Privacy policy

Your account. Email address, display name, and a password (stored only as a hash — we never see it). Optionally a username, avatar, and a WBO ID if you have one.

Tournament activity. The events you enter, your pairings, scores, match results and standings. This is the point of the service, and it is visible to other people in the same event — a tournament that nobody can see the results of would not be much of a tournament.

Age information, only when relevant. A birth year and a minor flag, used to apply the right protections to accounts for under-13s. See Children's accounts below.

Notification settings. If you turn on notifications, we store the push subscription your browser or device issues, plus which browser it came from, so we know where to send “your match is up”. Turning notifications off deletes it.

Subscription details, if you subscribe. Whether you have Tourna Pro, when the period ends, and identifiers from our payment provider. We never see or store your card details.

Profile customisation, if you use it. Bio, banner, showcase and social links you choose to add — all of it optional and shown publicly on your profile.

• We don't sell your data. Not to anyone, ever.
• We don't show advertising, and there are no advertising trackers in the app.
• We don't build advertising profiles or share your data with data brokers.
• We don't track you across other websites.

We keep this list short on purpose. Each of these does a specific job:

• Supabase — database, accounts and file storage. This is where your data lives.
• Vercel — hosting, plus aggregate traffic and performance measurement.
• Stripe — subscription payments. Stripe is the merchant of record and handles card details entirely; they never reach us.
• Resend — transactional email (sign-up confirmation, password resets). Not marketing.
• Cloudflare Turnstile — blocks bots on sign-up and public forms.
• Sentry — error reports when something breaks, so we can fix it.
• Google Firebase — delivers push notifications to the mobile app, if you install it and enable them.

A parent or guardian can create a linked account for a child under 13. That account is created only by the adult, who provides verifiable consent at the time — we record who consented and to what version of these terms.

A child's account holds the same tournament information as anyone else's: a display name, their matches and results. We do not ask children for an email address, we do not send them marketing, and we do not show them advertising.

The linked adult can view the child's account, unlink it, or ask us to delete it at any time. Unlinking requires approval from both sides so that neither can be cut off unilaterally.

If you believe a child's account was created without a parent's consent, email support@tourna.gg and we will remove it.

Your display name, avatar, tournament results and public profile are visible to others — that is how standings, brackets and leaderboards work. Your email address, birth year, and notification settings are not shown to other users.

Organisers of an event you enter can see your name and your results in that event. Site staff can access data where needed to fix problems, and those actions are logged.

Any player can report another player — cheating, harassment, no-shows, or inappropriate profile content — through a report form attached to that player's profile or event appearance. A report holds the category you picked, whatever details you wrote, which event it relates to, and who filed it.

Reports go to site moderators only, never to the person being reported, and we don't tell that person who filed it. We keep reports even after they're resolved, including ones about guest players, so a pattern across multiple events stays visible to moderators rather than resetting each time.

If you file a report, expect the identifying details in it — your account, and anything you wrote about someone else — to be kept indefinitely for that reason. If you believe a report about you is inaccurate, contact us.

Account and tournament data is kept while your account exists. Results stay attached to the events they belong to, because removing one player's scores would corrupt everyone else's standings.

Push subscriptions are deleted when you turn notifications off, or automatically once the device stops accepting them. Error reports are kept for a short period and then discarded.

When you delete your account, your personal information goes immediately; the match results themselves stay attached to their events under “Deleted account”, carrying no name, email or handle. The full detail is here.

You can view and edit most of your data from your account settings, and export your full match history from there as well.

You can delete your account yourself, from Account Settings — it takes effect immediately, and you don't need to ask us. If you can't sign in, email support@tourna.gg. The account deletion page sets out exactly what is removed, what is kept, and for how long.

Depending on where you live — the UK, EU, and several other places — you have rights to access, correct, delete, or object to how your data is used. Contact us and we will action it; we will not make you jump through hoops.

Data is encrypted in transit. Access is restricted at the database level, so one account cannot read another's private information. Passwords are hashed, and payment details never touch our servers.

No service is perfectly secure. If we ever discover a breach affecting your data, we will tell you.

If this policy changes in a way that materially affects you, we will say so in the app rather than quietly editing this page. The date at the top always reflects the current version.

Questions, requests, or complaints: support@tourna.gg or the contact form.