Privacy Policy

Velthorn · https://velthorn.app
Last reviewed: 11 October 2026

Velthorn is an independent learning platform for League of Legends players and creators. This Policy explains how personal data is handled when you visit the website, create an account, learn, apply to become a creator or publish content. It is intended to meet relevant transparency requirements under Swiss data protection law and, where applicable, the EU/EEA General Data Protection Regulation (GDPR).

1. Controller and contact

The person responsible for processing personal data is:

Marc Schneider
Hünikonerstrasse 23
8514 Amlikon-Bissegg, Thurgau
Switzerland
Privacy contact: hello@velthorn.app

2. Personal data we handle

Depending on how you use Velthorn, the following information may be processed:

• Account and sign-in data: email address, username, display name, account identifier, sign-in method, authentication events and account-security information. Authentication credentials are handled through the authentication service; Velthorn does not need access to your plaintext password.
• Player profile and preferences: selected main role, optional skill goals or self-reported rank, profile settings and preferences.
• Learning activity: viewed lessons, learning-path steps, knowledge-check interactions where saved, training attempts, practical-exercise completion, Academy XP, ranking, progress and related timestamps.
• Creator applications: coaching specializations, experience, social links, supporting explanations, application status and administrator review records.
• Creator content and administration: course and lesson text, uploaded files, video links, challenge configurations, thumbnails, playlists, creator profile details, publication declarations, rights confirmations, timestamps and moderation reports.
• Communications and reports: messages you send us, content reports, abuse or rights claims, and our responses.
• Technical information: device/browser data, IP address, approximate region derived from IP, diagnostic or security logs, request metadata and cookies or similar storage technologies used to run the service.

Some profile information, creator profiles, and content that you choose to publish may be visible to other users or publicly accessible. Your account email address is not intended to be displayed on your public player profile.

3. Why we process information

Under Swiss law, processing is carried out in accordance with the applicable principles of lawfulness, transparency, proportionality, purpose limitation and security. Where consent is required, you may withdraw it for future processing, subject to overriding legal grounds.

4. Cookies and similar technologies

Velthorn uses browser storage that is necessary to provide sign-in sessions and to remember your learning preferences and guest progress on your device. Velthorn has not installed advertising cookies or third-party analytics scripts. Our technical providers may still collect technical or statistical data on their own systems (see section 5). YouTube videos load only after you click to load them. Details are listed in our Cookies & Storage Notice.

5. External services and embedded media

Velthorn uses third-party technical services to operate its website, user accounts, file storage and email workflows. It may also use third-party identity providers such as Google Sign-In and embed externally hosted videos such as YouTube videos.

When you use a third-party sign-in option, that provider processes information under its own terms. When you open or play externally hosted media, the media provider may receive technical information such as your IP address, browser data and interaction details, and may use cookies or similar technologies subject to applicable law and your choices.

The services currently used are:

Analytics and statistics. Velthorn has not installed analytics, advertising or tracking scripts in the application. Separately, hosting and infrastructure providers (such as Lovable or Cloudflare) may record request data or compile visitor statistics on their own systems. We have not yet confirmed whether this happens for this site.

Where a location or provider is shown as not yet confirmed, we are still obtaining this information and will update this Policy once it is confirmed.

Velthorn does not currently offer a live payment checkout. If billing or creator payouts are introduced, this Policy will be updated before those services become active.

6. International data disclosures

Some providers may process personal data outside Switzerland, including potentially outside the EU/EEA. We only make international disclosures in accordance with applicable law, using an adequacy determination or appropriate safeguards where required, such as recognized standard contractual clauses and supplementary measures.

The main database is hosted in Germany (EU), which Switzerland recognises as providing adequate data protection. Providers based in or operating from the United States (including Lovable, Supabase, Cloudflare and Google) may access or process data in the United States or elsewhere.

The specific transfer safeguards relied on by each provider (for example certification under a data privacy framework or standard contractual clauses) are set out in that provider's own terms. We have not yet independently confirmed them for every provider; you can contact us for further information.

7. How long information is kept

We retain personal data only for as long as reasonably needed for the purposes described above, including maintaining active accounts, supporting learning history, resolving complaints, preventing fraud and meeting legal duties. When you request deletion, we assess whether certain records must be retained for security, evidence, accounting or other legitimate or legal reasons. Shared content and historic learning records may require separate treatment where other users' legitimate interests are involved.

Planned retention periods for the free beta. These are targets, not automated deletion jobs; they are applied through periodic manual review:

• Active accounts and learning progress: kept while your account is active.
• Rejected Creator applications: deleted about 12 months after the decision.
• Closed content reports: kept up to 24 months where needed for moderation, legal claims or disputes.
• Uploaded files: kept while used by active content or a justified record; unused files are removed when safe.
• Technical access logs: kept by our hosting provider according to its own settings; our target is 30 days where configurable.

Deleting your account. Account deletion is not available as a self-service function and does not happen automatically. To request deletion, email hello@velthorn.app, preferably from the address registered to your account.

1. Verification. We verify that the request comes from the account holder before processing it, for example by asking you to confirm the request from the registered address.
2. Processing. An authorised administrator then carries out the deletion manually, without undue delay, using Velthorn's internal deletion procedure. The account is first locked; the procedure then runs in recorded steps and is only marked complete after the result has been checked.
3. What is removed from our active systems, as applicable: your sign-in account, profile and username, roles, learning progress and lesson views, training and exercise records, Academy XP history, simulated (test) payment and subscription records, your Creator application, and files you uploaded personally.

Some information may remain after deletion:

• Rights evidence and attribution for published content. Where content remains published, the related rights declaration and publication attribution may be kept for as long as the content stays published, because they document who confirmed the rights to it.
• Content reports. Reports you submitted may be kept where needed to handle moderation; your account link is removed and free-text details are redacted where they could identify you.
• Records required by law or kept under a documented exception, for example where needed to establish, exercise or defend legal claims. Retained records may still be linked to an internal identifier. Such identifiers are pseudonymous and are not necessarily anonymous.
• Content in an Academy owned by someone else may need to be handled separately with that Academy's owner.
• Incidental mentions in free text written by other people (for example a name mentioned in a message or comment) may not be found or removed automatically.
• Backups and provider logs. Copies in backups and in logs held by our technical providers are not removed immediately; they are removed according to each provider's own retention cycle. We have not yet confirmed those retention periods.

On request, we will tell you which records were retained and why. Retained records are kept only as long as justified and subject to applicable legal requirements.

Backups. We do not promise immediate removal from backup systems. Backup copies are handled according to the hosting provider's retention and restoration cycle.

8. Your rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction of processing, data portability or objection, and to withdraw consent where consent is the basis. Some rights have legal limitations.

You can edit certain account information through Account Settings. To exercise other rights, contact hello@velthorn.app. We may need to verify your identity before providing account-specific information or making sensitive changes.

Where applicable, you may also complain to a competent data protection authority, including the Swiss Federal Data Protection and Information Commissioner (FDPIC) or an EU/EEA supervisory authority.

9. Recommendations, progress and automated decisions

Velthorn may use your selected role, activity and learning history to show recommendations and calculate Academy XP or practice indicators. These are gaming/learning features, not professional evaluations or an official League of Legends ranking. Velthorn does not intend these features to be legally significant automated decisions. If more consequential profiling is introduced, we will review the legal requirements and update this Policy.

10. Children and parental involvement

Student accounts are intended for players aged 13 or older; Creator access is limited to adults (18+). Where local law sets a higher age or requires a parent or legal guardian to agree, a younger player may only use Velthorn with that permission.

To protect younger users, Velthorn:

• processes only the data needed to run a free learning account (sign-in, progress, preferences);
• keeps learning progress, XP history and account details private by default; your email address is never shown publicly;
• shows no advertising, including no behavioural or targeted advertising, and does not sell personal data;
• uses no analytics or tracking scripts and does not profile users for marketing;
• loads YouTube only when you choose to play a video.

Velthorn does not ask for your date of birth and has no parental account system. Parents or guardians who believe a child is using Velthorn without required permission can contact hello@velthorn.app; we will help review or delete the account.

11. Security

We use reasonable technical and organizational measures intended to protect accounts, content and personal data, including access controls and restricted content permissions. No internet service can guarantee absolute security. Please use strong authentication and inform us if you suspect account misuse.

12. Policy changes

We may update this Policy as the platform changes. Material changes will be communicated in a reasonable manner, and the date above will be updated. Where the law requires renewed consent, we will ask for it.

13. Contact

Marc Schneider
Hünikonerstrasse 23, 8514 Amlikon-Bissegg, Switzerland
hello@velthorn.app