На главную

Privacy and Cookie Policy

Last Updated: August 24, 2026

1. Introduction & Controller Info

Welcome to TourneyOS. We respect your privacy and are committed to protecting your personal data. This Privacy and Cookie Policy explains how TourneyOS (“we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you visit our website at https://tourneyos.com and use our tournament platform (collectively, the “Platform”).

For the purposes of GDPR, PIPEDA, and other applicable data protection laws, the Data Controller of your personal information is TourneyOS, headquartered in Winnipeg, Manitoba, Canada.

If you have any questions about this Policy or wish to exercise your data rights, please contact our Data Protection Officer at: legal@tourneyos.com.

2. Information We Collect

We strictly adhere to the principle of data minimization, collecting only the information reasonably necessary to operate the Platform.

  • Account Information: When you register, we collect your email address, a securely hashed password, and your date of birth (strictly utilized for Age Gate verification).
  • Profile Data: You may voluntarily provide user-generated content, such as avatars, custom backgrounds, and usernames.
  • Technical Data: We automatically collect your IP address, browser type, operating system, and log data when you interact with the Platform.
  • Financial Information: TourneyOS does not collect, process, or store your credit card numbers or raw financial data on our servers. All Premium subscription purchases are securely processed by our trusted third-party payment providers (e.g., Stripe, PayPal).
  • Connected Gaming Accounts & APIs: If you choose to link third-party gaming platforms or communication services (such as Steam, Riot Games, Epic Games, or Discord) to your TourneyOS profile, we may collect and store public data provided by their official APIs.

3. How We Use Your Info

We process your personal data for the following lawful purposes:

  • Service Delivery: To create your account, manage tournament brackets, process Premium subscriptions, and provide customer support.
  • Security & Anti-Cheat: To monitor Platform integrity, detect and prevent cheating or smurfing, enforce our Terms of Service, and maintain a secure competitive environment.
  • Marketing Communications: In strict compliance with Canada's Anti-Spam Legislation (CASL), we will only send you marketing or promotional emails if you have provided your explicit, affirmative consent (Opt-in).
  • Public Profile & Tournament Data: Certain information is publicly visible by default, including your username, avatar, team affiliation, tournament participation, match history, and performance statistics.

4. Cookies & Tracking

The Platform uses cookies, web beacons, tracking pixels, and similar technologies to ensure core functionality and analyze user behavior.

  • Strictly Necessary Cookies: Essential for the basic operation of the Platform, such as maintaining secure login sessions and processing payments. These cannot be disabled.
  • Analytics Cookies: Tools (such as Google Analytics) used to understand how users interact with our Platform, enabling us to improve performance and user experience.
  • Marketing Cookies & Pixels: Tracking technologies used to deliver targeted advertisements and measure retargeting campaigns on third-party platforms.
  • Cookie Consent & Management: Upon your first visit to the Platform, you will be presented with a Cookie Banner. Analytics and Marketing scripts will only be deployed upon your active consent.

5. Data Sharing (Third Parties)

California Consumer Privacy Act (CCPA) Notice — Do Not Sell My Personal Information: TourneyOS explicitly affirms that we do not sell, rent, or trade your personal information to data brokers or third parties for monetary or other valuable consideration.

We only share your data with trusted third parties under strict confidentiality agreements, including:

  • Service Providers: Cloud hosting providers, payment processors (Stripe, PayPal), and analytics platforms required to operate our business effectively.
  • Legal & Regulatory Authorities: We may disclose your information if legally required to do so by a valid subpoena, court order, or to protect the safety and legal rights of TourneyOS, our users, or the public.
  • Business Transfers: If TourneyOS is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to privacy standards materially similar to this Policy.

6. International Data Transfers

As a globally accessible platform headquartered in Canada, the information we collect may be transferred to, stored, and processed in Canada, the United States, or other jurisdictions where our service providers operate. Canada is formally recognized by the European Commission as providing an “adequate level of data protection.” For data transfers to the US or other regions, we implement appropriate legal safeguards to ensure your data remains protected.

7. User Rights (Your Data Rights)

Depending on your jurisdiction (including under the GDPR and PIPEDA), you possess comprehensive rights regarding your personal data:

  • Right to Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request the correction of any inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your account and personal data from our active systems. Please note that we may retain certain identifiers solely for the legitimate interest of enforcing bans and maintaining platform security.
  • Right to Withdraw Consent: Where data processing is based on your active consent, you may withdraw it at any time.

To exercise any of these rights, please submit a formal written request to legal@tourneyos.com. We will respond to all legitimate requests within the timeframes mandated by applicable law (typically within 30 days).

8. Children's Privacy (COPPA)

TourneyOS is not directed at, nor do we knowingly collect personal information from, children.

  • In strict compliance with the US Children's Online Privacy Protection Act (COPPA), users outside the EU/EEA must be at least 13 years of age.
  • In strict compliance with the GDPR, users within the EU/EEA must be at least 16 years of age.

If we become aware that we have inadvertently collected personal data from a child under the applicable minimum age, we will take immediate steps to permanently delete the information and terminate the unauthorized account. If you are a parent or guardian and believe a child has provided us with personal information, please contact us immediately at legal@tourneyos.com.

9. Data Retention

We strictly adhere to the principle of purpose limitation, retaining your personal information only for the duration your account remains active or as required to satisfy the objectives described in this Policy. Upon a formal request for account erasure, we will remove your information from our active databases within 30 days, and from our encrypted backup systems within 90 days.

Notwithstanding the above, we are legally obligated to maintain specific transactional records — such as billing confirmation receipts — for a period of up to 7 years to ensure compliance with relevant tax and financial accounting regulations. Certain unique identifiers associated with prohibited users may be preserved indefinitely to uphold Platform integrity and effectively prevent ban evasion.