LoLautoVODs is an indie project operated by two individuals ("RBC" and "Dindon Farcis"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service at https://studio.rbc-riven.com.
1. Data Controller & Contact Information
Because LoLautoVODs is an independent hobby project (not a registered company), data management is handled directly by the project maintainers.
Developer: Dindon Farcis
Contact Email: ay.dindonfarci@gmail.com
2. Information We Collect
We collect only the strictly necessary information required to provide our automatic VOD downloading and YouTube uploading service:
- Google & YouTube Data: Google account email address, OAuth access tokens, and OAuth refresh tokens.
- Video Metadata: Desired YouTube video titles, descriptions, and tags configured by you.
- Streaming & Gaming Info: Twitch username, public nickname used online for videos, and League of Legends in-game names.
- Preferences: Game filtering rules (e.g., game outcome filters).
Note on Authentication: We do not collect or store any passwords or password hashes. Authentication is managed exclusively through official Google OAuth 2.0 protocol.
3. How We Use Your Information & Legal Basis
We process your data based on Performance of Contract (providing the core functionality you request) and your explicit Consent when authorizing Google OAuth:
- To fetch game details and stream clips from Twitch using your Twitch account details and filtering preferences.
- To upload rendered video VODs directly to your connected YouTube channel on your behalf using the
youtube.upload scope.
- To contact you regarding your account setup or service status using your Google account email address.
4. Google API & YouTube Data Policy Compliance
LoLautoVODs's use and transfer to any other app of information received from Google APIs will adhere to the
Google API Services User Data Policy, including the Limited Use requirements.
Specifically regarding Google OAuth user data:
- We strictly access the
userinfo.email and youtube.upload scopes.
- We do not share, sell, or disclose your Google user data to third parties.
- We do not use your Google user data for serving advertisements, marketing, or training machine learning / AI models.
5. Third-Party API Services
Our service interacts directly with the following third-party platform APIs:
- Google OAuth & YouTube API Services: Used for authentication and video uploading. By using our service, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
- Twitch API: Used to inspect VODs and stream clips. Use of this data complies with the Twitch Privacy Notice.
- PayPal: Used to manage payments for subscriptions and related billing workflows.
6. Cookies and Tracking
LoLautoVOD uses cookies to maintain user sessions and support Google OAuth authentication. When you visit the OAuth flow, the app stores temporary session data (such as the OAuth state and code verifier) in a browser cookie managed by the server-side session mechanism. LoLautoVOD does not use tracking scripts or analytics tools.
7. Data Storage & Security
- Hosting Location: All data and services are hosted on a Virtual Private Server (VPS) provided by OVH in Europe.
- Transport Security: All data transmitted between your browser, our server, and third-party APIs is encrypted in transit via HTTPS (TLS).
- Encryption at Rest: All Google OAuth access and refresh tokens are stored fully encrypted at rest on our database server.
- Access Restrictions: Access to stored backend data is strictly limited to authorized server processes and the project maintainers for system maintenance.
8. Data Retention & Revoking Access
We retain your stored data only for as long as you actively use the LoLautoVODs service.
How to Revoke Google Access: You can revoke LoLautoVODs’s access to your Google account at any time via the
Google Security Settings page (Third-party apps with account access).
9. Your GDPR Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate personal data.
- Erasure ("Right to be Forgotten"): Request complete deletion of your account and associated tokens/data from our database.
- Restriction / Objection: Restrict or object to our processing of your personal data.
To exercise any of these rights, please email us at ay.dindonfarci@gmail.com. We will process your request promptly.