Privacy policy

What LeagueCircuit is

LeagueCircuit is an open-source tournament management platform. Tournament organizers (admins) create tournaments and enter the data; spectators watch through public links without creating an account.

Data we store

• Organizer accounts - email, name, and a salted password hash. Passwords are never stored in plain text.
• Tournament data - team names, player names and optional details (nickname, email, country, avatar), match results, and statistics. This data is entered by tournament organizers, who are responsible for having the players' consent.
• Images - avatars, team logos, and banners uploaded by organizers are stored on Cloudinary.

Cookies

We set one strictly functional cookie: the session cookie for signed-in organizers. There are no advertising, analytics, or third-party tracking cookies.

What we don't do

• No ads, no selling or sharing of data with third parties.
• No behavioral tracking or profiling.
• Realtime score events are end-to-end encrypted per tournament - the relay server only ever handles ciphertext and stores nothing.

Public visibility

Tournaments - including team names, player names/nicknames, and results - are visible to anyone who has the tournament link. Links are random and unlisted: there is no public directory or search, so only people the organizer shares the link with can find it. If you are a player and want your information removed, contact your tournament organizer, or reach us via the contact page.

Self-hosting

LeagueCircuit is open source; anyone can run their own instance. This policy applies to this instance only - self-hosted instances are operated by, and are the responsibility of, whoever runs them.

Changes

If this policy changes, the date above is updated. Significant changes will be noted in the project's release notes.