The fine print, in plain language

Privacy

Effective September 11, 2026

The short version

skinbattle.lol is a free, community-built fan project. There are no ads, no tracking pixels, and your data is never sold or shared for marketing. One privacy-focused analytics tool measures how the site is used; it is never sent your email or your username. The site keeps the minimum it needs to do one thing: let people rank League of Legends skins.

What the site collects

Account details. If you sign in, the site's self-hosted sign-in service (Logto) stores your email address and username, plus your password or passkeys. Passwords and passkeys never touch the app itself.

Your battles. Head-to-Head picks and Tier Drop boards are stored against your account so your profile, your Mirror, and the community rankings work. That's the product.

A guest token. If you play without signing in, a random identifier is stored in a cookie and in your browser's local storage so your battles and streaks survive a refresh. It contains no personal information, and you can attach it to an account later by signing in.

Preferences and caches. Your chosen avatar, display username, and similar interface state live in your browser's local storage so pages paint instantly.

Server logs. Like nearly every website, the servers keep short-lived standard logs (IP address, user agent, requested URL) for debugging and abuse prevention.

Usage analytics. PostHog, a privacy-focused analytics service, records which pages are visited, what is clicked, and which errors are hit, so the site can tell what people actually use. It is sent no email and no username: a signed-in account is only an opaque id plus a signed-in/signed-out label. Its requests are proxied through skinbattle.lol rather than loading a third-party script, and it stores an identifier in a cookie and in local storage so repeat visits aren't counted as new people.

What the site doesn't do

No advertising scripts run on this site, and nothing here tracks you across other sites or fingerprints your device. The analytics described above is the only measurement, and it is never sent your email, your name, or anything you type into the site.

Third parties involved

Splash art and champion icons load directly from Riot Games' Data Dragon CDN, so your browser makes standard image requests to Riot's servers. The site's own services (the app, the API, and the Logto sign-in service) are self-hosted on the project's infrastructure.

What's public

Rankings are aggregated from everyone's votes and are public by design; individual votes are not shown publicly. If you earn a spot on a leaderboard, your username appears there.

Deleting your data

You can delete your account any time from Profile → Account. That permanently removes your account and your sign-in identity. Your individual votes are disconnected from you. They survive only inside anonymous aggregate tallies, with nothing linking them back to a person. Guest data lives in your browser: clearing cookies and site data for skinbattle.lol orphans it.

Children

This site is not directed at children under 13.

Changes and contact

If this policy changes, the effective date above changes with it. Questions or requests: open an issue on GitHub.