PRIVACY POLICY

1. Information We Collect

• Account information — email address, display name / gamertag, password (stored only as a secure hash), gaming platform, region, and role.
• Profile information — team affiliations, positions, jersey number, availability, bio, avatar and images you choose to upload.
• Competitive data — game results, box scores, statistics, standings, screenshots you submit for verification, and community highlight submissions.
• Payment information — when you pay an NPA League Pass or Registration/Access Fee, or receive a payout, our payment processor (Stripe) collects and processes your payment and, where applicable, identity and bank details. We do not store your full card or bank numbers on our servers.
• Technical data — IP address, browser type, device information, and usage logs collected automatically to operate and secure the Service.

2. How We Use Your Information

• To create and manage your account, teams, and leagues.
• To operate core features: scheduling, results verification, statistics, standings, payouts, and highlights.
• To process NPA League Pass fees, Registration/Access Fees, and related payouts to League Presidents through Stripe.
• To send transactional and service emails (for example invites, notifications, and weekly digests).
• To protect the integrity of competition, prevent fraud and abuse, and enforce our Terms of Service.
• To improve, maintain, and secure the Service.

3. How We Disclose Information

We do not sell your personal information. We disclose information only as follows:

• Service providers — trusted vendors who process data on our behalf, including Stripe (payments and payouts), Resend (transactional email delivery), and cloud hosting/database providers.
• Publicly on the Service — certain profile, team, statistical, standings, and highlight information is visible to other users and the public as part of a competitive league platform.
• Legal requirements — when required by law, regulation, legal process, or to protect the rights, property, or safety of The NPA, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Disclosures occur electronically through secure, encrypted API connections to the providers listed above. Stripe's handling of payment data is governed by Stripe's own privacy policy at stripe.com/privacy.

4. Data Security

We protect your information using industry-standard safeguards, including encryption in transit (HTTPS/TLS), hashed passwords, restricted access controls, and reputable infrastructure providers. Payment and identity verification data is handled by Stripe, a PCI-DSS Level 1 certified provider. While no method of transmission or storage is 100% secure, we work to protect your information and continually improve our safeguards.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data by contacting us; some records may be retained where required by law or for legitimate business purposes.

6. Cookies

We use cookies and similar technologies for authentication, to remember your preferences (such as your theme), and to keep you signed in. You can control cookies through your browser settings, though disabling them may affect functionality.

7. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at commissioner@npaleague.com.