Privacy Policy

1. Introduction

Welcome to Ladder Legends Academy. We are committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Ladder Legends Academy is a StarCraft II coaching platform that provides educational content, live events, and community features. This policy applies to all users of our website and services.

2. Data Controller

Ladder Legends Academy is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at l4dderlegends@gmail.com.

3. Information We Collect

3.1 Information You Provide

• Account Information: When you create an account, we collect your username and authentication credentials through our authentication system.
• Profile Information: Any information you choose to add to your profile, such as your preferred race or skill level.
• Communication Data: Messages and communications you send through our platform or Discord community.

3.2 Information Automatically Collected

• Usage Data: Information about how you use our website, including pages visited, features accessed, and content viewed.
• Device Information: Device type, browser type, IP address, and operating system.
• Analytics Data: Behavioral data and interactions collected through PostHog for product analytics and improvement.
• Authentication Tokens: Secure tokens stored in your browser to maintain your logged-in session and verify your identity.

4. Third-Party Services

We use the following third-party services to provide and improve our platform:

4.1 Vercel (Hosting and CDN)

Our website is hosted on Vercel, which provides content delivery network (CDN) services. Vercel may collect technical information such as IP addresses and request data to deliver our website efficiently and securely. For more information, see Vercel's Privacy Policy.

4.2 Cloudflare

We use Cloudflare for security, performance optimization, and DDoS protection. Cloudflare may process IP addresses and other technical data to provide these services. For more information, see Cloudflare's Privacy Policy.

4.3 PostHog (Analytics)

We use PostHog for product analytics to understand how users interact with our platform and improve the user experience. PostHog collects usage data, session recordings (when enabled), and behavioral analytics. PostHog is GDPR-compliant and we have configured it to respect user privacy. You can opt out of analytics tracking in your account settings. For more information, see PostHog's Privacy Policy.

4.4 Mux (Video Hosting)

We use Mux to host and deliver video content, including coaching sessions, replays, and masterclasses. Mux processes video viewing data, including playback statistics and quality metrics, to ensure optimal video delivery. For more information, see Mux's Privacy Policy.

4.5 YouTube

Some of our content is embedded from YouTube. When you view YouTube videos on our platform, YouTube may collect data about your viewing behavior according to their privacy policy. YouTube is owned by Google. For more information, see Google's Privacy Policy.

4.6 Discord

We operate a Discord community server where members can interact with coaches and other players. When you join our Discord server, you are subject to Discord's Terms of Service and Privacy Policy. We do not control data collected by Discord. For more information, see Discord's Privacy Policy.

5. How We Use Your Information

We use your personal data for the following purposes:

• Provide Services: To operate our platform, deliver content, and provide access to premium features for subscribers.
• Authentication: To verify your identity and maintain secure access to your account using authentication tokens.
• Personalization: To customize your experience and recommend relevant content based on your preferences and viewing history.
• Analytics: To understand how users interact with our platform and improve our services.
• Communication: To send you important updates about our services, events, and new content (with your consent for marketing communications).
• Security: To protect our platform from fraud, abuse, and security threats.
• Legal Compliance: To comply with legal obligations and enforce our terms of service.

6. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services and fulfill our contractual obligations to you.
• Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring platform security.
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications or optional analytics features.
• Legal Obligation: Processing required to comply with legal requirements.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Specifically:

• Account Data: Retained while your account is active and for a reasonable period after account closure to comply with legal obligations.
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for statistical purposes.
• Authentication Tokens: Session tokens expire automatically and are deleted from our systems when you log out or after a period of inactivity.
• Video Viewing Data: Retained for up to 2 years to improve content delivery and recommendations.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data (subject to certain legal limitations).
• Right to Restriction: You can request that we limit how we use your personal data.
• Right to Data Portability: You can request a copy of your data in a machine-readable format.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at l4dderlegends@gmail.com. We will respond to your request within 30 days.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers (such as Vercel, Mux, and PostHog) operate data centers. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

10. Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us:

• Maintain your login session and authentication state
• Remember your preferences and settings
• Analyze site usage and performance
• Deliver personalized content and recommendations

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our platform. For more information about the cookies we use, please see our Cookie Policy.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication token management
• Regular security assessments and updates
• Access controls and authentication requirements for our systems
• Use of security services from Cloudflare to protect against DDoS attacks and other threats

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data without parental consent, please contact us and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

15. Supervisory Authority

If you are located in the EEA and believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with your local data protection supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.