Privacy Policy

Finalist (“Finalist”, “we”, “us”) operates a competitive gaming platform for esports tournaments and scrims. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to finalist.live and the services provided through it.

1. Information we collect

• Account information. Your email address and username. If you use a password, it is stored only as a salted hash, never in plain text. You may also add a profile avatar and banner image.
• Third-party sign-in. When you sign in with Discord or Google, we receive your account identifier, username, email address, and avatar from that provider (for Discord, the identify and email scopes).
• Email sign-in codes. For passwordless sign-in we send one-time codes to your email; the codes are stored hashed and expire automatically.
• Game identities. In-game names (IGNs) you add for each supported game.
• Competitive activity. Teams and rosters you create or join, organizations you run or belong to, tournament and scrim registrations, slot assignments, match results, and any bans issued to you by an organizer.
• Discord integration. If you or your organization connect a Discord server, we store that server link and may send messages or direct messages through our bot, using your linked Discord account for targeting.
• Notifications and devices. If you enable push notifications, we store a device push token to deliver them.
• Technical and security data. Your IP address, session and refresh tokens, and audit-log records of security-relevant actions such as sign-ins, role changes, and bans.

2. How we use your information

• Operate the platform: authenticate you, run tournaments and scrims, manage teams and organizations, register you for events, and display results.
• Communicate with you: send sign-in codes, and event, registration, and result notifications by email, push, or Discord.
• Safety and moderation: enforce fair play, apply organizer bans, detect abuse, and maintain audit trails.
• Maintain the security and integrity of the platform and prevent fraud.

We do not sell your personal information, and we do not use it for third-party advertising or cross-site tracking.

3. How we share information

We share information only with the service providers and parties needed to run Finalist:

• Discord and Google — for authentication, and for Discord, messaging.
• Resend — to send transactional email such as sign-in codes and notifications.
• Firebase Cloud Messaging (Google) — to deliver push notifications.
• Object storage — to host the images you upload (avatars, banners, logos), which are served publicly by URL.
• Event organizers — when you register for a tournament or scrim, the organizer of that event can see your registration details, including your username, IGN, team, and results.

We may also disclose information where required by law, or to protect the rights, safety, and security of Finalist and its users.

4. Cookies and sessions

We use strictly necessary cookies to keep you signed in (a session and refresh token). We do not use advertising or cross-site tracking cookies. Images you view may be cached by your browser.

5. Data retention

We keep your information for as long as your account is active. Sign-in codes and expired sessions are deleted automatically. You may request deletion of your account and associated personal data; some records, such as audit logs and ban records, may be retained where necessary for security or the legitimate operation of the platform.

6. Your rights

You can access and update your profile information from your account settings, and you can request a copy of your data or deletion of your account by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or your local data- protection law.

7. Security

Passwords and email codes are stored hashed, traffic is encrypted in transit over HTTPS, and access to our systems is restricted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

Finalist is not directed to children under 13, or the minimum age required in your country. If you believe a child has provided us with personal information, please contact us and we will remove it.

9. International users

Your information may be processed in countries other than the one in which you live. By using Finalist you consent to that processing and transfer.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

11. Contact us

Questions about this policy or your data can be sent to privacy@finalist.live.