Privacy Policy
ORIVEIL (the “Service”) is designed to collect as little about you as possible. This policy explains what information is handled, where, and why.
01Summary
- Match data and settings are stored only on your PC. The operator does not collect or store them on any server.
- No ads, analytics, cookies or tracking — in the app or on this website.
- We do not sell or share personal information with third parties.
02This website
This site consists of static pages and uses no cookies, analytics, external fonts or external scripts. The hosting provider may record standard access logs (IP address, time, browser information) for normal operation. The app installers are downloaded from an external file-hosting service (planned: GitHub Releases), whose own privacy policy applies to downloads.
03Data the app stores on your PC
The app stores the following under %APPDATA%\ORIVEIL:
- PUUID, Riot ID and region of your linked Riot account
- Your match data from the official API (results, stats and the players in those matches)
- Friends you register (Riot ID, nickname, consent status), party declarations, leagues, compositions and overlay presets
- App settings, backups (latest 15) and an error log
- Access/refresh tokens and an optional Discord webhook URL, encrypted with Windows DPAPI
Demo Mode sample data does not describe real players and is stored separately from real data.
04Data handled when you link a Riot account
Linking becomes available after Riot Games approves our API access. It uses Riot Sign On (RSO); your password is entered only on Riot’s page. The Service receives only the tokens you consent to (scopes: openid, offline_access) and your PUUID and Riot ID from ACCOUNT-V1. They are used only to fetch your own match list and match data from VAL-MATCH-V1.
Before linking, the app explains that account linking makes your player data public and asks you to opt in. The time of your consent is recorded only on your PC and is revoked when you unlink.
05Relay server
Because Riot’s rules forbid shipping API keys in apps, an operator-managed relay server adds the API key to requests from the app, forwards them to the Riot API, and exchanges RSO authorization codes for tokens. It forwards only an allow-list of API paths and, by design, does not store match data or tokens. IP addresses and similar data may be temporarily recorded in server or hosting-provider logs in the course of communication.
06Other players’ information
- Your match data includes the Riot IDs and stats of other players in the same matches, as provided by the official API. They are displayed only inside your app and are not sent anywhere.
- Players hidden by the game are never identified or analyzed.
- Match data includes the other players in the same match (stored on your PC as received from Riot), but players who have not opted in are shown only with per-match anonymous labels (e.g. “Ally 1”, “Enemy 3”) — never with their Riot ID, agent, stats or rank — and are never tracked or aggregated across matches (e.g. rematches). Party information for groups that include neither you nor a consenting friend is never shown, whether from official data or estimation. The OBS overlay never includes other players’ information.
- Register friends and mark them as “consented” only with their permission.
07What leaves your PC
App data leaves your PC only in these cases:
- Requests to the Riot API and token exchange (via the relay server)
- When you press “Send to Discord”: league standings are posted to the Discord webhook you configured
- When you copy a share code or text and give it to someone
- OBS overlay: served only on your PC (127.0.0.1); what you show in your streaming software is visible to viewers
08Retention and deletion
- Data stays on your PC until you delete it.
- Settings → Riot account → “Unlink and delete data” removes that account’s match data. Demo data can be removed under Settings → Data.
- The data folder remains after uninstalling; delete %APPDATA%\ORIVEIL to remove everything. If you used a version released under the former name (VALO NEXUS), also delete %APPDATA%\VALO NEXUS, which is kept after the data is copied over.
- The operator holds none of your match data, so there is nothing to delete on our side (apart from temporary relay-server logs).
09Security
Secrets are encrypted with Windows DPAPI and Riot API traffic uses HTTPS. The local OBS server listens only on 127.0.0.1 and requires an unguessable token.
10Changes
Changes to this policy will be posted on this page.
11Contact
Operator: ORIVEIL Development
support@oriveil.app
Contact & operator information
Messages sent to our contact address are delivered to the operator’s mailbox through an e-mail forwarding service (Cloudflare Email Routing). Your address and message are used only to reply and to fix problems, and are not shared with third parties.
If the English and Japanese versions differ, the Japanese version prevails.