Legal
Privacy policy
Last updated September 1, 2026
This policy explains what information Bracket collects, how we use it, and the choices you have. We keep it short on purpose.
What we collect
- Account data — name, email, password hash, optional username, avatar, timezone and country.
- Tournament data — participants, results, schedules, registrations and any custom fields organizers choose to collect.
- Usage data — pages visited, device and browser type, approximate location from IP, and error logs to keep the Service reliable.
- Payment data — handled by our payment processor. We store only a customer reference, plan and billing status, never card numbers.
How we use it
- To provide the Service: publish tournament pages, send notifications, process registrations and payments.
- To improve the Service: aggregate analytics and error monitoring.
- To communicate: transactional emails (verification, results, receipts) and, if you opt in, product updates.
We do not sell personal data. Standard plan pages may display advertising; ad partners receive only non-identifying context about the page.
Public information
Tournaments are public by default. Participant names, results and standings appear on public pages, embeds and search engines unless the organizer restricts visibility. Organizers are responsible for informing participants of this. Your public profile shows only what you choose to fill in.
Cookies
We use strictly necessary cookies for sign-in and preferences (such as theme), and privacy-friendly analytics. You can clear cookies at any time; you will be signed out.
Retention and deletion
We keep your data while your account is active. Deleting your account removes your personal data within 30 days; tournaments you own are deleted or, if shared with a community, transferred to another admin. Backups are purged on a rolling 30-day schedule.
Your rights
Depending on where you live you may have rights to access, correct, export or delete your data, and to object to certain processing. Use Settings to manage most of this yourself, or contact us.
Security
Data is encrypted in transit and at rest. Passwords are hashed with a modern algorithm. Access to production systems is limited and logged.
Children
The Service is not directed to children under 13. Organizers running youth events should collect only the minimum information required and obtain guardian consent where applicable.
Changes
We will post updates here and notify you of material changes in the app or by email.
Contact
Privacy questions? Contact us.