Privacy Policy

Last Updated: November 4, 2026

Skilled Tournament Studios operates Tournament Runner and is responsible for your personal information. This policy is written to meet British Columbia’s Personal Information Protection Act (PIPA). Privacy Officer: legal@thetournamentrunner.com.

1. What We Collect and Why

Session cookie and Guest ID

Keeps you signed in as the same guest so your entry and match are yours. There are no player accounts or passwords.

Display name (optional)

Shown to other players and on Recent Wins. Checked against our naming rules.

Recovery Email (optional)

Used only to send a free-entry link if a Server-Side Fault affects your match.

PayPal payment details

PayPal tells us your PayPal payer ID, the email on your PayPal account and the payment, hold and charge IDs. We use them to confirm your entry and to pay your prize to the same account. We never receive card or bank details.

IP address, country and region

Checking that payments come from an Accepted Jurisdiction, flagging several entries from one network, rate limiting and fraud prevention. Location comes only from your IP address; we never use GPS.

Gameplay inputs and match events

Running the match on our servers and keeping a tamper-evident record of each result.

Records of payments, entries, payouts and administrative actions

Accounting, tax, payment-processor requirements, dispute handling and fraud prevention.

Error reports

When something breaks, a technical report is sent to our error-monitoring provider. Request headers, cookies, form contents and query strings are removed before it is sent.

We do not collect your date of birth or identity documents at checkout. PayPal carries out its own identity verification and anti-money-laundering checks on its account holders, under its own privacy statement. If we ask for government-issued photo ID, for example to review a prize, or because a law or our payment processor requires it, we will tell you why, use it only for that review, and keep it only as long as the review and our legal record-keeping require.

2. Cookies

We use only the cookies needed to run the Service: a session cookie that identifies your guest session and a security cookie that protects payment requests from forgery. We do not use advertising or tracking cookies, and we do not run third-party analytics.

3. Who We Share It With

We share personal information only with the service providers that run the Service for us, and only what each needs:

  • PayPal: entry-fee payments and prize payouts
  • Cloudflare: website delivery, security, location headers and the checkout bot check (Turnstile)
  • Neon: database hosting
  • Cloud hosting providers: the servers that run the Service
  • Upstash: rate limiting
  • Resend: sending Recovery Emails
  • Sentry: error monitoring

We may also disclose information where required by law, or to a payment processor investigating fraud or a dispute. A winner’s display name (or Guest ID, if they chose no name), prize and tournament are public on Recent Wins; your email, PayPal details and IP address never are. We do not sell personal information.

4. Where It Is Stored

Our providers may store and process information in Canada, the United States and other countries where they operate. Information stored outside Canada is subject to the laws of that country.

5. How Long We Keep It

Payment, entry, payout and match records are kept as long as tax, accounting and payment-processor rules require (in Canada, generally at least six years). Recovery links expire 24 hours after they are sent. Error reports are deleted on our error-monitoring provider’s standard schedule.

6. Security

All connections are encrypted. Session credentials and recovery links are stored only as one-way hashes, payment details stay with PayPal, and access to our systems is restricted to authorized operators.

7. Your Rights

You may ask to see the personal information we hold about you, to correct it, or to have it deleted where we are not required to keep it. Email legal@thetournamentrunner.com with your Guest ID or the email address you used. We verify that a request comes from you before acting on it, and we respond within the time PIPA requires.

8. Changes

We will post any change here and update the date above.