Privacy Policy

RoundsUp is a tool for tournament directors, so most of the information here is entered by a director rather than by the people it describes. We try to be plain about that below.

Director account information. When you create a director account we collect your email address and a display name. We use these to sign you in, identify you inside your leagues, and send you account email (such as sign-in links, invitations, and billing notices). If you subscribe to a paid tier, our payment processor collects the billing details needed to charge you; we do not store full card numbers ourselves.

Information participants provide directly. Some flows let a participant enter their own details rather than having a director do it. If a director opens public registration for a tournament, a player can submit their name and, optionally, an email address to register; and if a director enables RSVPs for an event, a person can submit a name and an optional short comment. We use this to run and staff the event. Providing an email here is optional and is used only to contact that person about the event they signed up for.

Technical and security information. Like any web service, our servers automatically receive basic technical information when you use RoundsUp, such as your IP address and browser type. We use this to keep the service secure and reliable, including rate-limiting and abuse prevention, and not to build advertising or tracking profiles.

Player records a director enters. To run a league or tournament, a director creates player records. Each record holds a player name and, optionally, an IFPA number. Importantly, a director can name a player who has no account of their own; we call these “zero-account players.” That means RoundsUp stores information about people who never signed up themselves and may not have interacted with us directly. Directors are responsible for the player information they enter, and this policy explains how a named player (or a director on their behalf) can review or change that information.

Competitive activity. As events run, we store the scores, results, standings, and attendance tied to each player record. This is the core data that lets us calculate rankings and publish results.

Essential cookies and local storage. We set only the essential storage described in the “Cookies and Local Storage” section below. We do not use analytics, advertising, or third-party tracking.

We use the information described above to operate RoundsUp and for no unrelated purpose. Specifically, we use it to:

Run leagues and tournaments, including pairings, scoring, standings, and results; publish standings, results, and share pages for leagues and events, which are public by default; send account email (such as sign-in links, invitations, and billing notices); and operate, maintain, secure, and improve the service, including preventing abuse and diagnosing problems.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use player names, scores, or results to target advertising, and we do not rent or trade personal information to third parties. Aside from the service providers listed in the “Service Providers” section below, personal information leaves RoundsUp in these ways: league and event pages (standings, results, and share pages) are public by default so players can find their league, and a page shared by direct link can be viewed by anyone who has that link; a league director can ask us at support@roundsup.app to take a league private, and private leagues are removed from listings and not indexed; we may disclose it if the law requires us to or to protect the rights and safety of people and the service; and if RoundsUp is ever involved in a merger or sale of assets, account and league information may transfer to the successor as part of that transaction, in which case we will seek to have it handled consistently with this Policy and will note any material change here.

RoundsUp sets only essential storage. We do not use analytics, advertising, or third-party tracking cookies. If that ever changes, the consent banner controls whether any non-essential storage runs.

The table below lists representative examples, not an exhaustive inventory. To make the product work, we also keep some information in your browser’s local storage, such as leagues you have recently visited or followed, a draft score you have not submitted yet, a queued submission waiting to sync while you are offline, or a link token that lets you RSVP without an account. Some of these hold a name, a score, or a single-purpose access token, and they stay on your device until the action completes or you clear your browser storage. None of it is used for tracking or advertising.

RoundsUp sets only essential storage and runs no cross-site or cross-context tracking, so there is nothing for a browser “Do Not Track” or Global Privacy Control signal to turn off today. If our practices ever change, we will treat a Global Privacy Control signal from your browser as a valid request to opt out of any sale or sharing of personal information, and we will update this section to describe how those signals are honored.

We keep personal information only for as long as it serves the purpose it was collected for.

Director accounts are kept while the account is active. If you close your account, we delete or de-identify the associated account information within a reasonable period, except where we need to retain limited records to meet legal, tax, or security obligations (for example, billing history for a paid subscription).

Player records and results are kept for as long as the league or tournament they belong to exists, because standings and history depend on them. A director can remove a player record or an event; where that record has no competitive history we delete it, and where it does we de-identify it so standings for other competitors stay accurate (see “Data Deletion”). Past results form the competitive history of a league and remain visible until they are removed or de-identified, or the league itself is deleted.

Public pages. A league’s public standings and results pages are available while the league is active. When a league is deactivated or taken private, its public pages stop being available. A league director can ask us at support@roundsup.app to take a league private; taking a league private also removes it from public listings and from search engines. A director can request deletion of a league; deleting a league removes its public pages, subject to the de-identification and retention rules described in “Data Deletion.”

Depending on where you live, you have rights over your personal information. To the extent the California Consumer Privacy Act, as amended by the CPRA, applies to us, California residents have rights under it; and as a matter of policy we extend the core of these choices to everyone who uses RoundsUp, whether or not a particular law requires it.

You can ask us to: know and access the personal information we hold about you and how we use it; delete that information; and correct inaccurate information. California residents also have the right to opt out of the sale or sharing of personal information; because we do not sell personal information and do not share it for cross-context behavioral advertising, there is nothing to opt out of, but we will honor a request or a Global Privacy Control signal as a standing instruction if our practices ever change.

Because directors enter player records, corrections often involve someone other than an account holder. A named player can contact us to review, correct, or remove the information in their player record, and a director can make the same request on a player’s behalf. If you contact us about a player who competes in a specific league, we may coordinate with that league’s director to make the change accurately.

To exercise any of these rights, email support@roundsup.app. We may need to verify your request, and for player-record requests we may ask for enough detail to locate the right record. You may use an authorized agent to submit a request. We will not discriminate against you for exercising any of these rights, except for changes that necessarily result from carrying out your request itself (for example, deleting your account ends your access to it).

You can request deletion of your director account or of a specific player record at any time.

To make a deletion request, email support@roundsup.app. A director can request deletion of a player record, an event, a league, or their whole account, and a named player (or a director acting on their behalf) can ask us to delete the information in a player record. We will honor the request after verifying it, subject to the retention exceptions below.

When we remove a player record, we remove the player’s name and IFPA number. Because past results form the shared competitive history of a league, in some cases we de-identify rather than fully erase a past result, so that standings for other competitors stay accurate; a de-identified result no longer identifies the player. We may also retain limited information where the law requires it, or as needed to meet legal, tax, security, or dispute-related obligations.

We use a small set of processors to run the service, each receiving only what it needs: hosting and database (Supabase, Vercel), transactional email (Resend), and payment processing (Stripe, which receives the billing details needed to process your subscription). We do not sell your data.

Accounts on RoundsUp are for the people who run leagues and tournaments (tournament directors and the scorekeepers they invite). You must be at least 18 years old to create an account. The service is not directed to children, and we do not knowingly collect personal information directly from a child under 18 through an account. If we learn that someone under the minimum age has created an account, we will close it and delete the associated personal information.

Running an in-person pinball league or tournament is different from a child using the service. Venues often include players who are minors, and a director may enter a limited player record for a minor (a name, an optional IFPA player id, and the scores, results, and attendance from events that person plays in) so the league can be scored and standings can be shown. That information is entered by the adult director as part of operating their league, and the child does not have or need an account. A child under 13 should not enter their own name, email, comments, scores, or registrations into RoundsUp directly; where the service accepts participant input (for example a public registration or RSVP form), that entry is meant to be made by an adult director or a parent or guardian on the child’s behalf. Directors are responsible for the player records they create, including having any consent that their venue or local rules require. If we learn that a child under 13 has provided personal information to us directly without adult involvement, we will delete it.

A parent or guardian, or the director who entered the record, can ask us to remove a minor’s player record at any time by emailing support@roundsup.app, and we will honor the request. We do not use children’s information to serve advertising, we do not build advertising or tracking profiles from it, and we do not sell it.

We may update this policy as RoundsUp changes or as the law requires. When we do, we will revise the “last updated” date shown at the top of this page, and the updated version takes effect when it is posted. If a change is significant, we will provide additional notice, such as an email to directors or a notice inside the product, before it takes effect. Your continued use of RoundsUp after an update means you accept the revised policy.

If you have a question about this policy, or you want to exercise any of the rights described above, email us at support@roundsup.app. This is the right address for access, correction, and deletion requests, for questions about a player record, and for any other privacy concern. We read every message and will respond within the timeframes the law requires.