ValTool Privacy Policy
Last updated: 22 October 2026
Developer and contact
ValTool is developed by Aleksandr Zinnyk, also known as nipplebee (Ukraine). For support and privacy requests, contact [email protected].
ValTool is an independent companion application. It is not endorsed by Riot Games and does not represent Riot Games. Riot Games and associated properties are trademarks or registered trademarks of Riot Games, Inc.
Overview
ValTool has no developer-operated backend for uploading your Riot account information, game data or conversations. There are no advertisements, analytics SDKs, tracking pixels or automatic crash-reporting services in this release. The developer does not sell your data or use it for advertising.
Most app data is stored on your device. The app is not offline-only: it connects directly to Riot Games for authentication, game features and social messaging, and to asset providers for public game catalogs and images. Sending messages or changing game/social settings sends the requested action to Riot. Those services operate independently under their own privacy practices.
Data used by the app
- Authentication and accounts. Sign-in takes place on Riot's web pages. ValTool's own sign-in code does not ask for or save your Riot password. The app receives authentication tokens and cookies, account identifiers and account metadata. These are saved in the iOS Keychain separately for each saved account. The embedded browser can also store website data and cookies used by Riot.
- Game information. ValTool processes Riot IDs, player identifiers, profile information, inventory and loadouts, store offers, ranks, match history, match details, and live/party information for the features you use. Downloaded match details can include information about other participants.
- Social information. Friends, requests, block lists, presence and conversations come from Riot. Messages, conversation metadata, read state and drafts can be saved locally for each account. Messages you send are transmitted directly to Riot for communication with the recipient. Riot's server-side message history is separate from ValTool's local copy.
- Preferences and downloads. Theme, asset language and local-notification preferences are stored locally. Catalog data, images and matches may be cached to reduce repeated requests. Store reminders are scheduled locally by iOS; ValTool does not operate a remote push-notification service.
- Diagnostics. The app can keep a local sanitized authentication journal containing up to 100 events from the previous seven days. Error details can be viewed and copied at your request. They are not automatically uploaded to the developer. Reports are designed to exclude credentials and private message content; review anything you choose to share.
External connections
Riot authentication, game APIs and Social Service receive the credentials, identifiers, messages and commands needed for your requested functions. Riot controls its own services and server-side records. See the Riot Games Privacy Notice.
Public catalogs are downloaded from Valorant-API, using your selected asset language. Images are downloaded from catalog URLs, normally media.valorant-api.com. Riot authentication headers are not attached to public catalog requests. A static player-title illustration is downloaded from static.wikia.nocookie.net, a Fandom image host. Fandom's practices are described in the Fandom Privacy Policy.
Any service you connect to can receive ordinary connection information such as your IP address, request time and HTTP client metadata. ValTool does not control those services' logs, retention or international processing. External links open independently operated websites. These connections are not advertising or cross-app tracking features of ValTool.
Local storage and security
Authentication credentials are saved in the iOS Keychain with device-only accessibility. Social databases, downloaded matches and asset catalogs are stored in the app sandbox. These download/social stores are excluded from iCloud Backup; sensitive local files use iOS file protection. Image caches and preferences may be handled separately by iOS and the image-loading library. No security measure guarantees absolute protection, especially on compromised devices.
Downloaded matches have no automatic expiry and are shared across accounts saved in the same installation. They remain until individual files are removed or the match cache is cleared. Local conversations and drafts persist across launches. Removing a friend or blocking a player does not delete saved conversations. Credentials, settings and browser data can have different lifetimes. Uninstalling the app is not a reliable way to remove iOS Keychain entries.
Your controls and deletion
- Use Settings → Accounts → Remove Account to remove an account's saved credentials from ValTool and delete its local conversations and drafts. The app also attempts to end the saved Riot web session. This does not delete the Riot account. If removal reports an error, check it rather than assuming every deletion step succeeded.
- Use Settings → Storage → Downloaded Matches to remove downloaded match files, including files retained after an account is removed. Clear shared downloads before removing your last saved account if you want to manage them through Settings.
- Change theme, asset language and notification preferences in the relevant settings. Notification permission can also be changed in iOS Settings.
- For Riot account deletion, server-side messages or other information held by Riot, use Riot Support. Deleting a local copy does not delete copies held by Riot or other participants.
The developer cannot remotely access or erase data that exists only on your device. For information you have sent to the developer, contact [email protected] to request access, correction or deletion.
Support and voluntary reports
If you email [email protected], the developer receives your email address, message, ordinary email metadata and any attachments you choose to send. Please do not send passwords, tokens, cookies or unnecessary conversation history. The app does not automatically attach error reports, account identifiers or messages to support email.
Support email is hosted by Hostinger. Submitted information is used to respond to your request, troubleshoot the app and meet applicable legal obligations, not for advertising. Support correspondence is kept until the request is closed and for no more than 90 additional days. You can request earlier deletion. Information that must be retained to meet a legal obligation or resolve a legal dispute may be kept only for that purpose and for the required period. Hostinger may keep security records or backup copies under its own service terms; deleting the developer's mailbox copy does not promise instant removal from every provider backup. See Hostinger's Privacy Policy.
ValTool support handles issues with this app. It cannot issue Riot penalties, delete Riot-held data, or claim to have submitted an in-game player report. Use Riot's official support/reporting channels for matters controlled by Riot.
The policy website
The privacy-policy website at https://valtool.tech/ is hosted on a Hostinger VPS. It serves static information without advertising, analytics, third-party fonts, account registration or forms. The page itself does not set cookies or use browser storage. Hosting infrastructure can receive IP addresses, requested paths, request times, browser metadata and security/error records to deliver and protect the website. This is separate from the app's local account storage; no Riot account or conversation database is uploaded to the VPS.
Technical hosting logs, where enabled, are used for operation and security, not user profiling. The operator limits their retention to what is needed for those purposes and applicable obligations. Hostinger's own processing and service records are governed by its terms and privacy policy. Contact [email protected] about website data as well as app privacy.
Legal grounds and your rights
Where applicable law requires a legal basis, information necessary to provide requested functionality or support is processed to perform that requested service; proportionate security and troubleshooting rely on legitimate interests; mandatory retention relies on legal obligations. Optional disclosures occur only when you choose to send them. This policy is not blanket consent for tracking or unrelated processing.
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent where processing is based on consent, or complain to a competent data-protection authority. Contact [email protected] to exercise rights concerning information held by the developer. Requests concerning Riot or another independently operated provider should be directed to that provider. ValTool is not intended to bypass Riot's account eligibility or age rules.
Changes
If the app's data handling changes, this policy will be updated with a new revision date. Material changes will be made available through the app or this website. New advertising, analytics or developer-server collection would require a new assessment and updated disclosures before introduction.