Tournora Privacy Policy

Depending on how you use Tournora, we may collect account and authentication information such as your user identifier and authentication information received through Google or Supabase Authentication; profile information such as username, display name, biography, region, preferred sports, playing positions, social links, and profile visibility choices; consent and age-related information needed to determine whether an account may be activated, including guardian authorization records for users aged 12–17; team information including team identity, memberships, roles, squad entries, jersey numbers, positions, logos, covers, contact information, match records, and availability information; tournament information including tournament identity, organizer information, tournament overview, rules, teams, tournament rosters, fixtures, results, standings, disciplinary information, logos, posters, and tournament membership information; content you upload or publish; and technical and security information such as request information, authentication events, security logs, rate-limit information, and other information reasonably necessary to operate and protect the Service.

We may also receive information about you from other users where they are authorized to add you to a team, tournament, squad, or related activity.

Team managers or tournament representatives may create records for individuals who do not have Tournora accounts.

These records may include information such as a person's name, jersey number, playing position, team role, tournament participation, or other limited sports-related information.

We expect users who provide this information to have an appropriate reason and, where required, permission to provide it.

Such records do not automatically create a Tournora account or give that person account permissions.

We use personal information to provide and operate Tournora; authenticate users and protect accounts; create and manage profiles, teams, memberships, squads, matches, tournaments, fixtures, results, standings, and brackets; provide invitations, registration codes, and authorization workflows; display information according to users' selected privacy and visibility settings; provide guardian-authorization functionality for eligible minors; maintain security, prevent abuse, enforce rate limits, and investigate suspicious activity; maintain audit records for important administrative actions; troubleshoot and improve the beta service; respond to support, privacy, or legal requests; comply with applicable legal obligations; and protect the rights, safety, and integrity of Tournora and its users.

We do not use private team or tournament information for unrelated public advertising purposes.

If you ask to hear about upcoming features, we use your email address, chosen topics, and language only to send occasional Tournora product update emails. Visitors must confirm their address from a link we email them before we send updates; signed-in adult users can turn updates on or off in Settings. Every product update email includes a link to unsubscribe. We do not offer product update emails to users under 18.

Tournora provides different visibility settings.

Information associated with a public team, tournament, or profile field may be accessible to anyone, including people without a Tournora account, and may be indexed by search engines.

Information associated with an unlisted page may be accessible to anyone who possesses the link but is generally excluded from Tournora's public discovery features.

Information designated as private is intended to be available only to authorized users.

Certain administrative information, authentication information, invitation secrets, registration-code secrets, internal identifiers, and audit information are not intended for public display.

You should review visibility settings before publishing information.

Tournora requires users to be at least 12 years old.

Users aged 12 through 17 may be required to obtain authorization from a parent or legal guardian before their accounts are activated.

We do not intentionally permit children under 12 to create accounts.

If we become aware that an account was created in violation of the minimum-age requirement, we may restrict or remove the account and associated information as appropriate.

Optional profile information belonging to minors may be subject to stricter privacy restrictions than information belonging to adult users.

Tournora may use Google authentication through Supabase Authentication.

When you sign in using Google, Tournora receives information required to authenticate your account in accordance with the authentication flow and your Google account permissions.

Tournora does not receive your Google account password.

Google and Supabase process information under their own privacy policies and terms.

We use third-party service providers to operate Tournora.

These currently may include Supabase for database, authentication, storage, and related backend services; Vercel for application hosting and delivery; and Google for Google authentication.

These providers may process information on our behalf in countries other than the country where you live.

We may add or replace infrastructure providers as Tournora develops.

We require service providers to process information for appropriate service-related purposes and subject to applicable contractual and legal requirements.

Because Tournora uses global cloud infrastructure, personal information may be processed or stored outside your country of residence.

Where required by applicable law, we will use appropriate safeguards for international transfers.

Tournora may use cookies or similar browser technologies that are necessary for authentication, session management, security, locale preferences, theme preferences, and operation of the Service.

If analytics or other non-essential tracking technologies are introduced later, this Privacy Policy and any required consent mechanisms should be updated before those technologies are deployed.

We may share information with service providers that process information on our behalf; with other users where necessary for team or tournament functionality and according to applicable permissions; publicly where you or an authorized organizer intentionally publish information; where required by law, court order, or valid legal process; where reasonably necessary to protect users, prevent fraud or abuse, investigate security incidents, or protect Tournora's rights; or as part of a business reorganization, acquisition, financing, or transfer, subject to appropriate safeguards.

We do not sell personal information to advertisers.

We retain information for as long as reasonably necessary to provide the Service, maintain account and tournament functionality, comply with legal obligations, resolve disputes, maintain security and audit records, and protect the integrity of historical tournament information.

Different categories of information may be retained for different periods.

For example, removed memberships, tournament-team snapshots, match results, or audit records may need to remain available to preserve historical tournament integrity even after the underlying user or team information changes.

Invitation tokens, registration codes, rate-limit records, and similar security information may be subject to shorter technical retention periods.

Where information is no longer reasonably needed, we may delete or anonymize it.

We use reasonable technical and organizational measures designed to protect personal information and restrict access according to user roles and permissions.

These measures may include authentication, database access controls, Row Level Security, restricted storage policies, hashed or otherwise protected invitation and registration credentials, and server-side authorization checks.

No online service can guarantee absolute security.

You are responsible for protecting access to your account and notifying us if you believe your account has been compromised.

Depending on your location and applicable law, you may have rights relating to your personal information, including rights to request access, correction, deletion, restriction, objection, or a copy of certain information.

Many profile, team, and tournament fields can be updated directly through Tournora.

Some information may not be immediately deletable where retention is reasonably necessary for security, legal compliance, audit integrity, or historical tournament records.

To exercise a privacy right that is not available directly through the Service, use any privacy-request method made available through the Service.

We may need to verify your identity before completing certain requests.

If another user has created a manual squad or tournament record concerning you, you may contact the relevant team or tournament organizer regarding correction or removal.

If you believe personal information about you is being processed improperly through the Service, use any privacy-request method made available through the Service.

We may need to balance such requests with legitimate recordkeeping, security, and tournament-integrity requirements.

You may stop using Tournora at any time.

Where account-deletion functionality is available, you may use the relevant account settings. Otherwise, use any account-deletion method made available through the Service.

Account deletion may not immediately remove information that forms part of shared or historical records, such as confirmed match results, tournament records, audit entries, or snapshots necessary to preserve the integrity of a tournament.

Where appropriate, identifying information may instead be removed, restricted, or anonymized.

Tournora is currently in beta.

During the beta period, we may change database structures, features, privacy controls, or processing activities as the Service evolves.

We will update this Privacy Policy when material changes affect how personal information is handled.

Beta status does not reduce our responsibility to handle personal information appropriately.

We may update this Privacy Policy from time to time.

Material changes will be communicated through an appropriate notice where required.

The effective date at the top of this Policy indicates when the current version became effective.