This policy covers the Discord bot that runs Valorant tournaments, queues and duels. It applies to every server it is installed in. Content below is written straight from the code that stores this data — the exact tables are named so it can be checked, not just trusted.
Player profile (table `player_profiles`, global across every server you play in): your Riot ID, your Riot account's PUUID, region, current rank and the highest ever reached, RR score, main role, the agents you say you play, the source and date of rank verification, and the display name shown on public pages — stored because the bot has no permission to fetch your Discord name outside the moment you interact with it (see "Security" below on intents).
Per-server stats (table `player_guild_stats`): wins, losses, games, MMR (the internal score used to balance teams), no-shows and any suspensions — one row per server, kept apart from the global profile because it belongs to the community it happened in.
Per-match performance (table `match_player_stats`): agent played, kills, deaths, assists, score, ACS and headshot percentage. Only exists when a server turns on automatic results, and comes from Riot's own public match history.
Rank proof (table `rank_proofs`): the screenshot you submit when requesting manual rank verification, and the review status.
Tournaments, teams and matches (tables `tournaments`, `teams`, `team_members`, `matches`, `match_games`): the name you give your team, who is on it, and the results you report.
Payments (tables `payment_orders`, `entry_fee_payments`, `guild_entitlements`, `user_entitlements`, `user_cosmetics`): what you bought or confirmed paying for, when, and the associated reference. See "Payments and money" in the Terms of Service for the bot's exact role in these payments.
Server configuration (table `guild_config`): set by whoever organises — includes, for instance, the PayPal used for that server's entry fees. Not your personal data unless you are the one who set it.
Verifying your Valorant rank and stopping people from playing in divisions below the one they actually hold.
Forming and balancing teams by declared or verified rank.
Showing your profile, tournament history and player card to whoever has the link — never the list of servers you play on.
Generating the public pages for tournaments (`/t/…`) and for your profile (`/p/…`), so people outside Discord can follow along.
Processing entry fees paid directly to the organiser — never to the bot.
Responding to support requests and helping resolve disputes about results or payments.
Running the service you asked for — tournaments, queues, duels, profile, purchases — is the performance of a contract (Article 6(1)(b) GDPR).
Keeping payment records is a legal obligation under Portuguese accounting and tax law (Article 6(1)(c) GDPR).
Preventing abuse, verifying ranks and keeping matches fair is our legitimate interest, and that of the communities using the bot (Article 6(1)(f) GDPR); you can object to it through the contact below.
HenrikDev API — an unofficial third-party service, not affiliated with Riot Games, used to look up the public rank tied to your Riot ID when you request verification. It receives your Riot ID and region; it does not receive the stored PUUID or anything else on this list.
PayPal — when a tournament charges an entry fee, the generated payment link carries the organiser's PayPal and a reference for your entry; PayPal processes that payment directly between you and the organiser. See "Payments and money" in the Terms of Service.
Discord — the platform the bot runs on. Messages and interactions you exchange with it travel over Discord's own infrastructure, as with any application installed on a server.
We do not sell data to anyone, do not use it for advertising, and do not share it with any service beyond these three.
A specific server's data — its configuration, that server's tournaments, per-server stats, role map, associated rank proofs and daily counters — is deleted automatically 30 days after the bot is removed from that server.
Your global profile (Riot ID, PUUID, rank, agents, display name) has no automatic deletion date, because it is shared across every server you play in. It is deleted on request — see the next section.
Payment records and purchased entitlements are kept even after you delete your profile, for accounting reasons. Payment records are kept for 10 years, the retention period Portuguese law sets for accounting and tax records; after that they are no longer needed and are deleted on request.
The `/profile delete` command erases your Riot ID, PUUID, display name, rank and agents, and revokes your public page token.
Purchased entitlements (plans, credits, paid cosmetics) and the payment record are not erased by that command — they are kept for accounting reasons, and the command's confirmation message spells out exactly what disappears and what stays.
If you'd rather, you can also request deletion directly: Discord, user ID 302940194594619392 (https://discord.com/users/302940194594619392).
The bot does not request Discord's `Server Members` or `Message Content` intents: it does not read your messages on the server, and only records your username at the moment you interact with it directly — a command, a button.
Data lives in a database we operate. It is hosted on Oracle Cloud Infrastructure in Roménia (União Europeia), within the European Union, and operated by us; Oracle only provides the hosting infrastructure, as a processor under Article 28 GDPR.
None of the pages described in this policy are public by default: tournament and profile pages only exist once a token is generated on purpose, with a click from an organiser or the player themself.
Under the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and Portuguese Law 58/2019, you have the right to access, correct, delete or export your data, to restrict its processing, and to object to certain processing. Use the contact in the next section to exercise any of these; we reply within one month.
If you think your data was not handled as it should be, you also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt), or with the supervisory authority of your own country.
Using this bot means agreeing to Discord's own terms of service, which require you to be at least 13, or the higher minimum age set by the law in your country.
We may change this document as the bot changes. The date at the top of this page is the date of the last change, and changes that meaningfully affect your rights will be announced ahead of time whenever possible.
Entity responsible for the data: the administrator of SpikeCup, a private individual based in Portugal.
Contact for privacy questions: Discord, user ID 302940194594619392 (https://discord.com/users/302940194594619392).