Introduction
This Privacy Policy describes how Tournament System ("we," "us," or "our") collects, uses, and protects your information when you use our tournament management dashboard. We are committed to protecting your privacy and handling your data transparently.
Information We Collect
When you authenticate with Discord, we request only the identify scope and collect the following information from your Discord profile:
- Discord User ID: A unique identifier for your Discord account
- Username: Your Discord username
- Avatar: Your Discord profile picture URL
We do not request or collect your email address, friend lists, or any other Discord data beyond what is listed above.
How We Use Your Information
We use the collected information for the following purposes:
- Authentication: To verify your identity and provide access to authorized users
- Authorization: To check your Discord ID against our whitelist of approved users
- Display: To show your username and avatar within the dashboard interface
Data Storage and Security
Your data is handled as follows:
- Your Discord access token is used once during login to fetch your profile information and is not stored
- We do not store your Discord password; authentication is handled entirely through Discord's OAuth2 system
- Your session is maintained using signed cookies
- Access to the dashboard is restricted to pre-approved Discord accounts on our whitelist
Third-Party Services
We use the following third-party services:
We do not sell, trade, or otherwise transfer your personal information to outside parties.
Cookies and Session Data
We use essential cookies to:
- Maintain your authenticated session
- Remember your login state
- Store your theme preference (light/dark mode)
These cookies are necessary for the dashboard to function and cannot be disabled while using the service.
Data Retention
We retain your data as follows:
- Session Data: Stored in your browser cookies and cleared when you log out or when your session expires
- Profile Information: Your username and avatar URL are updated in our database each time you log in
- Access Tokens: Not stored; used only during the login process and then discarded
Your Rights
You have the following rights regarding your data:
- Logout: You can end your session at any time by logging out, which clears your session data
- Revoke Access: You can revoke our access to your Discord data at any time through Discord's Settings > Authorized Apps
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy. Continued use of the dashboard after changes constitutes acceptance of the updated policy.
Contact
If you have questions about this Privacy Policy or our data practices, please contact your tournament administrator.