Privacy Policy

Effective date: June 2025 · Last updated: June 2025

This Privacy Policy explains how TrackMyElo.com ("we", "us", or "our") collects, uses, shares, and protects information when you use our Service. By using TrackMyElo, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

  • Account information — when you register, our authentication provider (Clerk) collects your email address and, if you use a social login (e.g. Google), your name and profile picture as provided by that provider. We do not directly handle or store your password.
  • Display name — any display name you optionally set within the app, stored in your Clerk account metadata.
  • User-generated content — leagues, player names, match results, tournament data, statistics, and friends lists that you create are stored on our servers and associated with your account. See Section 5 regarding third-party names entered by users.
  • Technical and log data — our authentication provider and hosting infrastructure may collect standard server logs including IP addresses, browser type, and access timestamps for security and operational purposes.
  • Cookies and local storage — the Service uses session cookies set by Clerk solely for authentication (these are strictly necessary cookies). We may use browser local storage to cache your data for performance. We do not use advertising, analytics, or behavioral tracking cookies.

2. Lawful basis for processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Performance of a contract — processing your account information and user-generated content is necessary to provide the Service you signed up for.
  • Legitimate interests — we process technical and log data to maintain the security, stability, and improvement of the Service. Our legitimate interests do not override your fundamental rights.
  • Legal obligation — we may process your data where required by applicable law.
  • Consent — where required by law and not covered by the above bases, we will request your explicit consent before processing.

3. How we use your information

  • To create and manage your account and authenticate you.
  • To provide, maintain, and improve the features of the Service.
  • To respond to your support requests or inquiries.
  • To enforce our Terms of Service and protect the security of the Service.
  • To comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties. We do not use your data for targeted advertising.

4. Information sharing

We do not share your personal information with third parties except in the following circumstances:

  • Service providers — we share data with trusted third-party providers (see Section 6) who process data on our behalf under appropriate confidentiality obligations.
  • Legal requirements — we may disclose your information if required by law, regulation, legal process, or enforceable governmental request.
  • Protection of rights — we may disclose information where reasonably necessary to protect our rights, property, or safety, or that of our users or the public.
  • Business transfers — if TrackMyElo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5. User-generated content and third-party names

TrackMyElo allows users to enter player names, teammate names, and other identifiers within their leagues. These names may refer to real people who have not registered with TrackMyElo and have not directly consented to having their information stored on our platform.

By entering any third party's name or information into the Service, you represent and warrant that you have the authority or consent to do so, and you take full responsibility for that content. We are merely a data processor with respect to such content — the account holder (league owner) is the data controller responsible for ensuring lawful use of third-party information.

If you believe your personal information has been entered into TrackMyElo without your consent, please contact us using the Contact button in the app and we will promptly review and, where appropriate, delete the relevant data.

6. Third-party service providers

  • Clerk — handles user authentication and stores account credentials and metadata. Clerk acts as a data processor on our behalf and maintains a Data Processing Agreement. See Clerk's Privacy Policy.
  • Amazon Web Services (AWS) — league data is stored in AWS S3 and DynamoDB in the United States. Data is encrypted at rest and in transit. AWS acts as a data processor and maintains standard contractual clauses for international transfers. See AWS's Privacy Notice.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their policies.

7. International data transfers

TrackMyElo is operated from the United States. If you access the Service from the EEA, United Kingdom, Switzerland, or other regions with data protection laws, your information will be transferred to and processed in the United States and other countries where our service providers operate. These countries may not have data protection laws equivalent to your own.

Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) to ensure your data is protected. By using the Service, you consent to such transfers.

8. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may delete your account at any time from within the app (Settings → Delete Account), which will permanently remove your league data and personal information from our active systems. Residual copies in backup systems will be purged within a reasonable period thereafter. We are not responsible for data loss resulting from account deletion.

9. Data security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk. If you believe your account has been compromised, contact us immediately.

10. Data breach notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and in compliance with applicable law, including within 72 hours of becoming aware of the breach where required by GDPR. Notification will be provided via email to the address associated with your account, or through a prominent notice on the Service.

11. Cookies and tracking

TrackMyElo uses only strictly necessary cookies set by Clerk for the purpose of maintaining your authenticated session. Strictly necessary cookies do not require consent under most frameworks as they are essential for the Service to function. We do not use analytics, advertising, or non-essential tracking cookies. If you disable cookies, you will not be able to log in or use the Service.

12. Children's privacy (COPPA)

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, please contact us immediately. We will take steps to delete such information promptly. If we learn we have inadvertently collected personal information from a child under 13, we will delete it as soon as possible and terminate the associated account.

13. California privacy rights (CCPA)

If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA), subject to applicable thresholds and exemptions:

  • The right to know what personal information we collect and how it is used.
  • The right to request deletion of your personal information.
  • The right to opt out of the sale of your personal information (we do not sell personal information).
  • The right to non-discrimination for exercising your privacy rights.

To exercise these rights, use the Contact button in the app. We will respond to verifiable requests within 45 days as required by law.

14. Your rights (EEA / UK / Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following rights under applicable data protection law:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate or incomplete data.
  • Erasure — request deletion of your personal data ("right to be forgotten").
  • Restriction — request that we restrict processing of your data in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise these rights, contact us using the Contact button in the app. You also have the right to lodge a complaint with your local data protection authority.

15. Limitation of liability for data incidents

TO THE EXTENT PERMITTED BY LAW, TRACKMYELO SHALL NOT BE LIABLE FOR ANY DAMAGES RESULTING FROM UNAUTHORIZED ACCESS TO, OR ALTERATION, DISCLOSURE, OR DESTRUCTION OF YOUR DATA. Your provision of personal information is at your own risk. Our liability for any data breach or privacy incident is limited as set forth in our Terms of Service.

16. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page. Where required by law, we will provide more prominent notice or seek your consent. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

17. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, use the Contact button inside the app. We will respond to all legitimate privacy inquiries promptly.