Privacy Policy

1. Who we are and our role

The Tourney is provided by Certamen Inc, a Canadian company. For your account, we decide how your information is used. For information an organizer collects for their event — registrations, rosters, forms, documents and photos — the organizer decides what is collected and why, and we process it on their behalf. Questions about an event's information go to its organizer first; we help them answer.

2. What we collect

• Your account: name, email address, optional phone number, a securely hashed password, and your preferred language and notification settings.
• Household members: children or other people you add and sign up — their name and birth year (not a full date of birth).
• Teams and events: teams, rosters, jersey numbers, roles, registrations, schedules, results and statistics.
• Forms, documents and photos an organizer asks for — for example waivers, medical or eligibility documents, and player photos used to confirm identity at the event.
• Signatures: when you sign a waiver or form we record your typed name or tick, the time, your IP address and browser, and a fingerprint of the exact text you saw.
• Messages: messages and emails sent through the service, and replies to them.
• Payments: we never see full card numbers. Card details are entered on our payment providers' own forms. We keep the record of payments (amount, status, the provider's reference) and, for an organizer's card on file, its brand and last four digits.
• Technical information: a sign-in cookie that keeps you signed in, IP addresses used to protect sign-in against abuse, and — only if you turn them on — browser notification subscriptions.

We don't use advertising or tracking cookies, and we don't sell personal information.

3. How we use it

• To run the service: accounts, registrations, schedules, results, messages and payments.
• To let organizers run their events, as they direct.
• To send the emails and notifications the service depends on (for example confirmations, schedule changes and receipts).
• To keep the service secure and prevent abuse.
• To meet legal obligations, such as keeping financial records.

4. Who we share it with

• Organizers and teams of the events you take part in, as needed to run them.
• Service providers who process information for us under contract:
  • our hosting provider, which stores the service's data;
  • Resend, which delivers our emails;
  • Airwallex, which processes the platform fees organizers pay us;
  • Stripe, PayPal and Square, when an organizer uses them to take entry fees (they receive the payment details you give them);
  • Anthropic, an AI provider, used in two places only: to suggest how the columns of a roster spreadsheet being imported line up (it receives the column headings and a few sample rows, never a whole roster), and to read a photographed golf scorecard when someone uploads one;
  • your browser's push service, if you turn on notifications.
• Authorities, when the law requires it.

Some of these providers are outside your country, including in the United States. Where the law requires it, we put safeguards in place for those transfers.

5. How long we keep it

Player photos and uploaded documents, including scanned signed waivers, are deleted 7 days after the event ends. We keep account information while your account is open. Other event information is kept so organizers and participants can see their history; waivers signed on the site and their records are kept as evidence for as long as they may be needed. Financial records are kept for as long as the law requires. Deleting something in the service hides it but keeps a record; information is permanently removed when you ask and the law allows.

6. Children

A child a parent or guardian adds to their household has no sign-in of their own; the adult acts for them. We store a birth year rather than a full date of birth. Organizers must have a parent's or guardian's consent where the law requires it before collecting a child's information.

7. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your information, or to object to how it is used. Update most of it yourself in your account settings, or contact us. For information an organizer collected for their event, ask the organizer; we help them respond. You can also complain to your local data protection authority.

8. Security

Passwords are hashed, connections are encrypted, and the payment-processor credentials organizers connect are encrypted at rest. Card numbers are never stored by us. Access to information inside the service follows each person's role in an event or organization. No system is perfectly secure; if a breach affects your information we will notify you, or the organizer responsible for it, as the law requires.

9. Changes

If we change this policy in a way that matters, we'll tell you before the change takes effect.

Questions? Contact us. See also our Terms of Service, Privacy Policy and Refund and Cancellation Policy.