Privacy Policy

Who we are

NoxuTFT operates the desktop application and this website. For anything in this policy, including a request to delete your data, write to support@noxutft.com.

What we collect

Your account

An email address, a username, and a password stored only as a hash — we cannot read it. If you bought through Discord we also store your Discord username, so the purchase can be matched to the right person and the sub role granted.

Payments

We record what you bought, the amount, the currency, the method and the date. We never see or store your card details — card payments happen on the payment provider's own pages. For crypto payments we store the transaction reference so the payment can be matched to your order.

The desktop app

The app talks to our API to validate your licence and fetch game data for the current patch. It does not send us your matches, your rank or your play history, and it contains no advertising or third-party analytics SDK. We record the country your account last connected from, looked up from the IP address of that request; the address itself is not stored.

Optional dataset uploads

Some builds can upload screenshots of the game board to help train the image recognition the overlay relies on. These are frames of Teamfight Tactics, tied to your account so we can cap the volume per user. If you would rather not contribute, ask us and we will exclude your account.

Server logs

Our API records requests to sensitive endpoints, including IP address and timestamp, for security. This exists because the account-creating endpoints were abused in August 2026; it is a fraud control, not analytics.

Website audience

This website counts its own visits: the page viewed, the site or search engine you arrived from, your device type, language and country, and whether you opened the checkout. The country is looked up from your IP address at the moment of the visit, and only the country is kept. It sets no cookie and stores no IP address — visits are grouped by a one-way hash of your IP address and browser that changes every day, so we can count visitors but cannot recognise you from one day to the next. Nothing is shared with a third party.

Country lookups use the IP Geolocation by DB-IP database, run on our own server — no address is sent to a third party.

Videos

Our videos are hosted on YouTube and play through its privacy-enhanced youtube-nocookie.com player. On most pages only a still image is shown until you press play. On the homepage the gameplay video starts by itself, muted, once you scroll to it. Either way, YouTube's player loads only at that point, and from then on Google's own privacy policy applies to it.

What we do not do

• We do not sell or rent your data.
• We do not run advertising or ad-tech trackers in the app.
• We do not read the memory of League of Legends or any other program.
• We do not collect your Riot account credentials. NoxuTFT never asks for them.

Who else sees it

Only the providers we need to run the service: our email provider, to send you your credentials and receipts; our payment providers, to take payment; and our hosting provider. Each sees only what its job requires.

How long we keep it

Your account data for as long as the account exists, and afterwards only what tax and accounting rules require us to keep about a transaction. Security logs are kept for a limited period. Payment links and their state are kept briefly after expiry so a receipt can still be produced.

Your rights

If you are in the EU or UK you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to a particular use. Write to support@noxutft.com and we will answer within a month. Deleting your account ends your access, including a lifetime licence, so we will confirm before doing it.

Cookies

This website sets no advertising or tracking cookies. Your language choice is kept in your own browser's storage and never reaches us.

Changes

If this policy changes in a way that affects you, we will say so on this page and update the date above.