PRIVACY

Privacy Policy

This policy explains what Tourn.app collects, why we use it, who receives it, and the choices available to users and invited participants.

Effective August 12, 2026

1. Scope and responsible entity

This Privacy Policy applies to the Tourn.app website, accounts, trip workspaces, invitations, payment flows, and related support. Tourn.App is a service of Turnip Games, LLC. Turnip Games, LLC is responsible for the personal information processed through the service unless this policy states otherwise. This policy does not govern third-party websites or services that have their own privacy policies.

2. Information we collect

  • Account information: name, email address, sign-in provider identifier, profile details, account status, and role.
  • Trip and participation information: trip names, dates, locations, memberships, teams, events, rules, entries, scores, standings, posts, comments, reactions, and administrative actions.
  • Invitations: recipient email addresses or phone numbers, channel, role, inviter, delivery status, token status, and expiration.
  • User content: photos and other media or text that users choose to submit, together with related metadata.
  • Payment information: purchase status, amount, currency, Stripe customer and transaction references. Stripe processes full payment-card details. Tourn.app does not store full card numbers.
  • Technical information: IP address, browser and device information, request logs, timestamps, security signals, cookie choices, and usage needed to operate and protect the service.
  • Support information: messages and information included in requests, complaints, or privacy inquiries.

3. Sources of information

We receive information directly from users, from trip organizers who invite or add participants, automatically from browsers and hosting infrastructure, and from service providers such as the sign-in provider, Stripe, email and SMS delivery providers, and security or hosting providers.

4. How we use information

We use information to authenticate users, create and administer trips, deliver invitations, process purchases, calculate and display standings, host user content, provide support, prevent fraud and abuse, secure and debug the service, comply with law, enforce our terms, and improve service performance. We do not use invitation contact information for unrelated advertising.

5. Legal grounds where required

Where a law requires a legal basis, we process information to perform our contract with users, pursue legitimate interests in operating and securing the service, comply with legal obligations, and obtain consent where required. Consent may be withdrawn for future processing without affecting processing already completed.

6. How we disclose information

We may disclose information to trip members according to the relevant trip role and feature, to an organizer that administers the trip, and to vendors that process information for us. Current service categories include authentication, Cloudflare-based hosting and storage, Stripe payment processing, Postmark or Resend email delivery, Twilio SMS delivery, and Unsplash image delivery. We may also disclose information to comply with law, protect rights and safety, investigate abuse, or complete a merger, financing, acquisition, reorganization, or asset transfer subject to appropriate protections.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising and do not use targeted advertising.

7. Trip visibility and organizer controls

Trip content is available only to authenticated users with access to that trip, except for invitation and payment-return pages needed to complete those functions. Organizers choose members and administrators and can expose names, scores, media, and activity to other trip participants. Users should not submit sensitive content that is unnecessary for a tournament.

8. Cookies and similar technology

We use essential cookies or comparable storage for authentication, security, routing, and saved privacy choices. Optional analytics are not activated unless the user permits them and an analytics service is configured. The Cookie Policy gives details and explains how to change a choice.

9. Retention

We keep account, trip, payment, and audit information for as long as reasonably necessary to provide the service, maintain accurate financial and security records, resolve disputes, and satisfy legal obligations. Invitation tokens expire after 14 days and are stored in hashed form. We may retain transaction and audit records after deletion when required for tax, accounting, fraud prevention, or legal purposes. Backup copies are removed on a rolling schedule.

10. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information, including server-side authorization, tenant-scoped access, hashed invitation tokens, signed payment webhooks, restricted runtime credentials, and audit logs. No system is completely secure. Users should protect their accounts and avoid sending sensitive information through ordinary email or SMS.

11. Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, to limit or object to certain processing, to withdraw consent, and to appeal a denied request. You may also control optional cookies through Cookie Settings. We will verify requests and respond within the period required by applicable law. Authorized agents may submit requests where permitted. We will not discriminate against a user for exercising privacy rights.

To make a request, email privacy@tourn.app and identify the account or invitation involved. An organizer can address some trip-specific corrections directly, but platform-level deletion and access requests should come to us.

12. Children

Tourn.app is not directed to children under 13, and children under 13 may not create accounts or submit information directly. Organizers who include minors in a trip must have authority and any required parent or guardian consent before submitting names, photos, contact details, or other information. Contact us if you believe information was submitted about a child without proper authorization.

13. International processing

The service is operated from the United States. Information may be processed in the United States and other locations where providers operate. When required, we use appropriate safeguards for transfers across borders.

14. Changes to this policy

We may update this policy as the service or law changes. We will post the revised policy with a new effective date and provide additional notice for material changes when reasonably practicable.

15. Contact

Turnip Games, LLC operates Tourn.app. Privacy questions and requests may be sent to privacy@tourn.app. Legal notices may be sent to legal@tourn.app.