Privacy

You do not need an account to play in a tournament. We store only what you enter yourself: the team name and optionally player names. You decide whether those are real names or nicknames — nicknames are entirely sufficient for running a tournament.

These details are visible to everyone who has the tournament link, and they appear in the bracket and in projector mode. That is the point of them.

Anyone who wants to manage tournaments creates an account. For that we store:

• email address (for signing in and for sign-in links)
• password — only ever as a hash (scrypt), never in the clear
• optional profile details: name, description, links, logo, cover image, colour

We send sign-in links through Resend (Resend, Inc., USA) as a processor. They are valid for 20 minutes and work once.

If an organiser charges an entry fee, the payment runs through Stripe (Stripe, Inc. / Stripe Payments Europe Ltd.). Card details never reach our servers — they are entered with Stripe directly and processed there.

All that stays with us is what is needed to match things up: a Stripe payment identifier, amount, currency and status. Stripe is independently responsible for the payment processing; their privacy policy applies in addition. Payment records are subject to statutory retention periods.

If you allow notifications in the app, we store a push token for your device together with the tournament, the team you follow, and your device language — so the alert arrives in your language. We use that to tell you when and at which table you are up.

Delivery runs through the push services of Expo, Apple (APNs) and Google (FCM). The token contains no name and no identifier of yours. You can delete it at any time by removing the team in the app or turning notifications off in your system settings.

Organiser logos and cover images live in private object storage (Cloudflare R2) and are served through our server. Please upload only images you hold the rights to.

To slow spam on the open sign-up, we briefly count requests per IP address in memory. Those counters are not stored permanently and disappear after a short time or on restart.

The service runs on servers in Germany (Hetzner) behind Cloudflare, which forwards the traffic and in doing so necessarily processes connection data.

We remember your language choice in a cookie so the site appears in the same language next time. Without that choice we follow your browser's language setting.

• No analytics or tracking tool, no advertising pixels
• No cookies beyond a strictly necessary session cookie for signed-in organisers and the language cookie
• No selling and no sharing of data for advertising
• No location access; the camera is used only to scan a QR code and none of it is stored

Tournament data stays as long as the tournament exists — it is part of the results. An organiser can remove teams before the start. If you want your account or a tournament deleted entirely, write to us; we delete it along with the images.

You can request access, correction, deletion and restriction of processing, and you can object to processing. Get in touch at the address below.

The controller for the processing is Orion AI LLC, 7901 4th St N #26226, St. Petersburg, FL 33702, USA.

Privacy requests: [email protected]

Security issues: [email protected]

Orion AI LLC is a Limited Liability Company (LLC) under the law of Florida, USA. Because we address users in Switzerland and the EU, we handle requests under the GDPR and the revised Swiss FADP alike — wherever you live.