league’s shared roster sheet (Google Sheets, viewable by link), which our server re-reads every few hours from a link an admin or coach saved. Only team names, lanes and Riot IDs are kept; everything else in the sheet is discarded | Prepare for games: line up who we face in each lane and open the op.gg multi-search for them | Legitimate interest (Art. 6(1)(f)) — preparing for games |
| Team statistics derived from the data above: per member, how many scrims/matches you answered the calendar for and how many hours you marked as can play / maybe / can’t; how many events you posted or cancelled; team results and best hours to book | Calculated on the fly from your availability answers, the roster and the bot’s events. Nothing extra is stored. | Show the team how well the calendar is filled in and when most players can play, so scrims can be booked at good times | Legitimate interest (Art. 6(1)(f)) — coordinating the team |
| IP address, browser type, request logs | Your device, automatically | Security, abuse prevention and keeping the service running | Legitimate interest (Art. 6(1)(f)) |
We request only the identify scope from Discord. We do not receive your email address, your Discord friends, servers, or messages. You are not required by law or contract to give us any data, but the portal cannot work without a Discord login. We make no automated decisions with legal effect about you — the whitelist is a simple list maintained by hand.
Opponent players: match events and imported opponent teams may list the in-game names (Riot IDs) and lanes of players on other teams. These come from public match announcements or from the league’s shared roster sheet, are visible only to our whitelisted members, and are deleted with the event, when your team leaves the league sheet, or 12 months after the last sync. If you are an opponent player and want your name removed, contact us.
3. Where your data is stored and for how long
- Your login session is stored in an encrypted cookie in your own browser. It expires 7 days after your last visit (it is renewed while you use the portal) or when you sign out. We do not keep a copy of your session on our servers.
- Your whitelist entry, the stored copy of your Discord name and avatar, your Riot ID, role, team and lane are kept in a database on our server in Sweden for as long as you are a member of the team. When an admin removes you from the whitelist, all of it is deleted automatically, and your name is removed from any match events you posted.
- Availability answers older than 60 days are deleted automatically. You can also delete all of them yourself at any time.
- Scrim and match events, including opponent rosters, are deleted 12 months after the event. Opponent teams are deleted when they disappear from the league sheet, 12 months after they were last synced, or when an admin or coach deletes them.
- Server request logs, if enabled by our hosting provider, are kept for at most 30 days for security purposes.
- Database backups are kept in the EU/EEA for at most 30 days, so deleted data disappears from backups within that time.
- The service is hosted on Oracle Cloud Infrastructure (Oracle Corporation) in the eu-stockholm-1 region, so the server and database are physically located in Sweden (EU/EEA).
4. Who we share data with
- Discord Inc. (USA) — provides the login. When you click “Login with Discord” you are sent to Discord, which processes your data under its own privacy policy. In addition, profile pictures inside the portal are loaded directly from Discord’s servers (cdn.discordapp.com), so your IP address is sent to Discord each time you open a portal page. Discord is certified under the EU-US Data Privacy Framework, which the EU Commission has found to provide adequate protection.
- Other whitelisted team members — can see your name, avatar, Riot ID, role, team, lane and availability answers inside the portal. Nothing is visible to the public.
- Oracle Corporation (Oracle Cloud Infrastructure) — hosts the server and database in Oracle’s Sweden region as our data processor, under Oracle’s Data Processing Agreement. Oracle is a US company. Data stays in the EU, but if Oracle staff outside the EU need access for support or operations, that transfer is covered by Oracle’s EU-approved Binding Corporate Rules for processors and by the EU-US Data Privacy Framework.
- Opposing teams — before a scrim or match, the admin or coach normally sends the other team our lineup: the Riot ID (in-game name) of each player and which lane they play, plus an op.gg multi-search link built from those Riot IDs. If you have a secondary account on file, the admin or coach chooses per match whether to send your main account, the secondary one or both. This is the same information the opponent would see in the game lobby. The admin or coach sends the text and link to the opponent by hand (usually on Discord). Riot IDs are public in-game names; your Discord name is never included.
- Google Sheets — our server downloads the league’s shared roster sheet from Google a few times a day. Google receives that request from our server, not from your browser, and nothing about you is sent with it.
- op.gg — only if you click a Riot ID link or an op.gg multi-search link from the Prep page. That opens op.gg’s public site in a new tab under op.gg’s own privacy policy. We send nothing to op.gg ourselves.
We do not sell personal data, use advertising networks, or use third-party analytics.
5. Your rights
Under the GDPR you have the right to:
- Access the data we hold about you (Art. 15). While logged in you can download it at any time from /api/me/export.
- Rectification of incorrect data (Art. 16) — your name and avatar come from Discord, so change them there. Your Riot ID and secondary account you can edit or remove yourself on the portal home page.
- Erasure (Art. 17) — signing out deletes your session cookie immediately. You can delete all your availability answers yourself from the Availability page. To have everything else deleted, ask any admin to remove you from the whitelist, or contact us.
- Restriction of processing (Art. 18) and objection to processing based on legitimate interest (Art. 21).
- Data portability (Art. 20) — the export above is in machine-readable JSON.
- Lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY): www.imy.se, or the authority in your own EU country.
To exercise any right, contact us through one of the channels listed in section 1. We respond within one month.
6. Cookies
We only use strictly necessary cookies for the login to work. See the cookie information.
7. Age
You must be at least 13 years old to use Discord and this portal (the Swedish Data Protection Act sets 13 as the age limit for children online). We have weighed the interests of younger members when choosing what to store: only game-related data, visible only to the team, with short retention periods.
8. Security
All traffic is encrypted with HTTPS. Session cookies are encrypted, HttpOnly and SameSite-restricted. Only team administrators can change who may log in (the whitelist) or appoint admins and managers; roster settings (roles, teams, lanes, Riot IDs) can be changed by administrators and managers.
9. Changes
If we change this policy in a meaningful way we will update the date at the top and, where appropriate, notify you inside the portal.