Privacy Policy

Last updated 3 November 2026

Draft. This text is being reviewed before public launch.

Tournie Maker is the controller of the personal data described here. We collect as little as we can, and all data is stored in the EU.

Voters (no account)

• A random ID in a cookie (tm_voter), so each browser gets one vote. We store only a scrambled (hashed) version of it.
• A hashed version of your IP address, for abuse prevention and rate limits. It’s deleted after 30 days.
• Your picks. Votes aren’t linked to any name or account.
• Your in-progress bracket is saved only in your own browser (local storage) so a refresh doesn’t lose it.

Creators (with an account)

• Your email address, display name and, if you use Google sign-in, your Google account ID.
• The tournaments and pictures you create. Picture metadata such as location is removed when you upload.
• Moderation decisions about your content, notices we sent you, and appeals.

Reports

If you report content, we store the report, a hashed browser ID and IP, and your email address only if you give it (to send you a receipt and the decision).

Why we process data (legal basis)

• To provide your account and tournaments: our contract with you.
• Vote integrity, abuse prevention, security and moderation: our legitimate interest in running a fair and safe service, and our legal obligations as a hosting service.

Cookies

We only use cookies that are strictly necessary: your sign-in session and the voter cookie. We don’t use advertising or tracking cookies, and our analytics don’t use cookies.

Who processes data for us

Hosting and database (Supabase, EU region), web hosting (Vercel, EU region), image checking (Amazon Web Services, EU region), content delivery (Cloudflare), and email delivery. Each is bound by a data processing agreement.

How long we keep data

• Account data: until you delete your account.
• Hashed IP addresses: 30 days.
• Moderation records: as long as needed to handle appeals and meet legal obligations.

Your rights

You can download your data and delete your account from the Account page. You also have the right to rectification, restriction and objection, and to complain to your data protection authority. Contact us at contact@tourniemaker.com.