RAIDCODEX

Privacy: RaidCodex accounts

Last updated 2 November 2026. This covers the RaidCodex account and the RaidCodex Overlay. RaidCodex is a free fan project and is not affiliated with Plarium.

Who we are

RaidCodex (raidcodex.com) decides how this data is used. Contact: contact@raidcodex.com.

What we keep

To use the overlay you sign in with Discord, Google or an email code. We never see a password and never ask for your Plarium login. We keep:

• the sign-in identifier from the provider, your email address and display name;
• the PCs you sign in on: a name taken from the PC, a random device number (not taken from your hardware), when it was added and when it last checked in;
• the overlay version, and a log of account events with their time (account created, signed in, rules data downloaded, PC removed, signed out);
• whether the account is active or disabled;
• battle reports, only if you choose to share them (see below).

Nothing from your game is sent to us unless you choose to share battle reports: no game account name, no screenshots, and no champions or battles unless you tick the box described below. The overlay reads the game on your own PC only, and that stays on your PC. It never changes the game or plays for you.

Battle reports you choose to share

The overlay has a box "Share my battle reports with RaidCodex". It is off by default. Only if you tick it, and only while you are signed in, the overlay sends us the small report it makes after each finished PvE battle. Arena, Siege and other player-versus-player battles are never read, recorded or sent.

• What is sent: the battle mode and its enemies, the date and length of the battle, the result, your team's champions with their gear sets, masteries, blessings and battle stats as the game set them up, the damage, turns, skills, effects and deaths worked out from the battle, the overlay's kill estimates and whether they came true, and the overlay version. From overlay version 0.3.43 a report also includes diagnostic data about the overlay during that battle: where its labels were drawn and how they were placed, each hit's damage next to the overlay's estimate, and when the game could not be read. It is sent with your RaidCodex account and the random number of the PC it came from.
• What is not sent: your game account name or id, your clan, other players' names, your Windows user name, your PC's name, file paths on your PC, screenshots, copies of the game's memory, other programs on your PC, or anything from the game outside that battle.
• Why: to find and fix bugs in the overlay and to make its estimates more accurate. We use them only for that, never to identify you in the game, and we never sell them or share them with anyone.
• Your choice: we receive reports only because you ticked the box (consent). You can untick it at any time; nothing more is sent after that. You can delete every report you shared on your account page.
• Where and how long: stored with Cloudflare (R2 storage) and deleted after 180 days, or earlier when you delete them or your account.

Update check: the overlay downloads a small signed version file from raidcodex.com when it starts and every six hours. It is a plain download that sends no information about you, your account or your battles; like any web request, our host Cloudflare sees your IP address. It is used to offer updates and, if a serious problem is found, to switch the live overlay off until it is fixed. An update is installed only when you click "Update now". We count update downloads, without any account or device attached.

Why

To provide the account and the overlay you asked for (contract), and to prevent abuse, account sharing and security problems (legitimate interests). Shared battle reports are based on your consent (the box in the overlay), which you can withdraw at any time. We use your email only for messages about the service, never for marketing without a separate yes. We do not sell data or use it for advertising.

How long

• Event log entries: 90 days.
• Shared battle reports: 180 days, or until you delete them.
• PCs: until you remove them. Sign-in tokens: at most 30 days after their last use.
• The account: until you delete it.
• Network addresses: used only to limit repeated requests, stored as a scrambled value that changes every day, and deleted within about a day.

Deleting your account removes the account, its PCs, tokens, counters and shared battle reports, and detaches its log entries from you.

Who handles it for us

• Clerk (United States) runs the sign-in. Our server also asks Clerk for your primary email address and whether it is verified. Clerk hosts data mainly with Google Cloud and Cloudflare and transfers data from the UK and EU under the EU-US Data Privacy Framework, with standard contractual clauses and the UK addendum as a fallback.
• Cloudflare hosts the website, the account server, its database and the battle reports you choose to share.
• Google or Discord, if you choose them to sign in, tell Clerk your email address and name.

Your rights

You can see, download or delete your data on your account page, or write to contact@raidcodex.com. You can object to or ask us to restrict processing, and you can complain to the UK Information Commissioner's Office (ico.org.uk). Deleting your RaidCodex account does not delete your Discord, Google or email identity at the provider.

If something goes wrong

If personal data is lost or exposed in a way that puts you at risk, we will tell you and, where required, the Information Commissioner's Office.

Age

You must be 16 or older to create an account.

Changes

If this notice changes in a way that matters, we will update the date above and say so on the account page.