Privacy Policy

Last updated: 2026-07-09

This policy explains what information RoundsUp collects, why, and the choices you have. Final wording is under review; the sections below are the structure it will follow.

Information We Collect

Covers: account details for tournament directors (email, name); player records a director enters (name, optional IFPA number); scores and results; and the fact that zero-account players are named by a director without creating an account of their own.

How We Use Your Information

Covers: running leagues and tournaments, showing public standings and share pages, sending account and result emails, and improving the service. No selling of personal data.

Cookies and Local Storage

RoundsUp sets only essential storage. We do not use analytics, advertising, or third-party tracking cookies. If that ever changes, the consent banner controls whether any non-essential storage runs.

NamePurposeTypeRetention
sb-*Keeps a signed-in director authenticatedEssential cookieSession / refresh window
themeRemembers light or dark preferenceEssential (local storage)Until cleared
roundsup:consentRemembers your cookie choiceEssential (local storage)Until cleared

Do Not Track

Covers how RoundsUp responds to browser “Do Not Track” and Global Privacy Control signals. Because the product sets only essential storage and runs no cross-site tracking today, there is nothing to opt out of; if that changes, this section states how those signals are honored.

Data Retention

Covers: how long accounts, player records, and results are kept, and what happens to public pages when a league goes inactive.

Your Rights and Choices

Covers: access, correction, export, and objection rights, plus how a named player (or a director on their behalf) can request changes.

Data Deletion

Covers how to request deletion of an account or a player record. Until the reviewed process is published, deletion requests can be sent to the contact address below and will be honored.

Service Providers

Covers the processors that run the service: hosting and database (Supabase, Vercel), transactional email (Resend), and, when billing launches, the payment processor. Each receives only what it needs.

Children’s Privacy

Covers the minimum age and how player records involving minors at a venue are handled.

Changes to This Policy

Covers how updates are announced and the effective date.

Contact Us

Covers the contact email and address for privacy questions and requests.