Privacy
Who holds this
Digital Signet Limited, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the data controller. Questions and requests: privacy@digitalsignet.com.
What is stored
A tournament that has been made live is stored on our server so that results can reach other people's phones as they are recorded. That is the tournament name, the entrant names the organiser typed, the stages and the results. Anyone holding the link can view it, which is what the link is for, so nothing private should go in an entrant name.
Three things are stored only if somebody chooses to provide them.
- An entrant's email address. Used for one thing: telling that person when they are next on. It is never used to market anything, and an entrant can be added with no email address at all.
- An organiser's recovery email address. It exists so that an organiser who loses the device holding their key can get back in. It is used for nothing else.
- An account email address. If you save a tournament so you can find it again, we keep your address so we can sign you in. There is no password: we email you a link. It is used to sign you in and to send that link, and for nothing else. You never need an account to build a bracket or to run an event.
If a screen breaks, or you report a problem
There is a “Suggestion or problem?” control on every view, and the app also reports itself if a screen stops working. Either way we receive: what you wrote if you wrote something, which screen it was, the error, your browser and its version, the size of your window, your language and your time zone. If a tournament was open, the app sends it too, because a report you can replay is worth more than a description.
That list is deliberately short and it is all diagnostic. We do not ask who you are and a report carries no email address. The time zone and language are there because they answer the first question about almost every fault, which is whether it is happening to everybody or only to somebody whose browser is set up differently. They told us within an hour that a crash on 30 September was caused by a browser translating the page.
Reports are kept for 90 days and then deleted. Our server also keeps ordinary request logs, which include the address your connection comes from, as any web server does.
How long
A tournament and everything attached to it, entrant and recovery email addresses included, is deleted automatically 90 days after it was last opened. An organiser can delete one at any time from the tournament screen, and that removes the personal data straight away rather than hiding it.
An account is different, and is kept until you ask us to delete it. The point of it is that you can come back in six months and still find your tournaments, so there is no date after which we throw it away. Signing out ends that session; it does not delete the account. To have the account and its address removed, email privacy@digitalsignet.com from the address you signed up with and we will delete it. Deleting an account does not delete the tournaments you saved: they go back to being ordinary anonymous tournaments, reachable by their links and deleted on the same 90 day clock as any other.
What you may publish
A live tournament is stored on our server and anyone holding the link can read it, so it is publishing rather than note-taking. Rank whatever you like. Brackets of bands, films, footballers, crisps and public figures are what most brackets on the internet are, and none of that is a problem here.
The line is harm, not taste. We will remove a tournament built to harass, threaten or humiliate a private individual, anything unlawful, and anything pretending to be us or somebody else.
There is no moderation queue here and we do not read tournaments as a matter of course. We will remove one that is reported and turns out to break that, and we can remove one without notice. To report a tournament, use the feedback link on any tournament page, which sends us the tournament itself, or write to privacy@digitalsignet.com with the link. If a tournament names you and you want it gone, say so and it goes.
Children
School and club events are a common use for this, and a tournament full of first names is the ordinary way one looks. The app is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to privacy@digitalsignet.com and we will delete it.
If you are running an event for children, the thing worth knowing is that an entrant name travels with the link. Initials, first names only, or house and team names all work exactly as well as full names, and a tournament can be deleted outright from the organiser's own page the moment it is over.
What is not done with it
It is not sold, not shared with advertisers, and not used to advertise to anyone. This app carries no advertising and no analytics. The only email it ever sends to an entrant is the one they asked for, and the only email it ever sends to an account holder is a sign-in link they asked for. There is no newsletter and nothing to unsubscribe from.
Your rights
Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected or deleted, and object to it being held. Write to privacy@digitalsignet.com and say which tournament it concerns. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
The generator is different
The bracket generator at tournamentbracketmaker.com stores nothing on a server at all: it runs in your browser and a shared bracket travels inside the link. Only pressing “Make this live” brings a tournament here.