Rank Ledger

Privacy Policy

Last updated: 2 September 2026

1. Who we are

Rank Ledger is a product of Stafford Games, the registered business name of Dylan James Stafford, a sole trader in South Australia, Australia (ABN 27 350 562 271).

Contact for any privacy question, request or complaint: support@rankledger.gg

This policy explains what we collect, why, who we share it with, and what you can ask us to do about it.

2. What we collect

When you create an account

  • Your email address.
  • Authentication details — if you sign in with Google, we receive your email and basic profile from Google. If you use a password, it's stored hashed by our authentication provider; we never see it.
  • The date you last visited, so we can show you what's new.

When you link Steam

  • Your Steam ID and public Steam persona name.
  • We use Steam's OpenID sign-in. We never see or receive your Steam password.

Your match data

  • Your Deadlock match history, ranks, and per-match performance.
  • Full match data for matches you review — see section 3.

Billing

  • Subscription status, plan, and review usage.
  • We do not store your card details. Payments go through Stripe, who handle card data directly. We receive only enough to know whether your subscription is active.

Technical

  • Standard server logs and error reports.
  • Session cookies to keep you signed in. We don't use advertising or tracking cookies.

3. Data about other players

This is unusual enough to spell out.

A Deadlock match involves twelve players. When any user reviews a match, we store that match's full data — which includes the other eleven players' in-game performance, their numeric Steam account IDs, and their public Steam persona names.

  • This information is already publicly available through Valve's systems and the community API we use. We don't obtain anything private.
  • We store it because a match review needs the whole match to be meaningful — comparing you to your lane opponent requires their data.
  • Stored matches are shared. They're keyed by match ID, not by user. If another Rank Ledger user reviews the same match, they see the same stored record.
  • We only read the specific fields we need. Where an API response includes additional personal information we don't need — for example Steam friends lists — we don't store it.

If you appear in a stored match and want to discuss it, contact us at the address above.

4. How we use your information

  • To provide the service: showing your matches, ranks, statistics and reviews.
  • To generate AI match reviews (see section 5).
  • To manage your subscription and review allowance.
  • To communicate with you about your account, billing, or service changes.
  • To diagnose faults and improve the service.

We do not sell your data. We do not use it for advertising. We do not share it with data brokers.

5. AI processing

To generate a match review, we send match data to our AI provider (currently Anthropic) for processing. This includes your in-game performance and the relevant parts of the match, including other players' in-game statistics where the analysis compares you to them.

To generate a build synthesis, we send the build itself — the hero, the items and any enemy heroes you selected — together with the community and personal comparison figures our own systems calculated. No other players' data is included.

In neither case do we send your email address, billing details, or account credentials.

Reviews are stored in our database alongside the match they describe. Build syntheses are stored alongside the build they describe.

6. Who else handles your data

We use these providers to run the service:

ProviderPurposeLocation
SupabaseDatabase and authenticationSydney, Australia
VercelHostingGlobal edge network
StripePayment processingGlobal
AnthropicAI review generationUnited States
GoogleSign-in (if you use it)Global
Valve / SteamAccount linking, game dataGlobal
deadlock-apiCommunity Deadlock match dataCommunity-run service; hosting location not published

Each processes data under their own terms and privacy policies.

International transfers. Some of these providers are outside Australia, so your information may be processed overseas — including in the United States. By using Rank Ledger you consent to that transfer. We take reasonable steps to use reputable providers with appropriate safeguards.

7. How long we keep things

  • Account data: while your account exists, and for a reasonable period afterwards for legal and accounting purposes.
  • Billing records: as required by Australian tax law (currently five years).
  • Match data: indefinitely, because match records are shared between users rather than owned by one. Deleting your account does not delete matches you reviewed, since other users may rely on them.
  • AI reviews: while the associated match record exists.
  • Saved builds and their syntheses: until you delete the build or your account.

8. Your rights

You can ask us to:

  • access the personal information we hold about you;
  • correct anything inaccurate;
  • delete your account and associated personal data;
  • export your data in a portable format;
  • object to or restrict certain processing.

Email support@rankledger.gg and we'll respond within 30 days.

A limit worth being upfront about: we can delete your account, your email, your Steam link, and your billing association. We generally cannot remove your in-game performance from stored match records, because those records are shared with other players who were in the same match and reviewed it. That data is public match data rather than information you provided us.

If you're in the EU or UK: you have rights under the GDPR/UK GDPR, including the rights above and the right to lodge a complaint with your local data protection authority. Our lawful bases are contract (providing the service you've signed up for), legitimate interests (operating and securing the service, analysing publicly available match data), and consent where required.

9. Security

We use encrypted connections, hashed passwords, role-restricted database access, and access controls on administrative operations.

No system is perfectly secure. If a data breach occurs that's likely to cause serious harm, we'll notify affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

10. Children

Rank Ledger isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, contact us and we'll remove it.

11. Complaints

If you're unhappy with how we've handled your information, contact us first at support@rankledger.gg — we'd rather fix it directly.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you're in the EU or UK, you can complain to your local data protection authority.

12. Changes

We may update this policy. If a change materially affects how we handle your information, we'll notify you by email or on the site before it takes effect. The "last updated" date above always reflects the current version.

See also our Terms of Service.