GuildGate

GuildGate ("we", "us") provides a platform to organize and run Magic: The Gathering cube tournaments and events. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over it. It applies to our website, our Progressive Web App, and our Android app distributed through Google Play.

1. Data we collect

Account & identity: email address and password (managed by our authentication provider), display name, and optionally a bio and avatar image.
Tournament activity: the events you join, your registration and payment status, match results, pairings, standings, cube preferences, and — if you upload them — photos of your decks.
Payments: when you pay an event fee, we store the amount, currency, method (MercadoPago, Stripe, bank transfer, crypto or cash) and the processor's payment reference. We do not collect or store your credit card or bank card numbers — those are handled directly by the payment processor on their own pages.
Location (coarse): for events, we store the city, province and country of the venue that the organizer selects. We do not track your device's real-time location.
Push notifications: if you enable them, we store your browser's push endpoint, its encryption keys and your browser's user-agent string, so we can send round and event alerts. We do not collect device identifiers, advertising IDs or IMEI.
Clan / organization membership: the groups you belong to and your role in them, and email-based invitations.

We do not use third-party advertising, analytics or tracking SDKs, and we do not use cookies for tracking — only a session cookie required to keep you signed in.

2. How we use your data

To create and secure your account and sign you in.
To run tournaments: registrations, pairings, standings and results.
To process event payments and confirm your entry.
To send transactional emails (sign-up, password reset, email changes).
To send push notifications you have opted into.

3. Who we share it with

We share data only with service providers that make the platform work:

Supabase — database, authentication and file storage (encrypted at rest and in transit).
MercadoPago and Stripe — payment processing; we pass the payer email, amount and an event reference.
Resend — delivery of transactional emails.
Google Maps / Places — to resolve an event address the organizer types into a city/province/country.
Upstash — scheduling of push notifications.
Vercel — hosting of the application.

We do not sell your personal data.

4. Data retention & deletion

We keep your data while your account is active. You can request deletion of your account at any time; deleting your account removes your profile and cascades to your participations, payment records, preferences and push subscriptions. Some records may be retained where the law requires it (for example, payment records for tax purposes).

5. Your rights

Access and export the personal data we hold about you.
Correct your profile information.
Delete your account and associated data.
Opt out of push notifications and make your profile private.

6. Children

The service is intended for users aged 13 and over. It is not directed to children under 13, and we do not knowingly collect their data.

7. Contact

For any privacy request or question, contact us at nachobar3@gmail.com.