Privacy Policy
Code-based disclosure, reviewed November 4, 2026. Hosting practices and publisher details still require verification.
Who is responsible
The data controller is the anonymous, non-professional publisher of 5 Combined (see Legal Notice). Privacy requests: contact.combined5@gmail.com. This policy is not a certification of GDPR or other legal compliance.
Lineups and accounts
The builder has no user accounts or registration. Your selections are represented by five digits in a page URL, rather than saved as a profile in an application database. Anyone who receives that link can view the selections. URLs may appear in browser history, hosting logs and services to which you share them. The choices are public esports players, not an identity you enter.
Technical requests and error information
Serving a website involves technical requests that expose an IP address and browser/request information to the hosting infrastructure. Server errors are logged and may include messages and stack traces. The application can also use hosting-provided error-reporting hooks where present, including the page path and error details. The publisher must verify which hooks operate publicly, recipients, security controls, retention and any international transfers.
[Hosting and error-log retention, lawful basis and recipients to confirm]. No claim of zero personal-data processing is made.
Cookies, storage and analytics
The active builder does not intentionally set cookies or use local storage for your selections. No advertising or analytics tool has been added. Query results and feedback drafts are held in memory; the application does not persist them to browser storage. Fonts are served locally. Host-injected scripts and technologies must still be audited on the published website.
No consent banner has been introduced for unverified or nonexistent tracking. Before adding non-essential analytics or advertising, assess consent requirements and block those technologies until the required consent is obtained.
External data, images and sharing
PandaScore receives server-side requests for public match and roster information. The API key stays on the server. Team logos and player photographs are loaded from the image hosts supplied by that API; direct image requests can disclose your IP address, browser information and referrer information to those hosts. Image copying and social preview generation may also request images through this website.
Using Share on X opens X with a promotional message and a link to your lineup (which encodes your five picks). Share image uses your device's share menu or downloads the image. X receives those details when you open its composer and applies its own privacy policy. The browser clipboard is used only when you press a copy button. Downloaded images are saved on your device.
Match responses are cached for up to ten minutes and roster responses for up to six hours in server-instance memory during normal operation. Bounded stale fallbacks may be used during service interruptions. These are caches of public esports data, not a user-account database.
Contact and feedback messages
When you use the Contact or Feedback form, we store the category, your message, the date and, only if you choose to give it, your email address so we can reply. Messages are stored in the site's database (Lovable Cloud) and are readable only by the publisher, not by other visitors. They are used solely to answer you and improve the site, on the basis of our legitimate interest in handling requests. Messages are deleted once no longer needed and at most 12 months after receipt, or earlier on request. If you email contact.combined5@gmail.com directly, your message is processed by Google (Gmail) under its own privacy policy.
Your rights and retention
Depending on applicable law, you may have rights to access, correct, erase or restrict personal data, object to processing, request portability, and complain to your competent data-protection authority. Consent can be withdrawn where processing relies on consent. The publisher must confirm applicable rights, lawful bases, retention periods and contact details; these are not established by the code. Use Contact once the address is supplied.