Privacy Policy

Introduction

BracketForge ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our bracket prediction platform. Please read this policy carefully. By using BracketForge, you consent to the practices described here.

BracketForge is a free-to-play entertainment platform. We do not collect, store, or transmit payment card information directly — all payment processing is handled by Stripe. We do not hold user funds at any time.

1. Information We Collect

Information You Provide

• Account information: Name, email address, and profile photo provided through authentication (Google, Apple, or email/password) via Clerk.
• Pool data: Pool names, scoring configurations, bracket picks, and tiebreaker values you enter.
• Pool messages: Content you post in pool message boards.
• Payment tracking data: Payment handles (Venmo, CashApp, etc.) you optionally provide for pool payment coordination. We do not process actual payments.

Information Collected Automatically

• Usage data:Pages visited, features used, timestamps of activity (e.g., last "What's New" visit).
• Log data: IP addresses, browser type, and referrer URLs collected by our hosting infrastructure (Vercel).
• Cookies and session tokens: Authentication session cookies managed by Clerk. We do not use third-party advertising cookies.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To personalize your experience (e.g., displaying your name, tracking your picks and standings).
• To send transactional emails such as pick deadline reminders and pool notifications, using Resend.
• To process Premium subscription purchases via Stripe.
• To generate AI-powered bracket insights and commentary for Premium users (processed via Anthropic's Claude API).
• To display relevant advertising to non-Premium users via Google AdSense.
• To enforce our Terms of Service and detect fraudulent or abusive activity.
• To comply with legal obligations.

3. Third-Party Services

We use the following third-party services that may process your data:

Each third-party service operates under its own privacy policy. We encourage you to review those policies directly.

4. Data Sharing and Disclosure

We do not sell your personal information. We share your data only in these limited circumstances:

• With pool members: Your display name and bracket picks are visible to other members of pools you join (after the pool is locked or as configured by the commissioner).
• With service providers: The third-party services listed above receive data as necessary to provide their services.
• For legal compliance: We may disclose information if required by law or in response to valid legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable time, subject to legal retention requirements. Pool-level data (standings, audit logs) may be retained in anonymized form.

6. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication via Clerk, and access controls on our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

7. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing of your data.
• Data portability.
• Opt out of non-essential email communications via your account notification settings.

To exercise these rights, contact us through the BracketForge application. We will respond to reasonable requests within the timeframes required by applicable law.

8a. Data Deletion Instructions

You can request deletion of your BracketForge account and all associated data at any time. For full instructions — including what data is deleted, how to revoke third-party access, and alternative contact methods — see our dedicated Data Deletion Instructions page.

9. Cookies

We use essential cookies for authentication (managed by Clerk) and session management. Non-Premium users may receive advertising cookies from Google AdSense when ads are displayed. You can manage cookie preferences through your browser settings, though disabling authentication cookies will prevent you from signing in.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy here with an updated "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the BracketForge application. We take privacy concerns seriously and will respond promptly.