Privacy policy

What LeagueCircuit is

LeagueCircuit is an open-source tournament management platform. Tournament organizers (admins) create tournaments and enter the data; spectators watch through public links without creating an account.

Data we store

• Organizer accounts — email, name, and a salted password hash. Passwords are never stored in plain text.
• Tournament data— team names, player names and optional details (nickname, email, country, avatar), match results, and statistics. This data is entered by tournament organizers, who are responsible for having the players' consent.
• Images — avatars, team logos, and banners uploaded by organizers are stored on Cloudinary.

Cookies

We set two kinds of cookies, both strictly functional: a session cookie for signed-in organizers, and an access cookie for viewers who unlock a private tournament with its password. There are no advertising, analytics, or third-party tracking cookies.

What we don't do

• No ads, no selling or sharing of data with third parties.
• No behavioral tracking or profiling.
• Realtime score events are end-to-end encrypted per tournament — the relay server only ever handles ciphertext and stores nothing.

Public visibility

Public tournaments — including team names, player names/nicknames, and results — are visible to anyone with the link. Private tournaments require the viewer password the organizer sets. If you are a player and want your information removed, contact your tournament organizer, or reach us via the contact page.

Self-hosting

LeagueCircuit is open source; anyone can run their own instance. This policy applies to this instance only — self-hosted instances are operated by, and are the responsibility of, whoever runs them.

Changes

If this policy changes, the date above is updated. Significant changes will be noted in the project's release notes.