Privacy Policy
Short version: we collect the minimum needed to run the platform, we don't sell your data, and you can delete your account any time.
1. What we collect
Only what we need to run the platform: email, username, password (hashed), your avatar / team logos if you upload them, tournaments you create or join, match results, and basic session data (IP, timestamps) used to secure your account.
2. Why we collect it
To create your account, let you join tournaments, sync bracket updates in real time, send you transactional notifications, and prevent abuse. We do not sell or rent your data.
3. Cookies & local storage
We store a JWT in your browser's local storage to keep you logged in. We don't use third-party advertising trackers.
4. Who can see what
Your username, team name, team logo, and match results are public inside a tournament. Your email is visible only to you and to admins. Banners / cover images you upload are public.
5. Data you can delete
You can leave a tournament at any time before it goes live. Admins can remove your account at your request — email us via the Support page. Deleting your account removes your teams from all tournaments and frees your email for a fresh signup.
6. Security
Passwords are hashed with bcrypt. API is HTTPS-only. Admin access is role-gated and logged. If we detect a breach we'll notify affected users within 72h.
7. Children
Spicy Community isn't directed at children under 13. If you believe a child under 13 has registered, contact us and we'll delete the account.
8. Contact
Privacy questions? Reach us in our Discord #support channel or via the in-app Support page.
Last updated: April 2026