Privacy Policy
TeamBattles ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services (the "Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the data practices described in this policy.
01 Information We Collect
We collect information in several ways when you use TeamBattles. This section describes the categories of personal information we collect, organized by source.
1.1 Information You Provide Directly
Account Information
- Display name (1-50 characters)
- Username (3-30 characters, letters, numbers, and underscores only)
- Email address
- Date of birth (used for age verification)
- Bio (up to 500 characters)
- Pronouns (up to 50 characters)
- Country (2-letter country code)
- Timezone
- Preferred languages (up to 10)
Profile Media
- Profile avatar (up to 1 MB, replaces previous when updated)
- Profile banner (up to 2 MB, replaces previous when updated)
Organization and Team Information
- Organization names (3-50 characters) and tags (2-6 characters, uppercase)
- Team names and tags (2-5 characters, uppercase)
- Organization and team avatars (up to 1 MB) and banners (up to 2 MB)
- Social media links (Twitter, YouTube, Twitch, Discord, website)
- Team type designation (Regular or League)
- Platform preference and region settings
Match Information
- Match configurations (game mode, series length, map selection, scheduling)
- Score submissions with optional screenshot evidence (up to 2 MB each, max 10 per match)
- Match dispute descriptions and supporting evidence
- Roster selections and attendance status (Attending, Not Attending, Tentative)
- Lobby codes
- Match objectives and bonus challenge completions
Communications
- Match chat messages (up to 255 characters per message)
- Chat images (up to 2 MB each, max 10 per team per match)
- Chat reactions (predefined emoji responses)
- Support ticket messages (10-5,000 characters) and attachments (up to 5 images initially, 10 total)
Invite and Membership Data
- Invite links with associated metadata (maximum uses, expiration dates if set)
- Join request submissions and their approval/denial status
- Ban records (including duration and reason when applicable)
Payment Information
- Transaction history (token purchases, subscription purchases)
- Subscription status and billing cycle
- We do not store payment card details; these are processed by our payment provider, Xsolla
1.2 Information from Authentication Providers
When you log in using OAuth providers, we receive the following information to create and maintain your account:
- Discord: User ID, username, email address, avatar
- Twitch: User ID, username, email address, profile image
- GitHub: User ID, username, email address, avatar
- Battle.net: ID, BattleTag, email address
1.3 Gaming Platform Connections
When you connect gaming platforms, we may receive:
- Activision: Activision ID and username (required for Call of Duty matches)
- Other Platforms: Platform usernames and identifiers as needed for match verification
We only request the minimum information necessary to verify your gaming accounts and display your gaming identities to match participants.
1.4 Statistics and Achievement Data
We automatically track and calculate:
- Experience points (XP) earned from matches and objectives
- Win/loss/draw records
- Current and best win streaks
- Achievement unlock dates and progress
- Achievement rarity calculations
1.5 API Key Data
If you create API keys in Developer Settings, we store:
- Key labels (1-50 characters) for your identification
- Permission configurations
- Key creation timestamps
- API usage logs (endpoints accessed, timestamps)
We do not store the full API key after initial creation. Keys are hashed for security and shown only once at creation.
1.6 Information Collected Automatically
- Pages visited and features used
- Login times and session duration (sessions last 7 days)
- Device information (browser type, operating system, screen resolution)
- IP address and approximate geographic location
- Error logs and performance metrics
- Hardware identifiers for anti-cheat purposes
1.7 Local Storage
We use browser local storage and IndexedDB to:
- Cache chat messages for faster loading (up to 50 messages per room)
- Store chat window position and size preferences
- Save notification and sound preferences
- Maintain session state and unread message counts
- Remember cookie consent preferences
This data remains on your device and is not transmitted to our servers.
02 Legal Bases for Processing
If you are located in the EEA, UK, Switzerland, or other jurisdictions requiring a legal basis for processing personal data, we rely on:
Contract Performance (Article 6(1)(b) GDPR)
- Account creation and management
- Match creation, participation, and scoring
- Team and organization management
- Processing payments and subscriptions
- Providing support services
Legitimate Interests (Article 6(1)(f) GDPR)
- Improving and optimizing the Service
- Detecting and preventing fraud, cheating, and abuse
- Ensuring platform security and integrity
- Calculating statistics and leaderboards
Legal Obligation (Article 6(1)(c) GDPR)
- Complying with applicable laws and regulations
- Responding to lawful requests from public authorities
- Tax reporting requirements
Consent (Article 6(1)(a) GDPR)
- Marketing communications (where required)
- Non-essential cookies and analytics (for EEA/UK users)
- Processing of children's data where parental consent is required
03 How We Use Your Information
3.1 Provide and Maintain the Service
- Create and manage your account
- Enable match creation, acceptance, participation, and scoring
- Facilitate team and organization management
- Calculate and display statistics, leaderboards, and experience points
- Track and award achievements
- Process payments and manage subscriptions
- Process support tickets
- Enable real-time updates and notifications
3.2 Improve the Service
- Analyze usage patterns to improve features
- Debug and fix technical issues
- Develop new features based on user behavior
3.3 Communicate With You
- Send match notifications and updates
- Notify you of roster changes and lobby codes
- Respond to support inquiries
- Notify you of policy changes
3.4 Ensure Safety and Security
- Detect and prevent fraud, cheating, and abuse
- Enforce our Terms of Service
- Investigate violations and disputes
- Administer bans when necessary
04 How We Share Your Information
4.1 Public Information
Information visible to other users based on your privacy settings:
- Public profiles: Display name, username, avatar, bio, statistics, achievements
- Limited profiles: Display name, username, and avatar only
- Private profiles: No information visible to other users
4.2 Leaderboard Data
If you participate in matches, your team's statistics may appear on public leaderboards. Leaderboard visibility is tied to team participation, not individual profile settings.
4.3 Match Participants
When participating in matches, other participants can see your display name, avatar, gaming platform usernames, team affiliation, attendance status, and chat messages.
4.4 Payment Processor
Payments are processed by Xsolla Inc. When you make a purchase, Xsolla receives your payment information. We do not receive or store your payment card details. See Xsolla's Privacy Policy.
4.5 Third-Party Applications via API
If you create API keys, third-party applications can access data according to the permissions you grant. You can revoke access at any time by deleting the API key.
4.6 Service Providers
- Convex: Database and backend services
- Cloud storage providers: For file uploads and media storage
- Anti-cheat service providers: For maintaining competitive integrity
- Google Analytics: Website analytics and usage measurement. See How Google uses data.
- Microsoft Clarity & Microsoft Advertising: Behavioral metrics, heatmaps, and session replay for site optimization, fraud/security, and advertising. See Microsoft Privacy Statement.
4.7 Legal Requirements
We may disclose your information if required by law, to protect rights and safety, or to enforce our Terms of Service.
4.8 Business Transfers
If TeamBattles is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership.
05 Data Retention
06 Your Rights and Choices
6.1 Access and Portability
You can access your personal information through your account settings. Request a copy of your data (JSON or CSV) by contacting privacy@teambattles.gg.
6.2 Correction
Update your profile information through account settings. For other corrections, contact us.
6.3 Deletion
Request deletion by contacting support. Note: you must transfer ownership of any organizations first, and some data may be retained for legal compliance.
6.4 Profile Visibility
- Public: Anyone can view your full profile and achievements
- Limited: Only basic information visible
- Private: Only you can view your profile
6.5 Notification Preferences
Manage email, push, in-app, and chat sound notifications in your account settings.
6.6 Gaming Platform Connections
Disconnect gaming platform accounts through your connections settings. Note: disconnecting required platforms will prevent participation in related matches.
6.7 API Key Management
View, edit permissions, and delete your API keys through Developer Settings. Deleting a key immediately revokes all third-party access.
07 California Privacy Rights (CCPA/CPRA)
California residents have the following rights:
- Right to Know: Request disclosure of data categories and specific pieces collected
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate information
- Right to Non-Discrimination: We will not discriminate against you for exercising rights
Do Not Sell or Share: TeamBattles does not sell your personal information or share it for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals.
To exercise your California privacy rights, contact privacy@teambattles.gg with "California Privacy Request" in the subject line.
08 EEA, UK, and Switzerland
If you are located in the EEA, UK, or Switzerland, you have additional rights under GDPR/UK GDPR.
Data Controller
TeamBattles is the data controller. Contact us at privacy@teambattles.gg.
International Data Transfers
Your information may be transferred to the United States. We protect transfers using the EU-US Data Privacy Framework, Standard Contractual Clauses, and binding corporate rules where applicable.
Your Rights Under GDPR
In addition to the rights above, you may lodge a complaint with your local supervisory authority. Find your authority at edpb.europa.eu.
09 Children's Privacy
TeamBattles requires users to be at least 13 years of age. We use a neutral date-of-birth entry during registration to verify age. Users who indicate they are under 13 cannot create accounts.
COPPA Compliance (United States)
We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. If we have actual knowledge that a user is under 13, we will suspend the account within 24 hours.
Users Ages 13-17
If you are between 13 and 18, you should use the Service only with parental or guardian involvement. For users under 18, we apply privacy-protective defaults including higher profile visibility restrictions and default-off browser notifications.
10 Data Security
We implement appropriate technical and organizational measures including:
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
- Secure authentication using OAuth 2.0
- Role-based access controls
- Regular security assessments and penetration testing
- Session management with 7-day expiration
- API key hashing (keys are not stored in plaintext)
- Rate limiting on sensitive operations
Data Breach Notification
In the event of a data breach, we will notify affected users within 72 hours and notify relevant supervisory authorities as required.
11 Cookies and Tracking
Essential Cookies
We use essential cookies to maintain your session (7-day duration), remember preferences (theme, language, layout), and ensure the Service functions correctly. These cannot be disabled.
Analytics and Performance Cookies
We use analytics and performance cookies to understand how visitors interact with our Service. Specifically:
- Google Analytics: Collects and processes data about website usage via cookies and similar technologies to help us understand traffic and usage patterns. For more information, see How Google uses data when you use our partner's sites or apps.
- Microsoft Clarity & Microsoft Advertising: Captures behavioral metrics, heatmaps, and session replay through first and third-party cookies and other tracking technologies. This data is used for service improvement, site optimization, fraud/security purposes, and advertising. For more information, see the Microsoft Privacy Statement.
For users in the EEA/UK, we obtain consent before placing non-essential analytics cookies.
12 Contact Us
By using TeamBattles, you acknowledge that you have read and understood this Privacy Policy. For EEA/UK users, your continued use constitutes acceptance of data processing for purposes based on contract or legitimate interests; for processing based on consent, we will obtain your explicit consent.