PRIVACY
POLICY.

1. Who the controller is

Data controller: Elopeak, owner and operator of elopeak.lol.

Write to us about any privacy matter at contact@elopeak.lol, or through our official Discord.

If you need the controller's full identification details, for example to bring a complaint before a supervisory authority, ask us at that address and we will provide them.

2. What we collect

We only process the data you give us. We do not buy databases and we do not build advertising profiles.

• Booking form: name, email address, Discord handle, role, current elo and, optionally, your OP.GG link. We also record the site language and the page you sent the request from.
• Email or Discord: if you write to us directly, we process the content of your message and any contact details you include.
• Academy (if you create an account): display name, email address, preferred language and your password, always stored hashed with Argon2id. We never store passwords in plain text.
• Analytics (only if you accept): aggregated browsing data provided by Google Analytics 4, with the IP address anonymised.

3. Why we use it and on what legal basis

• To handle your coaching request and arrange the session — legal basis: pre-contractual measures and performance of the contract (art. 6.1.b GDPR).
• To answer your questions by email or Discord — legal basis: our legitimate interest in replying to you (art. 6.1.f GDPR).
• To manage your academy account — legal basis: performance of the contract (art. 6.1.b GDPR).
• To measure in aggregate how the site is used so we can improve it — legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from the “Cookies” button.
• To meet our tax and accounting obligations when a payment is involved — legal basis: legal obligation (art. 6.1.c GDPR).

4. Who we share it with

We do not sell your data and we do not pass it to third parties for advertising. It is only handled by the providers we need to run the service, always as data processors:

• Google Ireland Ltd. — the booking form is sent to an Apps Script that stores the request in a Google Sheets spreadsheet and notifies us by email.
• Google Ireland Ltd. — Google Analytics 4, only if you accept analytics.
• Hostinger International Ltd. — hosting for the site, the email and the academy database.

5. International transfers

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

6. How long we keep it

• Booking requests that do not lead to a session: up to 12 months from the last contact.
• Customer data for booked sessions: for the duration of the relationship and then the statutory tax and accounting limitation period (6 years).
• Academy account: for as long as you keep it open. If you close it, it is deleted.
• Academy login attempt logs: pruned automatically and used only to stop brute-force attacks.

7. Cookies and local storage

The site sets no advertising or third-party cookies until you allow it. Fonts are served from our own domain, so loading the page makes no request to Google servers.

• Necessary local storage: we keep your cookie choice and your preferred language in your browser. It never leaves your device and does not identify you.
• Optional analytics: if you accept, Google Analytics 4 sets its cookies (_ga and similar) to measure visits in aggregate, with the IP anonymised.
• Academy session: if you log in, a strictly necessary session cookie is used, scoped to the /academy/ path.
• You can change your mind at any time with the “Cookies” button in the bottom-left corner, or by clearing site data in your browser.

8. Your rights

You can ask us for access to your data, its rectification or erasure, restriction of or objection to processing, and portability. You can also withdraw your analytics consent without affecting processing carried out beforehand.

Email contact@elopeak.lol and we will reply within one month at the latest. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to your local supervisory authority.

9. Minors

You must be 14 or older to book a session or create an account. If you are under 14, we need consent from your parent or legal guardian: ask them to email contact@elopeak.lol before booking.

10. Security

The site is served entirely over HTTPS. In the academy, passwords are hashed with Argon2id, database queries are prepared statements, every form is CSRF-protected and repeated login attempts are temporarily blocked.

11. Changes to this policy

If we change anything material we will update the date in the header and, where the change significantly affects you, tell you by email or on the site itself.