Privacy policy

Gomly is an app for running your VALORANT party, queue and agent select from your phone while you play on your PC. This policy explains what data we process to make it work, what for, and how to delete it.

Who is responsible

HiveCode, the developer of Gomly. Contact: support@taply.click.

What data we process and why

• Signing in with Riot. You sign in on Riot’s official page, inside the app. Gomly never sees or stores your password. The app then receives the session cookies and tokens issued by Riot and sends them to our server, which uses them to act on your behalf (reading and managing your party, queue, agent select and friends) and to keep you signed in. They are stored encrypted, never leave the server and are never written to the logs.
• Your player identity: your Riot ID (name and tag), your account’s internal Riot identifier and your region.
• The notification token of your device and its operating system (Android or iOS), to let you know when a match is found or you’re invited to a party.
• Data about your friends and your party (friends list, whether they’re online, invites). It’s read from Riot while you use the app and sent to your phone. It isn’t stored.
• Technical server logs, with your player identifier, to diagnose errors. They never include tokens or passwords, and they overwrite themselves.
• On your device, the app stores its own session (not Riot’s) in the system’s secure storage.

We process this data because it’s necessary to provide the service you ask for when you sign in.

What we don’t do

We don’t sell your data, we don’t show ads, and we don’t use analytics or tracking tools.

Who it’s shared with

• Riot Games: our server connects to its services on your behalf.
• Expo and Google Firebase Cloud Messaging: they deliver notifications. They receive your device’s token and the text of the notification.
• The hosting provider of the server where the data is stored.
• valorant-api.com: the app downloads game names and images from it. None of your data is sent to it, although, as with any connection, it sees your IP address.

How long we keep it

• Session and player identity: until you sign out. If you stop using the app, they’re deleted automatically once Riot stops accepting the session renewal, usually after a few weeks.
• Notification token: until you sign out or uninstall the app.
• Technical logs: they rotate and overwrite themselves; they take up a few tens of megabytes at most.

Security

All connections are encrypted (HTTPS). Riot credentials are stored encrypted with AES-256-GCM, and the key isn’t in the database.

Your rights

You can ask to access, correct or delete your data, or object to its processing, by writing to support@taply.click. You can also file a complaint with the data protection authority in your country.

To delete everything, read how to delete your data.

Children

Gomly isn’t directed at children under 13.

Changes

If we change this policy, we’ll update this page and the date above.