Know what stays local.

Your local library and settings

The desktop app stores game library records, account profile metadata, settings and recorded sessions in its local Windows user-data folder. These ordinary records are not claimed to be encrypted. Profiles may include usernames, display names, Riot IDs and regions.

Saved Riot credentials

The production Riot vault uses Electron safeStorage backed by Windows DPAPI and refuses to save credentials when that protection is unavailable. The encrypted vault is tied to your Windows user context. Credentials are decrypted when needed for sign-in; local encryption does not protect against every threat within a compromised Windows session.

MaSwitch fills the official Riot Client through Windows UI Automation. Verification, including MFA and CAPTCHA, stays with Riot. Credentials are handed to Riot’s sign-in interface; this website never asks for your Riot login.

Backups and diagnostics

Backup & Restore exports local records and checks archive integrity with SHA-256. It excludes Riot credential-vault secrets. Backup files may contain personal profile metadata and are not described as encrypted. Review diagnostics and screenshots before sharing them.

Network features

News requests go to supported Riot pages, Steam news endpoints, EA pages and Fortnite-API (a third party), with an Epic endpoint as fallback. Artwork can load from Steam/CDNs or SteamGridDB. SteamGridDB requests use the API key you supply. Those providers receive normal connection information, and their policies apply.

News caching is in memory; it is not a promise of persistent offline access. Game launches and sign-in also involve the relevant publisher’s client and services.

Memory tools

Memory Management uses Windows memory operations and may request elevation for advanced cleanup. It protects listed processes and blocks cleanup while a tracked game is active. It is not a kernel driver or an FPS guarantee.

Downloads and updates

Website downloads link to release assets on the official GitHub repository. Version information and available checksums come from the GitHub Releases API. Check published hashes before running a downloaded installer. GitHub handles the file transfer.

This website

The website fetches public release metadata on its server. It includes no sign-in, advertising, analytics SDK, contact form or database. It does not ask for game account data. The hosting provider may process request and connection logs; retention and operational settings must be confirmed by the owner. Fonts and product screenshots are served with the website.

Questions or a vulnerability?

Follow the repository’s Security Policy for sensitive reports. Never put passwords, tokens or vault files into public issues.