Privacy

Effective 30 October 2026

Queued is currently a small friends pilot. Do not enter sensitive personal information in display names, party fields, or reports.

What Queued stores

• Account email, confirmation status, a salted password hash, profile choices, and session records.
• Uploaded avatar files and their public Queued paths.
• Short-lived party listings, including server, mode, rank range, language, microphone preference, reported seats, and an encrypted Riot lobby link.
• Reports and a snapshot of the reported listing.
• Short-lived rate-limit, confirmation, recovery, and operational records used to protect the service.

Why it is used

Queued uses this information to preserve accounts, display compatible live parties, protect lobby links, open a Riot-owned invite after a deliberate click, investigate reports, prevent abuse, and operate the service.

Retention

Live listings expire after 15 minutes. Lobby-link ciphertext is removed after a listing closes or expires. Sessions, confirmation and reset tokens, OAuth state, and rate-limit records expire or are cleaned automatically. Account profiles remain while the account exists. Reports may be retained while needed for safety review and service defense.

Service providers and external content

Queued is hosted on Cloudflare Workers and uses Cloudflare D1 and R2. When account email delivery is enabled, Queued uses Resend to send confirmation and password-reset messages. The current pilot also loads fonts, preset avatars, and VALORANT image assets from external providers. Opening a lobby invite transfers you to Riot’s website and client, which operate under Riot’s own policies.

Your choices

You may avoid creating an account and browse public listing metadata. Hosting and protected invite access require an account. Account export and self-service deletion are planned before unrestricted public release. During this pilot, ask the person or community that invited you to Queued to relay a privacy or deletion request to the operator.

Security

Queued encrypts lobby links at rest, stores hashes instead of raw session and recovery tokens, restricts unsafe browser requests to the same origin, and rate-limits sensitive actions. No internet service can promise absolute security.