Skip to main content

Privacy Policy

Last updated: May 13, 2026

Tabletop League, LLC ("we," "us," or "our") operates the Tabletop League platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

  • Name and email address when you create an account
  • Profile information you choose to add
  • Tournament and match data you submit
  • Communications you send to us

Automatically Collected Information

When you access our service, we automatically collect:

  • Device and browser information
  • IP address and general location
  • Usage patterns and preferences
  • Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process your tournament registrations and match results
  • Send you updates about your account and competitions
  • Analyze usage to improve user experience
  • Protect against fraud and abuse

Information Sharing

We do not sell your personal information. We may share information with:

  • Service providers who assist in operating our platform (e.g., hosting, analytics)
  • Other users as part of public tournament and match data
  • Law enforcement when required by law

Your Rights

For All Users

You have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Delete your account and associated data
  • Opt out of marketing communications

For European Users (GDPR)

Under GDPR, you additionally have the right to:

  • Data portability - receive your data in a structured format
  • Restrict processing of your data
  • Object to processing based on legitimate interests
  • Lodge a complaint with a supervisory authority

For California Residents (CCPA)

Under CCPA, California residents have the right to:

  • Know what personal information is collected
  • Know whether personal information is sold or disclosed
  • Say no to the sale of personal information
  • Access your personal information
  • Equal service and price, even if you exercise your privacy rights

Your data export rights

You may download a machine-readable copy of your match data, including match summaries, individual games, and your participations, from Settings → Data. The export satisfies the GDPR Article 20 right to data portability and the CCPA Right to Know. It is provided in CSV format inside a ZIP archive. Opponents in your export are masked: only display name and avatar URL are included; no email, social handles, or stable user IDs are emitted.

Personal exports are subject to a 5,000 most-recent-matches cap and a rolling quota of three exports per 24-hour period. Export downloads are logged for security and record-of-processing purposes (see "API usage logging" below).

API usage logging

Requests to the personal API (/api/v1/me/*) and personal-data export downloads are logged. The log records: timestamp, route, HTTP method, response status code, response size, request latency, the API key prefix (if a Bearer key was used), the user-agent string, and a SHA-256 hash of the client IP. Raw IP addresses are never stored.

Logs are retained for ninety (90) days, after which they are automatically purged. Only platform administrators can read the logs.

Personal data of others in your exports

Your match data necessarily includes records of games played against other users. We mask those opponents' identifying information in your export. You agree not to attempt to re-identify masked opponents, cross-reference them with external data sources, aggregate multiple users' exports to reconstruct identity, or redistribute the masked data. See the API Terms and Acceptable Use Policy.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Tournament and match history may be retained for statistical purposes even after account deletion. API request logs are retained for ninety (90) days.

Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

Tabletop League, LLC
Email: privacy@tabletopleague.com