Privacy Policy

Hidden Meta is a free statistics site for League of Legends Arena. It has no accounts, no ads and nothing for sale, and it does not sell or share data with anyone. This page lists everything it keeps. Questions or requests: contact@hiddenmeta.io.

Profile lookups

While Riot reviews our production API key, profile lookups are closed to the public: only the site's developer can use them, and a visitor's search is not sent to Riot or to our server's lookup. The rest of this section describes a lookup when one is made.

When you search a Riot ID, our server asks Riot Games' official API for that account, its recent Arena matches, its profile icon and level, its Summoner's Rift rank, and whether it is in a game right now. These are the same facts any match history site shows. Our server keeps Riot's answers for a short time so a repeat search does not ask Riot again:

• finished Arena matches: about 7 days;
• the account behind a Riot ID: up to 1 day;
• rank, icon and level: 5 minutes; whether a player is in a game: under a minute.

A stored match includes each player's Riot account ID, which is how the searched player is found in it. That ID stays on our server and is never sent to your browser. Only Arena games appear (never custom games), and a live game shows only the searched player's own champion.

Search suggestions

To suggest names as you type, the server keeps the Riot IDs (name and tag) of the players in the lobbies of profiles that have been looked up. Nothing else about them is kept there: no account ID, no champion, no result. A name stops being suggested once 90 days pass without a lookup seeing it, and a scheduled task deletes it soon after, whether or not anyone searches. While profile lookups are closed, these shared suggestions are closed too, and the search box suggests only names saved in your own browser.

To have your Riot ID removed from the suggestions, email contact@hiddenmeta.io with it. We remove it within 14 days, and it is not suggested again. A profile can still be looked up by its full Riot ID, as on any match history site, because the matches come from Riot's public API.

Tier list and champion pages

These are totals over many Arena matches collected through Riot's API. The collected matches are stored without Riot IDs or Riot account IDs. In matches collected since September 30, 2026, each player is replaced by a code made from their account ID with a secret key. The code cannot be turned back into an account, but it is still pseudonymous data rather than anonymous: whoever holds the key could tell whether a known account made a code. The key stays private, the code is never used to find out who a player is, and it serves only to tell one player's games from another's in our analysis. No individual player appears on these pages. Collection has been paused since October 10, 2026, and the pages show figures from patch 16.20.

In your browser

Your recent searches, starred profiles and recently seen names are saved in your browser's local storage, so the search box can suggest them, along with a few display choices: your region, the last champion you opened and whether the menu stays open. They never leave your device, and clearing this site's data in your browser removes them. The site sets no cookies for visitors. Entering the password of a private page sets three, which keep that page and profile lookups open in that browser for 30 days, or until we sign every browser out.

Hosting and logs

The site runs on Cloudflare. Cloudflare receives your IP address to deliver the pages, as any host does, under its own privacy policy.

Our server keeps a short log of each request to its lookup service and to the private page's password form for 3 days, so errors can be fixed: which feature, the region, the result and how long it took. We do not store raw visitor IP addresses in our application logs, and the logs hold no Riot IDs, account IDs or passwords.

To prevent password guessing, we temporarily store a keyed hash of the connecting IP address when someone submits the private page's password form, for up to ten minutes. It is never the address itself, it is deleted when the ten minutes end, and it is never logged.

Analytics and outside services

We use Cloudflare Web Analytics to count page views. It sets no cookies and does not log the part of a page address after the question mark, so never a searched Riot ID.

Your browser also loads the site's fonts from Google Fonts, and champion, item and augment images from Riot's Data Dragon and from CommunityDragon. Those services receive your IP address when it does, under their own policies.

Riot Games

Hidden Meta uses Riot Games' API under Riot's developer terms and is not endorsed by Riot Games. How Riot handles your account data is described in Riot's privacy notice.

Children and changes

The site is not directed at children under 13. It asks no visitor for personal information and keeps only what this page lists. If this policy changes, the date at the top changes with it.