Privacy Policy

This launch-candidate policy explains BracketGO's product data practices. It should receive counsel review before a broad public launch.

Information organizers provide

We process organizer email addresses, bracket content, participant display names, collaborator access, sponsor artwork and links, transaction references, exports, and support requests to provide and secure the service.

Public bracket data

Anyone with an unlisted public link may view its title, display names, structure, results, schedule labels, and paid sponsor showcase. Public pages are marked noindex, but an organizer controls distribution of the link.

Privacy-conscious analytics

BracketGO stores a random first-party browser identifier in local storage. The server converts it into a bracket-specific HMAC key in a rolling UTC 24-hour bucket to estimate unique viewers. Clearing browser data resets the identifier. Organizers see only aggregates—not viewer identities, raw identifiers, IP addresses, or visitor timelines.

Raw analytics events expire after 30 days. We do not build cross-site profiles, sell viewer data, use retargeting pixels, or retain raw IP addresses for organizer analytics. IP addresses may be processed transiently for abuse prevention.

Payments and service providers

Stripe processes Sponsor Showcase payments; BracketGO stores payment and refund references, never card details. Firebase provides authentication, database, storage, and application protection infrastructure.

Retention and choices

Bracket lifecycle, Trash, temporary-token, security, audit, and payment retention are described in the Data Retention Policy. Organizers may remove public access, delete content through the product lifecycle, or request support. Legal, fraud-prevention, backup, and accounting obligations can require limited retention.

Security and contact

BracketGO uses trusted-device sessions, server authorization, encryption in transit, access controls, audit records, and monitored abuse protections. Use the bracket-aware support form for privacy questions until a dedicated legal contact is published.