Privacy policy

Bracketeer is run by Lakeland Software, trading as Bracketeer. We are the data controller for the personal data described here. You can contact us about privacy at any time at support@playbracketeer.com.

We keep what we need to run your tournaments, and nothing more.

• Your account, from Google: your name, email address, profile picture and Google account identifier. Google handles sign-in, so we never see or store a password.
• Sign-in sessions: a session token, plus the IP address and browser details of the device you signed in on, used to keep your account secure.
• Tournaments you create: tournament names, the game, player and team names, draws and scores.
• Purchases: card payments are handled by Stripe. We keep a record of each purchase (the pack, amount, date and Stripe reference) and your token activity, but never your card details.

Hosts enter the names of the people playing, who are often friends, family or children at a party. The host is responsible for having their permission, or their parent's permission, to use their names.

We recommend using first names or nicknames only. Please don't enter surnames, contact details or anything else that could identify a child.

Each tournament has a results page that anyone with its link can view, without signing in. It shows the tournament name, game, player and team names, the bracket and scores. It never shows your email address or account details. Links are long and random, so they can't be guessed, but anyone you share one with can pass it on.

• To provide the service: creating, running and sharing your tournaments.
• To keep accounts and the service secure and to prevent abuse.
• To reply when you contact us.
• To meet legal obligations, such as keeping payment records.

We don't sell your data, show advertising or use it to build marketing profiles. Our legal bases under the GDPR are performing our contract with you, our legitimate interest in keeping the service secure, and complying with the law.

We use one essential cookie to keep you signed in. Your browser also stores small notes for convenience, such as remembering that you've already seen a champion's celebration. We don't use advertising or analytics cookies, so there's no cookie banner.

We use a small number of trusted providers to run Bracketeer:

• Vercel hosts the website.
• Neon hosts our database.
• Google provides sign-in.
• Stripe processes card payments.

They process data only on our instructions. Some of them may process data outside the European Economic Area. Where they do, it is protected by approved safeguards such as the European Commission's standard contractual clauses.

• Draft tournaments are deleted automatically 30 days after they are created.
• Tournaments are kept until you delete them or your account.
• Your account is kept until you delete it, which you can do at any time from Account settings. Deleting it removes your profile and all of your tournaments straight away, and any unused tokens are lost.
• Purchase records are kept for as long as tax and accounting law requires, even after you delete your account. They are then no longer linked to it.

You have the right to access, correct or delete your personal data, to restrict or object to how we use it, and to receive a copy in a portable format. Email support@playbracketeer.com and we'll respond within one month.

If you're unhappy with how we handle your data, you can complain to Ireland's Data Protection Commission at dataprotection.ie, or to your local data protection authority.

If we change how we handle personal data, we'll update this page and the date at the top. For significant changes, we'll let account holders know by email.