Privacy, stated plainly.
ARAM Mayhem Coach is a Windows desktop app. It has no accounts and no sign-up, and it does not collect or transmit personal information to the developer. There is no telemetry and no analytics in the app. Almost everything the Coach does happens on your own computer, and this page lists the few exceptions exactly.
What happens on your computer — all of it local
- Reading your game. The Coach reads your League client session (the LCU) and the Live Client Data feed. Both are services running on your own machine, and everything read from them is processed on your computer.
- Reading augment cards. No official feed carries the cards you are offered, so the Coach reads them from your screen. The screen capture is processed locally by the OCR engine bundled inside the app. Captures are never uploaded anywhere.
- Your files stay yours. Your settings, favorite champions, dial positions, and match journal are stored in files on your own computer. Reel recordings are saved to your own Videos folder. If the app ever crashes, it writes a small log file on your computer to help with troubleshooting — it is never sent anywhere.
- Game data ships inside the app. The champion, item, and augment data the Coach weighs picks against is bundled into the app itself. It is not fetched while you play.
The only network calls the app makes
- Update check. At startup, and then about once an hour, the app downloads one tiny file — version.json — from this website, to learn whether a newer version exists and light its update button. The request asks for that file and nothing else; the app sends no data about you, your games, or your computer with it. Downloading the update itself is always your click, never automatic. When you click the update button inside the app (version 2.0.11 and later), the app itself downloads the new installer from the same download address this page's download button uses, checks the downloaded file against the checksum published in version.json, and then starts the Windows installer and closes so the install can finish. Nothing is downloaded until you click, and the update download sends no data about you either.
- Riot’s API — only if you bring your own key. If you choose to put your own Riot API key in the Coach’s local settings file, the app uses it to ask Riot’s official API for your match history, rank, and champion mastery, so your match journal can be enriched. The key lives in a file on your computer, is sent only to Riot, and the journal it enriches stays on your computer. If you never add a key, these requests never happen — the Coach coaches fully without one.
- Bug reports and suggestions — only when you send one. If you use the app’s feedback panel, it sends what you write, the app version, and your platform to this website, where it is stored for the builder to read. A bug report also includes the diagnostic snapshot the panel shows you on its face before you send — a short log of what the Coach saw and did — and you can attach a photo if you choose. Nothing leaves your computer until you press send.
- Reviews — new in version 2.0.12. The Reviews tab downloads the public review list from this website so you can read what other players honestly wrote. If you write a review yourself, the app sends your star rating, your words, the name you type (you may leave it blank), the app version, and your platform to this website; the review is stored there and shown publicly in the tab, exactly as you wrote it — no ratings are faked and no review is hidden for being critical. Nothing is posted until you press Post.
- Links you click. Buttons like Join the Coach Discord, the tip jar, the download page, and a partner’s Visit button open pages in your own web browser, by your own action. What those sites do is governed by their own privacy policies.
That is the whole list. The app talks to nothing else.
The optional partner spot
The Coach carries one optional ad-partner spot, and it is off by default. If you turn it on, a single labeled partner card may appear after a game ends, inside the Coach’s own window only — never in your game, never mid-match. The partners shown are built into the app; there is no ad network, no tracking, and nothing about you is sent or shared when the card appears. It is skippable in one tap, and turning it back off stops it entirely.
Social Connect — coming with version 2.1.0, not active today
Nothing in this section is switched on yet. Social Connect is a designed feature planned for version 2.1.0. The app you can download today connects to no social account, asks for no social sign-in, and posts nothing anywhere — this section is published ahead of the feature so its privacy terms are on record before it opens. Social Connect will be a Reel Maker subscriber feature, and subscriptions themselves are not open yet either.
- Your choice, through the platform’s own door. Connecting an account is always your deliberate action. The Coach opens the platform’s own sign-in and consent screen in your own web browser, using that platform’s official OAuth flow — YouTube first, then Facebook Pages, Instagram, and TikTok. X is not part of Social Connect. The Coach never asks for, sees, or stores your social password, and no platform login page ever appears inside the app. Before you are sent to the platform, the connect page states exactly what the permission allows.
- Posting permission only — nothing else. The Coach requests only the permission it needs to post. It does not read your feeds, your messages, or your followers, and it does no engagement automation of any kind — no likes, no follows, no comments. On Facebook, posting is to a Page you manage; the platforms offer no way to post to a personal profile, and the Coach does not pretend otherwise.
- Tokens live on the server, encrypted — never in the app. When you consent, the platform sends its access tokens to the Coach’s server-side broker, which runs on this website’s host. The tokens are stored encrypted (AES-256-GCM), together with your platform account ID and the account display name, so the app can show you “Connected as …” for the right account. The app itself never receives a social token. All it holds is an opaque, randomly generated install ID (with a matching install token kept in the app’s local config file on your computer), which the broker uses to know which connections belong to your copy of the app.
- The honest limit of that encryption. The encrypted token store and the key that unlocks it both live in the builder’s Cloudflare account. The encryption protects your tokens if a copy of the store or a stray log line ever leaks; it cannot protect them against a full compromise of that Cloudflare account itself, and this page will not pretend otherwise.
- It posts only what you set it to post. A reel, carousel, or post goes out only to your own connected accounts, and only in the ways you choose: when you tap Post in the caption composer (the engine drafts a caption from facts it actually knows; the words stay yours to edit), or — separately, and off by default — when you turn on the auto-post toggle yourself for reels the engine finishes. Nothing is posted in any other way.
- Short-lived staging, for the platforms that fetch. Most platforms accept an upload directly. Instagram — and TikTok photo posts — instead fetch media from a web address. For those, the broker holds your reel at an unguessable address just long enough for the platform to fetch it; the staged copy is deleted within 24 hours, and sooner once the platform confirms the post.
- Disconnecting severs access. The Disconnect button in the app tells the broker to revoke the grant at the platform where the platform offers revocation, and to delete the stored connection record immediately, whether or not that revocation call succeeds. You can also revoke the Coach’s access at any time from the platform’s own settings. If a grant dies on the platform’s side, the stored tokens simply stop working — the connection shows as needing a reconnect rather than retrying forever.
- No sale, no sharing. Social connection data and tokens are never sold, and never shared with advertisers or ad partners. The Coach’s partner spot and attention systems never touch social data.
- Engine-made pieces carry their credit inside the file. Reels, carousels, and posts the engine makes end with a short baked-in end segment — the house’s own tools and labeled FRIEND-LEASE ad partners (“Ad partner — promoted by the house”) — rendered into the piece itself, so it travels with the file wherever the piece travels. Your raw recordings are never engine-made, and they carry nothing.
Cloud Vault — also designed, also not live. A separate paid add-on will offer storage of your own recordings on the builder’s Cloudflare storage, only if you opt in. Uploads default to your finished reels and the games you star; syncing your whole library is a separate, explicit opt-in. Recordings are stored as recorded. If your Vault reaches its cap, the oldest unstarred recordings roll off with warning; starred recordings are never auto-deleted.
This website
This site is hosted on Cloudflare. Like any web host, Cloudflare keeps standard server logs — your IP address, your browser, and the pages visited — to run and protect the service. The site itself sets no advertising trackers and runs no analytics scripts. (Two ordinary exceptions: the page loads its fonts from Google Fonts, and the download buttons lead to Google Drive — clicking them takes you to Google’s services, under Google’s own policies.)
Questions and changes
If this statement ever changes, the new version will be posted on this page with a new effective date. Questions about privacy — or about anything the Coach does — are welcome in the Coach Discord server.
— Raphael Morales, the Structuralist Philosopher
Builder of ARAM Mayhem Coach