Privacy Policy

This English text is provided for convenience. Where it differs from the Korean version, the Korean version governs.

오늘내전 (ONNJ) treats your personal information carefully and collects only the minimum needed to run the service. This policy explains what we collect, why, and how we handle it.

When you sign in with Google or Discord, we receive the following.

• Email address — to identify your account, show you in a group's member list, and grant permissions
• Name and profile picture — to display you inside the service (when the provider supplies them)

As you use the service, the following is stored.

• Riot ID (summoner name and tag) and the rank and preferred roles you enter yourself
• Match records — champion, K/D/A, win/loss, game length and other stats extracted from replay files
• Group membership — which groups you belong to and with what role
• In-house schedules, sign-ups and comments

We do not collect passwords, payment details or national identification numbers. Sign-in is handled by Google and Discord, and we never store your password.

• Identifying members and keeping you signed in
• Providing records, rankings and statistics per group
• Managing in-house schedules and suggesting balanced teams
• Operating and improving the service and responding to errors
• Producing anonymised, site-wide usage statistics that cannot identify an individual

We use cookies for the following purposes.

• Keeping you signed in (Supabase authentication cookie)
• A temporary cookie so an invite link puts you in the right group after sign-in (expires after 10 minutes)
• Browser storage remembering whether you have already seen an onboarding screen
• Google Analytics cookies (_ga and others) for visit statistics
• Google AdSense cookies for advertising (see 7. Advertising below)

To improve the service we use Google Analytics to collect visit counts, referral sources and page flows as anonymous statistics. No identifying information such as your name or email is sent.

You can block cookies in your browser settings, but some features including sign-in will stop working.

Personal information is destroyed without delay when you delete your account. To keep a group's statistics intact, match records already stored may remain in a form separated from your account, and where retention is required by law we keep the data for that period.

We never sell or hand your personal information to third parties. We do rely on the following processors to run the service.

• Supabase — database and authentication (data stored in Seoul, South Korea)
• Vercel — web hosting
• Google — sign-in and visit analytics (Google Analytics)
• Discord — sign-in

The service shows ads through Google AdSense. Google and other third-party vendors use cookies to serve ads based on your visits to this site and other sites.

• Google uses advertising cookies (including the DoubleClick cookie) to serve personalised ads.
• You can turn off personalised advertising at google.com/settings/ads.
• You can opt out of third-party vendors' personalised advertising cookies at www.aboutads.info.
• Blocking cookies in your browser still shows ads, but they will not be interest-based.

Information collected by ad vendors is handled under their own policies. Google's policy is available at Google partner sites policy.

You may view, correct or delete your personal information, or ask us to stop processing it, at any time. Change it inside the service or contact us below and we will act without delay.

• Group-level access control — data in a private group is readable only by that group's members.
• Public group exception — if a group admin marks the group public, any signed-in user can read two of its screens: the group intro and the leaderboard. Those screens include display names, profile images, linked summoner names and match statistics. Every other screen (match details, schedule, balancing and so on) stays members-only even for a public group.
• In the global rankings, summoners from groups you don't belong to appear under a stable alias instead of their real name — unless both the group and that person's profile are set to public.
• Guest sign-up link exception — when a group admin turns on 'allow outside sign-ups' for a specific in-house session, that one session gets a public link (/scrim/…) where even signed-out visitors can see the session details and the display names and roles of everyone signed up. This applies only to that session and is independent of whether the group itself is public. The schedule screen inside the group stays members-only.
• Row level security (RLS) enforced in the database
• Encryption in transit (HTTPS)

Questions and requests about personal information can be sent to onnj.official@gmail.com.

If this policy changes we will announce it within the service, and the new policy applies from the effective date given in that announcement.