Privacy Policy
Last updated: July 2026
1. Who We Are
Brackify, Inc. (“Brackify,” “we,” “us”) operates the brackify.gg website, mobile applications, and related tournament, subscription, and social services (collectively, the “Services”). This Privacy Policy explains how we collect, use, share, and protect personal information and describes your rights. It applies to all users worldwide, including where additional regional disclosures (such as GDPR, UK GDPR, CPRA/CCPA, and LGPD) apply.
2. Information We Collect
- Account & Profile: Name, username, display name, email, passwords, profile images, pronouns, biography, linked social accounts, timezone, language, subscription tier, and tournament preferences.
- Social & Community Content: Posts, media uploads, comments, reactions, bookmarks, follows, public social activity, and analytics tied to that activity.
- Social Messaging (Direct Messages & Requests): Message body text you send or receive, sender and recipient identifiers, conversation identifiers, timestamps, read/unread state, mute/archive/block preferences, report reasons and details, spam and safety signals, and notification delivery metadata. Private message content is not shown on public profiles, feeds, or public search.
- Tournaments & Integrations: Events you create or join, matches, results, badges, Discord/Twitch integration metadata, and automation preferences.
- Usage & Device: Log files, device IDs, IP address, browser type, operating system, pages viewed, referral URLs, in-app events, error reports, cookies, and similar technologies (via Firebase, Google Analytics, and internal telemetry).
- Payments & Billing: Subscription status, plan details, billing address, partial payment identifiers, payment-order totals and line items, refund/dispute status, PayPal merchant identifiers, policy-acceptance records, and transaction metadata processed through PayPal, Stripe, Apple, or Google. We never store full card numbers.
- Communications & Support: Emails, chat messages, feedback, surveys, and support tickets.
- AI & Safety Signals: Automated moderation scores, content classification, fraud indicators, and enforcement records necessary to protect the community.
3. How We Use Information
- Provide and maintain the Services, including tournaments, social features, Social Messaging, analytics, and integrations.
- Process subscriptions, tournament registrations, venue fees, optional prize-pot contributions, refunds, and in-app purchases; verify eligibility; and deliver receipts.
- Personalize recommendations, surfaces, and notifications; remember preferences; and measure engagement.
- Deliver direct messages and message requests; honor mute, block, archive, and notification preferences.
- Detect, investigate, and prevent fraud, abuse, spam, violations of our Agreements, or security incidents (including review of reported private messages).
- Improve the Services through product research, testing, analytics, and AI models. We do not use private message body text for public product surfaces or advertising profiles.
- Comply with legal obligations (e.g., tax, regulatory, and reporting requirements) and respond to lawful requests.
- Communicate with you about updates, support, marketing (where permitted), and important changes.
4. Legal Bases (GDPR/UK GDPR/LGPD)
- Contract: To deliver the Services, maintain your account, fulfill subscriptions, and operate Social Messaging you choose to use.
- Legitimate Interests: To secure, personalize, and improve Brackify; to prevent abuse and spam (including in private messaging); and to defend legal claims.
- Consent: For optional communications, cookies, or integrations where consent is required. You may withdraw consent at any time.
- Legal Obligations: To comply with tax, accounting, law enforcement, and regulatory requirements.
- Vital Interests / Public Interest (where applicable): To protect users from serious harm, including child safety threats, when processing is necessary and proportionate.
5. How We Share Information
- Service Providers: We use trusted vendors for hosting (AWS/GCP), analytics (Firebase, Google Analytics), payments (PayPal, Stripe, Apple, Google), communications (SendGrid, Firebase Cloud Messaging), moderation, and support.
- Tournament organizers: When you register, contribute, request a refund, or dispute a paid tournament transaction, we share the information needed to run the event and administer the payment, such as your account identity, registration/team details, order status, amounts, and refund request. Organizers do not receive your full payment-card number.
- Integrations: If you connect Discord, Twitch, or other integrations, we share necessary metadata to operate those features.
- Organizers & Community: Tournament details, profiles, and public content are visible to other users by design.
- Message recipients: When you send a direct message or message request, the content and necessary metadata are delivered to the intended recipient account (and any devices signed into that account).
- Corporate Events: In the event of a merger, acquisition, financing, or sale of assets, data may be transferred as part of the transaction.
- Legal & Safety: We may share information (including private message content when necessary) to comply with law, enforce our Agreements, or protect the rights, property, or safety of Brackify, users, or others.
We do not sell personal information. We do not share personal data with advertisers for their independent marketing without your consent. We do not use private message body text for third-party advertising targeting.
6. Social Messaging Privacy Details
Social Messaging is designed for private user-to-user communication. The following practices apply:
- Visibility: Message body text is available to conversation participants and to Brackify personnel or systems only as needed for delivery, security, abuse investigation, and legal compliance. It is not listed in public search, public profiles, public feeds, or public analytics dashboards. Social Messaging is not end-to-end encrypted; message content is processed on our systems so we can deliver, secure, and moderate the feature.
- Notifications: Push and in-app alerts for messages use generic previews (for example, that you received a new message or message request) rather than full private body text. You may disable message notifications in settings.
- Controls you can use: Mutual-follow rules, message-request privacy (everyone, people you follow, or no one), mute, archive, block, soft-delete for yourself, unsend/delete tools where available, and report tools.
- Reports and moderation: If you report a conversation or message, we store the report reason, optional details, and snapshots needed for review. Authorized moderators may review reported private content. Abuse reports and enforcement records may be retained longer than ordinary message content when needed for safety and legal reasons.
- Retention: Active messages are retained while needed to provide the feature. Soft-deleted items may remain in backup or safety systems for a limited period. Account closure requests are handled under Section 8 (Your Rights & Choices) and applicable law; some records may be retained where legally required.
- Your responsibilities: Do not share passwords, payment credentials, or other sensitive secrets in messages. You control what you send. Other participants may copy, screenshot, or export messages you send them outside Brackify.
7. Data Retention
We retain personal information for as long as necessary to provide the Services, fulfill legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data category and legal requirements.
- Account data is retained while your account is active and for a reasonable period after closure.
- Payment, policy-acceptance, refund, dispute, and ledger records are kept as required by tax, accounting, fraud-prevention, and financial regulations.
- Social Messaging content is retained while conversations remain active for participants, subject to soft-delete tools and safety holds.
- Safety and enforcement records (including report snapshots) may be retained longer to prevent recurring abuse.
- We anonymize or aggregate data when ongoing retention is needed for analytics or product development. Private message body text is not used to build public advertising profiles.
8. Your Rights & Choices
- Access, correct, or delete personal information through account settings or by contacting us.
- Export your data where technically feasible.
- Opt out of marketing emails or push notifications via preference centers or device settings, including message notification preferences.
- Use in-app messaging controls (block, mute, request privacy, report, soft-delete) to manage Social Messaging.
- Disable cookies or analytics through browser settings; note that essential cookies are required to use the Services.
- For GDPR/UK GDPR/LGPD/CPRA rights (erasure, restriction, objection, portability, opt-out of data “sales” or “sharing”), contact [email protected]. We will respond within required timeframes. Note that erasure of message content may be limited where another participant still has a lawful interest in retaining a conversation copy, or where retention is required for legal or safety reasons.
9. Security
We employ administrative, technical, and physical safeguards such as encryption in transit, limited access controls, multi-factor authentication for staff, network monitoring, and regular security assessments. Access to private message content by staff is restricted to operational, safety, and legal needs. No method of transmission or storage is entirely secure; please safeguard your credentials and notify us immediately of any suspected compromise.
10. International Transfers
Brackify is based in the United States and processes data globally. When transferring personal information from the European Economic Area, United Kingdom, Brazil, or other regions with data export requirements, we rely on approved safeguards such as Standard Contractual Clauses, adequacy decisions, or your explicit consent.
11. Children’s Privacy
The Services are not directed to children under 13 (or the age of digital consent in your jurisdiction). If we learn that we have collected personal information from a child without verifiable parental consent, we will delete it. Parents or guardians who believe their child has provided data may contact us at [email protected]. Social Messaging must not be used to exploit or endanger minors.
12. App Store & Play Store Disclosures
When accessing Brackify via Apple or Google mobile platforms, additional privacy disclosures may appear in those stores. The information described there is consistent with this Policy. Apple and Google are not responsible for our data practices and do not collect personal data through Brackify except as described in their own privacy notices.
13. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date reflects the latest changes. For material updates, we will provide additional notice (such as email, in-app alerts, or banners). Continued use of the Services after changes becomes effective constitutes acceptance of the revised Policy.
14. Affiliate Creator Program Data
When you submit an application through the Brackify Creator Program, we collect the information you provide, including your name, email address, country of residence, social media handles, platform URLs, follower counts, content categories, and personal statements. This information is used solely to evaluate your application and communicate our decision.
If you are accepted into the Creator Program, we additionally collect and process:
- Your unique creator referral code and associated conversion records.
- Your Stripe Connect account identifier and payout history.
- Earnings, commission calculations, and pending balance data.
- Records of which subscriber accounts used your code and when.
Commission tracking uses a 6-month attribution window per subscriber from the date of first use. Payout processing is handled through Stripe Connect on our behalf. We retain creator financial records as required by applicable tax law, typically 7 years. You may request deletion or correction of non-financial personal data by contacting [email protected]; legally mandated financial records are exempt from deletion requests.
Creator application data and conversion records are never sold or shared with third parties except as required to process payouts (Stripe), comply with legal obligations, or enforce our policies.
15. Contact & Data Protection Officer
If you have questions, privacy requests, or concerns, contact us at [email protected].
EU/UK residents may also contact our Data Protection Officer at [email protected].
If you are unsatisfied with our response, you may lodge a complaint with your local supervisory authority.
Thank you for trusting Brackify. We appreciate your cooperation and commitment to a safe, inclusive community.