Privacy
Last updated
The Short Version
- We don't collect player names, rosters or any child's personal information.
- Directors give us an email address, and we use it only to sign them in.
- Families don't need an account. There are no ads, no tracking cookies, and our analytics use no cookies at all.
- What a director publishes about a tournament, including photos and documents, is public.
- We never sell or share your information.
If You Follow a Tournament
You can read every tournament page, subscribe to its calendar and print it without an account, and we don't ask who you are. Like every website, our servers see your IP address and browser when you load a page; we use that only to deliver the page and keep the site safe, and we don't build a profile of you.
Your browser remembers your theme choice (light or dark) on your own device. That never reaches us.
If You Run a Tournament
When you sign in, we keep:
- Your email address, to send you sign-in links and codes. We don't send newsletters or marketing, and we don't show your address on any public page.
- Your sign-in sessions: a cookie that keeps you signed in for up to 30 days, and the IP address and browser each session started from, to help keep your account safe.
- What you enter about your tournaments: names, dates, team names, schedules, scores, venues, photos, documents, rules and links.
While you build a tournament, the draft stays on your device until you sign in to save it.
If you add a contact to a tournament, families see the name and phone number you enter. The email address is never shown: the Email the Director button opens the family's own email app with the address filled in, so it reaches you without appearing on the page.
Children's Information
Open Tourney is built so it never needs a child's personal information. Teams are listed by team name only: there are no rosters, player names, ages, numbers or player photos. Directors agree in our Terms not to post them, and venue photos should show the venue, not people.
Accounts are for adults: you must be at least 18 to sign in and run a tournament. We don't knowingly collect personal information from children under 13. If we learn that a child under 13 has signed in, we delete that account and its information. If you believe that has happened, please tell us through the report form.
If you see a child's name or photo on Open Tourney, please report it and we'll take it down.
What Is Public
A tournament is private while it is a draft. Once a director publishes it, everything on its page is public to anyone with the link: the name, the "Run By" name, teams, schedule, scores, venues, photos, documents, rules and the list of changes. Public pages stay up after the tournament ends, so results remain available.
Cookies and Analytics
The only cookie we set is the sign-in cookie for directors. There are no advertising or tracking cookies, and nothing follows you to other websites.
To learn which pages are used, we use privacy-friendly page analytics that set no cookies and don't identify visitors, and we count things like tournaments started and published ourselves, without identifying who you are. The bot check on the sign-in, publish and report forms runs only on those forms.
Who Handles Data for Us
We use a few outside services to run Open Tourney. Each one handles data only to do its job, and none may use it for anything else:
- Hosting provider: Runs the site: the servers, the database, uploaded files, the bot check and our page analytics.
- Email delivery: Sends sign-in emails, so it sees the address each one goes to.
- Error reporting: Collects error reports when something breaks, with technical details of the failing request.
- Uptime monitoring: Checks that the site is up by loading public pages. It sees no personal data.
For the current list of the companies we use, ask us through the report form and leave your email address so we can reply.
How Long We Keep It
- Your account and drafts: until you delete them.
- Published tournaments: as long as Open Tourney runs, so the results stay public.
- Records used to stop abuse (such as how often a connection tries to sign in): 24 hours. A log of emails sent, which stores a scrambled form of each address, not the address: 30 days.
- Backups: nightly copies for 90 days and monthly copies for a year, then deleted. We use them only to recover from a failure, never to bring back an account you deleted.
Your Choices
Signed-in directors can download everything they run and delete their account from Account (reached from My Events). Deleting your account removes your email address, sign-ins and drafts at once. Published tournaments stay up at their links, frozen as they were, without the contact option, and their change list notes that the account was closed. If you need a published tournament taken down, send us a report.
For anything else about your data, use the report form and leave your email address so we can reply.
Changes to This Policy
If we change how we handle data, we'll update this page and the date at the top before the change takes effect.