Privacy Policy
Version 2026-10-14 · Effective October 14, 2026
1. Who this policy covers
This policy explains what personal information MYO Gambit (“we”, “us”) collects through myogambit.com, how we use it, and who we share it with. It covers players, tournament organizers and their staff and volunteers, and visitors. Tournament organizers are independent businesses; what an organizer does with information outside our Service is governed by that organizer, not by this policy.
2. Information we collect from players
- Account: your name, email address and password. Passwords are handled by our authentication provider; we do not see or store them in readable form.
- Profile: display name, city and state, phone number, date of birth, gender, shirt size, an emergency contact’s name and phone number, and a profile photo if you add one.
- Rating: if you connect a DUPR account, your DUPR ID and ratings, and tokens that let us refresh them and report your results to DUPR.
- Registrations: the tournaments and divisions you enter, your doubles partner, waitlist places, check-in and merchandise pickup, scores, results and standings.
- Agreements: which version of our Terms and Privacy Policy you accepted and when; and which version of an organizer’s waiver you accepted and when, with a one-way hash of your IP address and browser type as evidence.
- Membership and credits: whether an organizer’s member list matches you, and volunteer shifts and credits you earn with an organizer.
3. Information we collect from organizers
- Organization: name, description, contact email and phone, logo, venues, and the people given staff or volunteer roles.
- Payments setup: the identifier and status of the organization’s Stripe account. Business, identity and bank details are given directly to Stripe and are not stored by us.
- Event content: tournament details, rules, refund policies, waivers, prices, and emails written to registered players.
- Member lists: if an organizer uploads a member list, the names, email addresses and member identifiers in it.
- Agreements: which version of the Tournament Organizer Agreement the organization accepted, who accepted it, and when.
4. Payment information
Payments are processed by Stripe on the organizer’s own Stripe account. Card numbers and bank details go directly to Stripe and never reach our servers. We receive and keep the payment’s status, amount, currency, time and Stripe’s reference identifiers, so that we can confirm your registration and keep accurate records.
5. Cookies and analytics
- Essential cookies keep you signed in and remember which view of the site you last used. The Service does not work without them, and they are always on.
- Analytics is off until you accept it. The first time you visit, a banner asks whether we may use analytics cookies. If you do not accept, we capture no analytics in your browser, record no session replay and store no analytics cookie; we remember only your answer, in your browser, so that we do not ask again.
- If you accept, we use PostHog to understand how the Service is used, such as pages viewed and steps completed in registration, and may record masked session replays in which all text and form inputs are hidden. Analytics identifies you by an internal account identifier, not by your name or email.
- If your browser sends a “Do Not Track” or “Global Privacy Control” signal, we treat it as declining analytics, do not show the banner, and capture no analytics in your browser.
- Whatever you choose, our servers still count a small number of events, such as a completed registration, against your internal account identifier. These carry no cookies, page addresses or session replays.
- We do not use advertising cookies and do not allow third-party advertising trackers.
You can change your answer at any time with , which is also at the foot of our home page, sign-in page and legal pages. Your answer is kept in this browser only; on another device or after clearing your browser data you will be asked again.
6. How we use information
- to create and secure your account;
- to register you for tournaments and check that you are eligible for a division;
- to let organizers run their events: rosters, seeding, schedules, check-in, scoring and results;
- to confirm payments and keep financial records;
- to send you messages about your account and registrations;
- to keep records of agreements and of changes made by staff;
- to prevent abuse, fix problems and improve the Service;
- to comply with the law.
7. What is public
When your registration for a tournament is confirmed, the tournament’s public page lists your name, profile photo, DUPR rating and DUPR ID. Schedules, scores, results and standings for a tournament are also public and show participants’ names. This applies to every confirmed entrant, including entrants aged 13 to 17. Your contact details, date of birth, gender and emergency contact are never shown publicly. A separate public player profile exists only if you switch it on.
8. Sharing with tournament organizers
When you register for a tournament, the organizer and its authorized staff and volunteers can see what they need to run the event: your name, contact details, division, partner, rating, shirt size, whether you meet the division’s eligibility rules, your waiver and payment status, and your results. Your emergency contact is available only to authorized staff, and each time it is viewed the view is recorded. Organizers may email the players registered for their event through the Service.
9. Service providers
We share information with companies that help us operate the Service, only as needed for that purpose:
- Vercel — website hosting;
- Neon — database hosting and account authentication;
- Stripe — payment processing for organizers;
- Resend — sending email;
- Ably — live updates, which carry identifiers but no scores or personal details;
- Inngest — scheduling background work, which carries identifiers only;
- PostHog — analytics, as described above;
- DUPR — ratings, and match results for players who have connected a DUPR account.
We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of our business.
10. We do not sell your information
We do not sell personal information, and we do not share it with anyone for targeted advertising. We do not send marketing email. The only email you receive through the Service is about your account and registrations, or is written by the organizer of a tournament you registered for.
11. Storage and security
Information is stored in the United States with the providers listed above. The Service is served over an encrypted connection (HTTPS). Access to information within the Service is restricted by role and by organization, and changes made by staff are logged. No system is perfectly secure, and we cannot guarantee that information will never be accessed or disclosed improperly. If we learn of a breach affecting you, we will notify you as the law requires.
12. How long we keep information
These are the periods we aim to keep information for:
- payment, refund and fee records: seven years;
- accepted waivers and agreement records: seven years after the event, and for an entrant under 18, at least until they turn 20;
- registrations, scores and results: for the life of your account, then kept without your identity, because other players’ results depend on them;
- profile details, including date of birth, phone number and emergency contact: until your account is deleted;
- analytics data: up to one year, and session replays up to ninety days;
- emails written by organizers: two years.
We may keep information longer where the law requires it or to resolve a dispute.
13. Deleting your account
To delete your account, email jordan@myogambit.com from the address on the account. We allow fourteen days in which you can change your mind, and then remove your identifying details from your profile and disconnect your sign-in. Tournament history, payment records and accepted agreements are kept without your identity where other people’s records or our legal obligations depend on them.
14. Your choices and privacy requests
You can view and correct most of your information on your profile page. To ask for a copy of your information, to correct something you cannot change yourself, or to delete it, email jordan@myogambit.com. We will confirm that the request comes from you and respond within 45 days.
15. California privacy rights
If you are a California resident, you may ask us what personal information we have collected about you, ask us to correct or delete it, and you will not be treated differently for making a request. We do not sell or share personal information as those terms are used in California law, and we do not use sensitive personal information for purposes beyond providing the Service. We do not disclose personal information to third parties for their own direct marketing. To make a request, email jordan@myogambit.com.
16. Children
The Service is not directed to children under 13, and a child under 13 may not hold an account. We ask for a date of birth and do not allow a profile to be completed with one that shows the person is under 13. If you believe a child under 13 has given us personal information, email jordan@myogambit.com and we will delete it. Players aged 13 to 17 may use the Service with a parent or guardian’s permission; section 7 explains what is shown publicly about every entrant.
17. Users outside the United States
The Service is operated from the United States and is intended for use in the United States. If you use it from elsewhere, your information will be processed in the United States.
18. Changes to this policy
We may update this policy. Each version carries a version identifier and an effective date at the top of this page. When a change is material, we will ask you to accept the new version before you continue to use your account. See also our Terms of Service.
19. Contact
- Legal notices: jordan@myogambit.com
- Privacy requests: jordan@myogambit.com
- General support: support@myogambit.com
- We operate online and do not publish a postal address yet. Write to the legal notices email above and we will provide one for any notice that must be sent by mail.