Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account Information: When you sign in using Google OAuth or other authentication methods, we receive your email address, name, and profile picture as provided by the authentication provider.
• Profile Information: Display name, biography, and avatar image that you voluntarily provide.
• Usage Data: Tournament participation history, RUSH Points balance, transaction records, and activity within the Platform.
• Communications: Messages you send or receive through our in-app messaging system.
• Technical Data: IP address, browser type, device information, and cookies used to maintain your session and improve Service performance.

2. How We Use Your Information

We use collected information for the following purposes:

• To provide, operate, and maintain the Service.
• To authenticate your identity and manage your account.
• To administer RUSH Points, tournament entries, and prize redemptions.
• To send transactional notifications and service-related communications.
• To detect, prevent, and address fraud, abuse, and security issues.
• To analyze usage patterns and improve the Service.
• To comply with legal obligations.

3. Google OAuth and Third-Party Sign-In

Our Service uses Google OAuth 2.0 for user authentication. When you sign in with Google, we receive limited profile information (name, email address, and profile picture) as authorized by you during the OAuth consent flow.

• We only request the minimum permissions necessary to authenticate your account.
• We do not access your Google Drive, Gmail, Calendar, or other Google services unless explicitly stated and authorized by you.
• Your use of Google Sign-In is also subject to Google's Privacy Policy.
• You may revoke our access to your Google account at any time via your Google Account settings.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in operating our Platform (e.g., cloud hosting, analytics), bound by confidentiality obligations.
• Legal Compliance: When required by law, court order, or governmental authority.
• Safety: To protect the rights, property, or safety of our users or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to affected users.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

6. Data Security

We implement industry-standard technical and organizational security measures, including encryption in transit (TLS/HTTPS) and access controls, to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to certain types of data processing.
• Withdraw Consent: Withdraw consent for data processing at any time.

To exercise any of these rights, please contact us at the email address below.

8. Cookies and Tracking Technologies

We use essential cookies and similar technologies to maintain your login session and ensure the Service functions correctly. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but some features of the Service may not function properly as a result.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date and, where appropriate, by email notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.