Effective Date: Sep 23, 2026
At Lafter, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, and safeguard your information when you use lafter.gg, the Lafter desktop companion app, or any related Lafter service.
Account information: When you create a Lafter account, we collect an email address, a
username, and a securely hashed password (or, if you sign in through GangDev SSO, the identity
information that flow provides).
Riot Games data: If you link a Riot Games account, we retrieve data associated with it
through the official Riot API — summoner and league standing, match history, champion mastery, and
similar publicly-scoped data — for display back to you inside Lafter.
Live client data (optional): If you run the Lafter Connector, it streams data from
your own currently-running League client to your dashboard in real time (such as your active champion
select or in-progress game state), so features like live draft sharing can display it without you
needing to alt-tab. It only reads data your own local client already exposes and never accesses
another player's account.
Org spaces and tournaments: To join an organization's space you verify a work email
address at that organization's domain. You can take part with that address alone (a temp session) or
with an account; if you later make an account, what the temp session held carries over to it. We keep
the address, your answers to that organization's forms, and your draft profile: the lanes and seat you
want, the note you write, whether you are a free agent, the team you are on, and the offers and join
requests you send or receive. Mirth, the draft's points, is computed from your ranked
standing and, once recorded, your tournament games.
Messages: Mail you send to other accounts, and the notifications Lafter and
organizations send you, are stored in the inboxes of those involved.
Help chat (Feste): Questions you ask Feste and its answers are stored with the page you
asked from, your IP address, and how many tokens each answer used. Questions are sent to Anthropic to be
answered (see Third-Party Services). Feste can flag a message that threatens or harasses someone, is
sexual, mentions self-harm, asks for someone's personal details, or tries to manipulate it; a flagged
message is marked and emailed to Lafter's administrators with your account or work address, the page
and your IP address.
Account extras: The face you pick for your account, your lane and schedule
preferences, and your theme.
Usage data: We automatically collect standard technical information such as IP
address, browser type, device type, and pages visited, for security and reliability purposes.
Lafter uses a small number of cookies, none of which are used for advertising or third-party tracking:
| Session cookie | Keeps you signed in. Strictly necessary — without it, Lafter can't tell your browser is logged in. |
| lafter_theme | Remembers your light/dark theme preference across lafter.gg and its subdomains. Purely functional, not tracking. |
| lafter_org_grant | Holds a verified work address for an organization's space, so a temp session stays signed in to it. Strictly necessary for temp sessions. |
| lafter_inbox_seen, lafter_inbox_order, lafter_inbox_hide, lafter_inbox_welcome_guest | Whether you've opened the inbox, how you've ordered and filtered it, and whether a temp session has had its welcome letter. Functional. |
| lafter_help_seen, lafter_help_seen_id | Whether you've opened Feste and read its latest answer, so the dot on it goes away. Functional. |
We don't use any analytics or advertising cookies. Because every cookie above is either strictly necessary for the site to function or a simple stored preference, we don't run a separate cookie-consent banner — there's nothing optional to opt into.
Provide and maintain Lafter's core features — statistics, scouting, draft sharing, and post-game
summaries.
Run organizations' spaces, tournaments and drafts: showing your draft profile, rank and mirth to that
organization's members, and delivering offers, requests and roster changes.
Deliver mail and notifications, and answer questions in the help chat.
Review flagged help-chat messages, enforce usage limits, and keep people an organization has banned
out of its space.
Authenticate your account and keep it secure.
Communicate with you about your account (verification emails, password resets, and similar).
Prevent fraud, abuse, or violations of these policies or Riot Games' own policies.
Improve Lafter's features and reliability.
We take reasonable measures to safeguard your personal information, including encrypted password storage and secure data transmission. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
Lafter integrates with the Riot Games API to retrieve League of Legends match and account data. Riot Games has its own privacy practices governing that data, and we encourage you to review Riot's own privacy policy as well. We do not sell your data to third parties, and we do not use Riot-sourced data for anything beyond displaying it back to you and, where you've enabled sharing, your group inside Lafter.
Anthropic answers the help chat. Your question, the recent turns of your conversation
with Feste, and the page you asked from are sent to Anthropic's Claude API. Anthropic's commercial terms
govern that data; don't put anything in the help chat you wouldn't want processed that way.
Email: Verification links and administrator notices are sent through our email
provider.
Google Fonts serves the site's typefaces, so your browser requests them from Google,
which receives your IP address.
Access: You can request a copy of the personal data we hold about you.
Correction: You can request that we correct inaccurate or incomplete data.
Deletion: You can delete your account from your account page, or by contacting us
directly. The account is deleted seven days after you ask, and you can keep it until then. Deleting it
removes your Lafter profile, linked-account associations, inbox and help-chat history.
Opt-out: You can unlink a Riot Games account at any time, which stops further data
retrieval for that account.
We retain your personal information for as long as your account is active, or as needed to fulfill the purposes outlined in this policy. When you delete your account, we remove your stored profile and linked-account data; we may retain minimal records where required for legal, security, or fraud- prevention purposes. Mail you sent stays in its recipients' inboxes until they delete it. Rosters and tournament results you were part of can keep your name. Help-chat history from a temp session and records of an organization's bans are kept for abuse prevention; ask us to delete a temp session's history.
Lafter is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected data from a child under 13, we will take steps to delete it.
We may update this Privacy Policy from time to time. When we make changes, we will revise the "Effective Date" at the top of this page. We encourage you to review this policy periodically.
If you have any questions or concerns about this Privacy Policy or how we handle your personal
information, please contact us at:
GangDev
Email: company@gangdev.co
Website: gangdev.co
Report a bug