Privacy Policy

Last updated: October 2, 2026

This Privacy Policy explains how t1allstars.com (“we”, “us”, “our”) collects, uses, shares, and retains personal information when you browse the site, sign in for Pick’ems, or take part in viewer matchmaking (“fight nights”). It should be read together with our Terms of Service.

What We Collect

Your account. An email address (optional at signup, but needed to verify your account, reset your password, or reach you) and a password, stored only as a bcrypt hash. We never see your plain password.
Your ladder profile. Your region, your matchmaking queue entries, the results you report, and any dispute messages.
Pick’ems and applications. Your picks, your points, and anything you submit through the apply form.
From Twitch, if you link it: your user ID, username, display name, avatar, and whether you have an active subscription to the channel, including its tier and whether it was gifted.
From Riot, if you link it: your Riot ID (game name and tag line) and a Riot player identifier, so your ladder account is tied to a real Riot account rather than a name you typed in.
Automatically. Page views (the path, the referring host, a country derived from your IP, your device type, and a random per-tab id in session storage that clears when the tab closes) and API logs (time, endpoint, IP, country, user agent). Page views do not store your IP.

Cookies

t1_pickems_session keeps you signed in, and a short-lived OAuth state cookie protects sign-in against cross-site request forgery. We also keep a random per-tab value in session storage to avoid double-counting page views, and use Google Analytics (_ga, _gid) if it is enabled. No advertising cookies and no cross-site tracking. Blocking the essential cookies will stop you signing in.

How We Use It

To run your account, Pick’ems, and the ladder; to confirm fight-night eligibility; to keep matches fair and resolve disputes; to measure aggregate traffic; and to contact you about your account. We do not sell your data or use it for advertising. If you are in the EEA or the UK, our legal bases are contract (running your account and the ladder), legitimate interests (security and analytics), and consent where we ask for it.

What Is Public

Leaderboards, brackets, results, ratings, and player profiles are public, along with the display names on them. For a match, your display name, Riot ID, and the result are visible to your opponent and on that match’s page.

Sharing & Retention

We share information only with our hosting and email providers, with Twitch and Riot as needed to link or check your accounts, and with Google Analytics if it is enabled — or where the law requires it.

Your Rights

You can ask us to access, correct, export, restrict, or delete your data, and withdraw consent where we rely on it. Deleting your account is self-serve — use the delete account button in your account settings, with no need to contact us. For anything else, email tyler1business@gmail.com. We aim to respond within 30 days, and if you are in the EEA or the UK you may complain to your local data protection authority.

Children

Not directed at children under 16, and we do not knowingly collect their information.

Changes

We will update the date at the top of this page when this policy changes.

Contact

tyler1business@gmail.com