VALTRAINER Download

Legal · Code signing

Code signing policy

Windows checks the digital signature of programs you download. Here is how ValTrainer's releases are signed, who can approve a signed release, and what the program does on your network.

Signing

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

  • What is signed: the Windows installer (ValTrainer-…-Setup.exe) and the program (ValTrainer.exe, also inside the portable zip) attached to the official releases on GitHub.
  • Built from public source: every signed file is built by the project's GitHub Actions release workflow from a tagged commit of the public source code. Nothing built on a personal PC is signed.
  • Approved by hand: each signing request is approved by a project approver (below) before the release is published.
  • Checking a download: compare its SHA-256 hash with SHA256SUMS.txt from the same release. If a file claiming to be ValTrainer is signed by anyone else, don't run it and report it.

Team roles

Committers and reviewers
idoraz1
Approvers
idoraz1

Committers and reviewers can change the source code and review contributions. Approvers approve each code signing request. Outside contributions go through pull requests that a reviewer reads before merging.

Privacy policy

This program will not transfer any information to other networked systems unless specifically requested by the user

ValTrainer has two network features, and neither runs without you. The first is the update check, which from version 1.4.1 is off until you allow it:

  • You're asked first: on the first start, ValTrainer asks “Check GitHub for new versions?”. Until you choose Enable updates, it makes no network request at all. Choose Not now and it stays offline.
  • What it asks: with updates enabled, ValTrainer asks GitHub's API (api.github.com) for the project's latest release at startup and every 6 hours. If a newer version is out, it downloads that release's files from GitHub and checks them against the release's SHA-256 hashes.
  • What it sends: nothing about you. The request carries only what every web request carries: your IP address and a ValTrainer/<version> user agent. GitHub handles it under GitHub's privacy statement.
  • You stay in control: Check now in Settings → About checks once, when you click it, even with automatic checks off. Check for updates and Download updates automatically can be turned off at any time.
  • Your data stays on your PC: settings, stats and run recordings are stored in %APPDATA%\ValTrainer and are never uploaded. There is no account and no analytics, and nothing is sent to the developers unless you send a bug report. VALORANT's settings files are only read, on your PC.

The second is bug reports (from version 1.9.0), sent only when you ask:

  • Only when you press Send: nothing is sent until you fill in the Report a bug form and press Send. Copy report and Open on GitHub send nothing.
  • What it sends: exactly what the form's “What gets sent” preview shows: your text, an optional Discord name, the app version, Windows, CPU, RAM, GPU and display info, the settings that matter for bugs and the end of the log. Your Windows user name, PC name, personal folders, VALORANT account folder IDs and e-mail addresses are removed first.
  • Where it goes: through a small relay on Cloudflare Workers (source on GitHub) to the #bug-reports forum on the ValTrainer Discord, where server members can see it. The relay keeps only a shortened hash of your IP address for one hour, to limit spam; your IP is never posted.

Versions 1.3.0 to 1.4.0 checked for updates automatically unless you turned it off in Settings. This website has no cookies, analytics, trackers or ads; it is hosted on GitHub Pages, which keeps standard server logs under GitHub's privacy statement.