Safety
What Flaro never does.
You should never have to wonder what a companion app is doing on your PC. This is all of it: what Flaro reads, the one thing it writes, and the lines it doesn't cross.
The never list
- Touch the gameNo memory reading, no injected code, no hooks, no files in Riot's folders.
- Act for youNo auto-accept, pick, ban or lock-in, and no simulated keys or clicks.
- Call your playsNo timers, no alerts, no live commands, and nothing about enemies' cooldowns or positions. The decisions stay yours.
- Unmask anyoneRanked champion select stays Ally 1–4. Players in Streamer Mode stay hidden.
- Guess your MMRNo MMR, no LP predictions, no name history.
- Ask for your Riot passwordNot once, not anywhere. Flaro has no passwords of its own either.
- Sell your dataYour personal data is never sold, rented or handed to data brokers.
- Look for League on its ownThe League connection stays off until you switch it on.
What it reads and writes
Everything happens on your PC.
Flaro talks to the League client and the game through the interfaces Riot documents for apps like it, on 127.0.0.1. It never opens the game's process or its files.
Your PC 127.0.0.1
The League client
Your profile, rank and LP, your own match history and the records of your own games, champion select as the client shows it to you, and your rune pages. Connected with the client's own local address and credentials, the way Riot documents it.
The game
Riot's Live Client Data API, once a second: your own stats, items, level and gold, and the game clock. Nothing the game hides from you, and nothing about other players' cooldowns or positions.
A rune page
When you click Import, or when you lock in if you switched on auto-import. Only over a page Flaro made or one you pick, and never in the KR region. Spells and items you set yourself.
In the app too
The same list, inside Settings.
Settings › Privacy and safety shows what Flaro reads and writes, what it never does, and which features this version has switched on. A server switch can only ever turn features off.
Your data
Kept on your PC. Yours to delete.
Games stay local
Your recordings and reviews are built and stored on your PC, in %APPDATA%\Flaro. They are never uploaded.
An account is optional
Flaro works without one. If you make one, it holds your email, a display name and your devices, encrypted, on servers in the EU.
No passwords
Sign in with a one-time email code or a passkey. There is no password to steal, reuse or leak.
Download it
Your account page gives you a copy of your account data as a file, whenever you ask.
Delete it
Deleting your account removes it at once, and from backups within 35 days. Deleting Flaro's folder removes your games.
No tracking today
This website has no analytics, no tracking cookies and no third-party requests, and the app has no ads. If ads ever come to the free version, the Privacy Policy and the cookie notice change first, and we ask for your consent where the law requires it.
The details, in full: the Privacy Policy and the cookie notice.
Riot's rules
Before and after the game, Flaro thinks. During it, Flaro only shows.
Riot's policies for third-party apps allow your own stats, training tools that look back at your own games, and static information from before the game. They don't allow apps that decide for you while you play, reveal what the game hides, or track enemy cooldowns. Flaro is built to that line.
Found something we missed?
If you think Flaro does something Riot's rules don't allow, tell us and we'll look at it first. Security problems go to [email protected].