TourneyMagic Privacy Policy
Effective: October 14, 2026. Written against the tables, integrations and emails that actually exist in the product; nothing here describes a practice the code doesn't have.
1. Who we are
TourneyMagic is operated by Foxy and the Mamba LLC (doing business as TourneyMagic), Texas, USA. Contact for anything in this policy: support@tourney-magic.com or Foxy and the Mamba LLC d/b/a TourneyMagic · 5900 Balcones Dr STE 100, Austin, TX 78731.
2. The short version
We collect what we need to run your account, your team's profile, and your billing, and to compute driving times from your home area. We collect publicly posted tournament and team information from event websites to power the product. We don't sell personal information and we don't run advertising. Some of the team information we collect from public sources concerns youth teams; Section 6 explains how we handle that.
3. Information you give us
Account. Email address, name, and either a password (stored only as a bcrypt hash) or your Google account id and avatar if you sign in with Google.
Team and profile. Team name, sport, division, sanction, and the answers you give in onboarding: age group, goals, sanction preferences, travel radius, budget tier, available weekends, self-assessment, season dates, tournaments per month, a coach name, and any sanction team ids you link so we can find your team's own results.
Home location. Your team's home ZIP code, which we convert to a latitude/longitude. We use it for map distance and to pre-compute driving times to tournaments. We do not collect a street address.
Team membership. Email addresses of people you invite to your team, and transfer requests between members.
Billing. When you subscribe, Stripe collects your payment details directly. We store your Stripe customer id, subscription id, price id, plan status, and period dates — never your card number.
Support. Anything you send us by email.
The Monday email. If you sign up for our weekly email without an account, we keep your email address, the ZIP code and age group you chose, the sport, roughly where on the site you signed up, and when you confirmed or unsubscribed. If you shared your location with the search page, we use it once to look up your ZIP code (through the US Census Bureau's public geocoder, with the coordinates rounded to about a kilometre) and don't store the coordinates.
4. Information we collect automatically
Ordinary server logs (IP address, browser type, pages requested, timestamps) kept for security and debugging. The app stores preferences (such as your active team and which parts of the product tour you've seen) in your browser's local storage; that data stays on your device.
Product analytics. We use Mixpanel to understand how the Service is used, so we can improve it. It records which pages you visit (as page types, without the ids or links in the address), which features you use (for example searching, opening a tournament's field, or changing your season plan), and session recordings of how you move through the app, with all on-screen text and everything you type hidden. A recording keeps the address of each page it shows, which on the search page includes the search area (such as a ZIP code); recording pauses on team-invitation, ownership-transfer and password-reset pages, whose addresses carry private links. These are tied to your account's internal id, not your name or email. Mixpanel receives your IP address, which it uses for approximate location, and stores an identifier in your browser's local storage. We do not use advertising cookies, and we do not sell or share this data for advertising.
5. Information we collect from public sources
To build the product we automatically collect, from sanctioning bodies' and event platforms' public web pages:
- tournament listings: names, dates, locations, divisions, fees, entry counts;
- entry lists and results: team names, divisions, home city/state, win–loss records, game scores;
- team directory pages: team name, age division, city/state, coach or manager name, season records; and
- roster pages, from which we retain only the non-identifying digests described in Section 6 — never the names.
We use this to match the same team across sanctions, to estimate team and field strength, and to show who is entered in an event. It concerns teams and events, not our users — except where a user's own team appears in it.
6. Youth teams and minors
TourneyMagic is used by adults and does not knowingly collect information from anyone under 18. The public event and roster pages we read about teams often concern players under 18, so we designed the Service to hold nothing that identifies a player:
- We do not store player names or any other player-identifying information. When we read a public roster we keep only a one-way, keyed digest of each entry. A digest lets us recognise that two team listings share players — which is how we tell that a team listed under two sanctions, or in two seasons, is the same team — but it cannot be reversed to a name, and it cannot be used to check whether a particular person is on a team without a secret key that never leaves our servers. We hold no birthdates, schools, hometowns, positions or photographs.
- We never display players in the product, and we do not build profiles of individual players or offer any player-level rating.
- A parent or guardian, or a team's coach or administrator, can ask us to exclude a team's roster from our matching entirely by emailing support@tourney-magic.com. We act within 30 days, do not require the requester to create an account, and the exclusion is permanent — our collection jobs cannot re-add a roster we have removed.
- We do not sell, share for advertising, or license any information about minors.
7. How we use information
To provide the Service (accounts, teams, recommendations, season plans, driving times); to bill you; to send the emails described in Section 8; to keep the Service secure and to debug it; to improve our estimates and models using aggregate results; and to comply with law.
We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use your information to train models that are made available to anyone else.
8. Emails we send
Account emails (verification, password reset, team invitations and transfers, billing receipts and renewal reminders) — necessary to run your account. Product emails: tournament preparation reminders, weather alerts for events on your plan, and occasional nudges about your season plan. Every product email includes an unsubscribe link and our postal address; account emails can't be opted out of while you have an account. The Monday email (toughest fields near you) goes only to people who asked for it and clicked the link in our confirmation email; every one has a one-click unsubscribe, and unsubscribing stops it at once.
9. Who we share information with
Service providers who process data on our behalf, under contract, only as needed to run the Service:
| Provider | Purpose | What they see |
|---|---|---|
| Neon | database hosting | all stored data |
| Fly.io | backend hosting | all data in transit |
| Vercel | website hosting | request logs |
| Stripe | payments and subscriptions | name, email, payment details you give Stripe |
| sign-in with Google | your Google account id and profile basics | |
| Resend | sending email | recipient address and message content |
| Mixpanel | product analytics | your account id, pages and features used, masked session recordings, IP address |
| OpenCage | converting places to coordinates | tournament and ZIP-level locations (no account data) |
| OpenRouteService | driving-time estimates | origin coordinates (from ZIP) and destination |
| GitHub | running some scheduled collection jobs | no personal user data |
| Meta Platforms (Facebook, Instagram) | publishing TourneyMagic's own posts to our Page and account | no user data; posts name teams and clubs from public event pages |
Your team members see your team's profile and plan. We disclose information if required by law or to protect the Service or its users. If we sell or merge the business, information transfers with it and this policy continues to apply.
10. Retention
Account and team data: while your account exists, then deleted or anonymized within 30 days of closure, except billing records kept for 7 years for tax purposes. Driving-time cache: 1 year. Server logs: 90 days. Roster digests (Section 6): kept while the team is active in our matching, and removed on request. Other collected tournament, result, and team data is kept as long as it is useful for estimates, with events older than two seasons pruned.
11. Security
Passwords are hashed with bcrypt. Connections are encrypted in transit. Access to production systems is limited to the operator. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by law.
12. Your rights
You can view and change your account and team information in the app, close your account, and unsubscribe from product emails. Depending on where you live (including California and other US states with privacy laws, and the EU/UK if we ever serve users there), you may also have the right to access, correct, delete, or receive a copy of your personal information, and to not be discriminated against for exercising those rights. Email support@tourney-magic.com; we will verify the request and respond within the time the law requires. We do not sell personal information, so there is nothing to opt out of on that front.
13. Children under 13
We do not knowingly collect personal information directly from children under 13 and do not allow them to create accounts. If you believe a child has provided us information, contact support@tourney-magic.com and we will delete it.
14. Changes
We'll post updates here with a new date and, for material changes, email account holders at least 14 days in advance.
15. Contact
Foxy and the Mamba LLC d/b/a TourneyMagic · 5900 Balcones Dr STE 100, Austin, TX 78731 · support@tourney-magic.com