Privacy policy

1. Data controller

TournamentZZZ is the controller of the personal data collected through this Platform. For any privacy-related question, you can contact the administration team through the Platform’s official channels.

2. Data we collect

When you sign up and use the Platform, we collect:

• Registration data: username, email address and password (stored as a bcrypt hash).
• Profile data: avatar URL, favorite games, In-Game Names (IGN) per game and region.
• Activity data: teams you take part in, tournaments you compete in, match history and results.
• Technical data: IP address and session tokens managed with JWT with automatic expiry.

3. Purpose of processing

We use your data exclusively to:

• Manage your account and authenticate your identity on the Platform.
• Let you take part in tournaments, teams and matches.
• Send you in-app notifications about assigned matches, team requests and results pending confirmation.
• Show your public profile (username, games, team, history) to other users of the Platform.
• Compute aggregated and anonymous usage statistics of the Platform.

4. We do not share your data

TournamentZZZ does not sell, rent or transfer your personal data to third parties for commercial purposes. Data can only be accessed by the Platform’s administration team (STAFF) for the operational management of tournaments and dispute resolution. We do not use your data for third-party advertising.

5. Security

We apply reasonable technical measures to protect your data: passwords hashed with bcrypt, communications encrypted over HTTPS and JWT tokens with expiry. However, no system is 100% secure. In case of a security breach affecting your data, you will be notified within the legally established period.

6. Your rights

Under the GDPR and Spanish data protection regulations, you have the right to:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate data from your profile or by contacting STAFF.
• Erasure: request the deletion of your account and associated data.
• Portability: receive your data in a machine-readable format.
• Objection: object to the processing of your data in certain circumstances.

To exercise any of these rights, contact the administration team through the Platform.

7. Cookies and reCAPTCHA

The Platform uses session cookies that are strictly necessary for the service to work (storing the authentication token). We do not use tracking or advertising cookies.

The Platform’s forms are protected by Google reCAPTCHA v3 to prevent automated abuse. Its use is subject to Google’s Privacy Policy and Terms of Service.

8. Data retention

We keep your data while your account is active. Deactivated accounts are marked as inactive, but their history data (matches, tournaments) may be kept in anonymized form to preserve the integrity of the Platform’s competitive history. You can request full deletion by contacting STAFF.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or in applicable regulations. We will notify you of significant changes through a notice on the Platform. The last updated date will always be visible at the top of this document.