1. Data used to provide VALSYNC
VALSYNC is an independent companion app for VALORANT. When you choose to sign in with Riot, the Android app receives Riot authentication tokens, your player identifier (PUUID), region/shard, display name, and tag. It uses them for features you choose, including match history, rank, loadout, party, friends, Premier, and chat. Personal store tracking and pregame opponent scouting are not available. VALSYNC is not affiliated with, endorsed by, or sponsored by Riot Games. The website also provides an optional read-only companion paired with the Android app.
2. Data stored on your device
The app may save the following on your device so the features work between sessions:
- Account data: selected account details and Riot credentials in Android Keystore-backed encrypted preferences. VALSYNC account sessions are stored locally when you create an account for referrals.
- Feature data: cached match/replay data when you use those features.
- Direct-message history: local chat history, separated by Riot account, in app-private storage.
- Settings: your app settings, including consent and analytics choices.
3. Optional support and feedback
When you use VALSYNC's optional support and feedback tools, the information you choose to send is handled by the provider of that tool:
- Reports and requests: bug reports, language requests, and feature requests are sent to FormSubmit, which forwards them to the developer by email. They can include your email address, message, ticket ID, app version, device model, Android version, locale, and an annotated screenshot for a bug report.
- Live support chat: opening chat loads Crisp with a random chat-session token and the selected locale. Crisp handles messages and any content you choose to send under its own privacy terms.
4. Analytics, referrals, and advertising
VALSYNC has an optional analytics setting. When it is on and the release is configured for analytics, the app sends a random, resettable installation ID; app version; Android API level; device manufacturer/model; language; timestamps; and app-interaction events to a VALSYNC-controlled analytics service. The service may derive country from an edge gateway header; it does not store the IP address in its analytics records. Analytics events do not include your Riot PUUID, Riot name/tag, email address, advertising ID, chat text, or game data. While analytics is on, the app also sends the Riot PUUID of each account you sign in with (at most once a day) to a separate VALSYNC player registry hosted on Supabase, which stores only a one-way SHA-256 hash of it with first- and last-seen dates, never linked to analytics events or the installation ID. The Party tab sends the PUUIDs of the other players in your party to the same service to learn which of them use VALSYNC, so it can show how many have not installed it and offer an invite link; those PUUIDs are compared and not stored, and players not seen for 90 days are not reported as VALSYNC users. Turning analytics off deletes the local analytics ID and queued events, stops registry updates and Party lookups, and deletes the registry entry for every Riot account registered from that installation. Separate VALSYNC account referrals require an email address and verified account. The inviter enters a name before sharing each link; VALSYNC saves that label and whether the invite is pending or joined, without showing the invitee's email to the inviter. Five different verified accounts joining through named links grant the inviter one month of Premium. VALSYNC also includes Google Mobile Ads, consent tooling, Google Play billing, and install-referrer services; Google and its partners may process identifiers and app-interaction information as described in their policies and your consent choices.
5. Other services and web content
The app communicates with Riot Games for authentication, game data, account actions, party, presence and messaging; Supabase Auth for VALSYNC account signup, email verification, sign-in and referrals; Google for billing, advertising, consent, and install referrer; a VALSYNC-controlled analytics endpoint and hashed-PUUID player registry hosted on Supabase or Cloudflare when analytics is enabled; FormSubmit for reports/requests; Crisp for live support chat; and public game/reference-content providers when you open their content. These providers can receive ordinary network information, such as IP address and user-agent, to serve a request. Their handling is governed by their own policies. Optional web pairing uses Netlify functions and encrypted Netlify Blobs storage. With your approval, the phone shares your display identity, region, rank/RR, up to 30 matches including player scoreboards, and available store offers. Riot credentials are not included. A hashed account identifier binds the connection to your selected account. Separate random browser and phone credentials authorize access. We hash the connection IP for short-lived creation rate limits.
6. Sharing and sale
VALSYNC does not sell personal data. It shares data only with the providers described above to provide the features you choose, or where required by law.
7. Security
Production network requests use HTTPS/TLS. Riot credentials are encrypted at rest with Android Keystore-backed encrypted preferences. Some non-credential local data, including cached content and local chat history, is stored in app-private storage and is not separately encrypted by VALSYNC. Paired snapshots are encrypted at rest on Netlify; browser access uses a Secure HttpOnly cookie. Pairing codes expire after ten minutes and connections after 90 days. Revoking a connection clears its snapshot; hourly cleanup removes revoked and expired records.
8. Your choices and deletion requests
You can sign out or remove a Riot account in the app, turn analytics off (which also deletes your hashed PUUID from the player registry), and uninstall the app. To delete your VALSYNC account and named invite records, use Settings → Invite friends → Delete VALSYNC account, or follow our account deletion instructions. To request deletion of support correspondence or analytics data where possible, email abdullaheltiby@tutamail.com and include enough information to locate the request, such as a support ticket ID. Requests concerning Riot, Google, Crisp, FormSubmit, or other third-party services may need to be made directly to that provider. To stop web sharing, sign out in the web companion or choose Stop sharing in Android Settings > Pair web companion.
9. Children, changes, and contact
VALSYNC is not directed to children under 13. We may update this policy as the app changes and will update the date above. For privacy questions, email abdullaheltiby@tutamail.com.
