Privacy
What this site keeps about you, what it is used for, and how to have it forgotten.
What is kept
- Your email address and your name, if you register. Both are kept encrypted, with a key that belongs to your account alone. Your email address is also kept in a form that lets the site find your account when you sign in, which cannot be turned back into the address.
- Your password, if you register with one, as a hash that cannot be turned back into it. The site never keeps the password itself and cannot tell you what it was.
- Who you sign in with, if you sign in with Google: the identifier they give the site for you, and your email address where they share it. Nothing else of theirs is kept.
- What you enter: tournaments you create, the scores you enter, and the commentary and comments you write. These are public where the site shows them to the public.
- The address a request came from, for each failed attempt to sign in and each request to set a new password, with when it was made. It is kept so that guessing a password or flooding an inbox can be slowed, and for nothing else.
What is not kept
The site does not use advertising or tracking, and shares nothing about you with advertisers.
Cookies
The site sets a cookie to keep you signed in, and others to remember what you chose: the theme, the language, how you sorted lists, the country, region and sport you filtered by, the view of a competition, which notes and commentaries you have read, and what you have said about notices of what is new. While you sign in with Google it keeps one more, until you are back. They are needed for the site to do what you asked and are not used to follow you. Registering uses Google reCAPTCHA to tell people from programs, which Google runs under its own terms.
Who can see it
Your name is encrypted at rest, and only your fellow tournament managers can see it. Your email address is kept encrypted too, and the site reads it only to do what you asked of it, such as sending you an email. The people who run the site look after the database they are kept in.
The site sends email to confirm an email address, to set a password or tell you it was changed, to tell you an account has moved to a new email address, and to forget an account, and nothing else to you. They go through the service the site uses to send mail.
Having it forgotten
You can have your account forgotten at any time from your profile once you are signed in. Your name, your email address and any Google or Facebook account linked to it are then replaced, for good, in everything the site keeps, by "Forgotten Account" and a number, an address at example.com that belongs to nobody, and a number. They cannot be recovered by anybody, you included. What you published stays, under the name "Forgotten Account" and that number. Forgetting cannot be undone, which is why it is asked twice, and the email address is then free to be registered again as a new account. A copy of the site made before you were forgotten, such as a backup, still has what it had then, for as long as the copy is kept.
Asking
Anything not said here, or any doubt about what is kept about you, is for the people who run the site.