Policy
Privacy
Last updated September 18, 2026.
What Intlist stores
Accounts are optional and use a username and password hash. Intlist creates an internal, non-deliverable account address because the authentication library requires one; you are not asked for an email address. Reports include public in-game identifiers, the context you submit, visibility, anonymous-author preference, and optional Riot match metadata.
Public and private reports
When available, you may instead sign in with Google. Intlist stores your Google account identifier, email address, verification status, and authentication tokens to maintain that sign-in. Your Google name and profile photo are not used as your public identity: Google users choose an Intlist username after signing in. Your email address is not included in public reports. Google sign-in does not grant Intlist access to Gmail, Drive, or Calendar.
Private reports are returned only to the matching account or browser identity. Public reports are searchable by visitors. Guest reports are anonymous, and account holders may choose whether a public report displays their username.
Operational data
Intlist stores a random browser device key on your device so guest reports remain yours on that browser. The server stores salted one-way hashes derived from that key, your network address, and your browser user agent for ownership, rate limiting, and abuse investigation. Intlist does not collect a hardware fingerprint. Raw request addresses may also be processed by the web server and authentication session security.
Riot data
When Riot integration is enabled, Intlist requests public Riot account, rank, champion-mastery, and recent-match data to build summoner profiles, verify an in-game identity, and attach a selected match. Riot API keys remain server-side.
Public player profiles may also use OP.GG to retrieve an in-game icon, level, rank, and recent matches. Looking up a player sends that public Riot ID and region to the data provider. Intlist saves the last successful game-data snapshot and may continue showing it while updates are unavailable. The profile identifies the source and update time. Community report text, private reports, and sign-in details are not sent to OP.GG.
Your control
You can edit or remove reports while using the same guest browser identity or signed-in account. Clearing browser storage can permanently remove access to guest-only reports. Contact the site owner for account deletion until self-service account deletion is added.