Your Privacy, Plainly Explained

1. Overview

BracketEngine ("we", "us") provides a free online tournament bracket generator. This policy explains what information we collect when you use the site, how it is used and stored, and the choices you have. Our core tool is designed to work without you creating an account — most bracket editing happens locally in your own browser.

2. Information We Collect

• Account data. If you create an account, we store your chosen username, email address, and a securely hashed password. We use this only to authenticate you and save your brackets.
• Bracket content. Brackets you save to your account (team names, logos, scores, champions) are stored so you can view, continue, and share them later.
• Usage data. Like most websites, we may collect standard web analytics (pages visited, browser type, approximate location) to understand how the tool is used and improve performance.
• Voluntary communications. If you contact us, we keep your message and email address to respond.

3. How We Use Your Information

We use the information above to operate and improve the service: to maintain your account, to save and restore your brackets, to generate share links you create, and to keep the site secure. We do not sell, rent, or trade your personal information to third parties.

4. Essential Cookies & Local Browser Storage

We use essential cookies and local browser storage (LocalStorage) for core functionality: keeping you securely signed in (session token) and saving local draft brackets on your device. If you use BracketEngine without creating an account, all tournament data is stored client-side in your own browser's storage and can be wiped at any time by clearing site data.

6. Third-Party Services & Web Analytics

We may use third-party CDNs (such as Google Fonts and Cloudflare) to deliver styling assets securely and swiftly. Standard web server logs collect IP addresses, browser user-agents, referral URLs, and request timestamps strictly for diagnosing technical errors, preventing automated DDoS abuse, and measuring aggregate traffic trends.

7. Data Storage, Security & Password Protection

All user account passwords are encrypted using high-work-factor cryptographic hashing algorithms (bcrypt). We never store or transmit plain-text passwords. Access to backend database systems is restricted by strict firewalls and token authorization.

8. Your Rights (GDPR & CCPA / CPRA)

Depending on your jurisdiction (including the European Economic Area under GDPR and California under CCPA/CPRA), you have rights regarding your personal data:

• The right to know what personal data we collect and request a copy.
• The right to request immediate deletion of your account and saved tournament draws.
• The right to non-discrimination for exercising your privacy rights. We do not sell personal data to data brokers.

9. Children's Online Privacy Protection (COPPA)

BracketEngine does not knowingly collect personally identifiable information from children under the age of 13. Tournament organizers managing youth leagues are responsible for entering team aliases or non-identifying rosters. If you believe a child under 13 has submitted personal information, please contact us for immediate deletion.

10. Contact Us & Data Requests

For questions about this policy, data deletion requests, or privacy concerns, please contact our privacy officer at privacy@bracketengine.net or our support team at support@bracketengine.net.