Privacy Policy

Last updated: June 22, 2026

1. Who We Are

Duel It Out ("we", "us", "our") is operated from Denmark, Europe. Our platform connects players across multiple sports, allowing them to track matches, participate in tournaments, and compete on leaderboards. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

We collect the following categories of information:

2.1 Account Information

When you create an account, we collect your username, email address, and a password (stored as a hashed value). You may optionally provide a display name and avatar image.

2.2 Profile Information

You may add a profile picture, banner image, bio, and other details to your public profile. This information is visible to other users of the platform.

2.3 Match & Tournament Data

We record match results, set scores, tournament participation, bracket progression, and head-to-head statistics. This data is displayed publicly on your profile and leaderboards.

2.4 Payment Information

When you subscribe to a paid plan, payments are processed by Stripe, Inc. We do not store full credit card numbers or banking details on our servers. Stripe may share your billing name, email, and transaction status with us for record-keeping purposes.

2.5 Communications

If you contact us via email or through feedback forms, we collect your email address and the contents of your message.

2.6 Technical Data

We automatically collect certain information when you visit our platform, including your IP address, browser type, operating system, referring URLs, device information, and pages visited.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the specific context. We typically process your data under the following legal bases:

3.1 Contractual Necessity

We need to process your data to perform our contract with you — to create and maintain your account, record matches, and provide our services.

3.2 Consent

Where you have given consent (e.g., for optional profile features, cookies, or marketing communications), we process data based on that consent. You have the right to withdraw consent at any time.

3.3 Legitimate Interests

We process certain data for our legitimate business interests, such as improving our platform, ensuring security, and preventing fraud.

3.4 Legal Obligations

We may process your data to comply with applicable laws and regulations.

4. How We Use Your Information

We use the collected information for the following purposes:

  • To create and maintain your account
  • To record and display match results, tournament brackets, and player statistics
  • To process subscription payments and manage your billing
  • To send service-related emails (e.g., match invitations, tournament updates, billing receipts)
  • To respond to your inquiries and feedback
  • To improve and optimize our platform
  • To detect, prevent, and address fraud, abuse, or security incidents
  • To comply with legal obligations

5. How We Share Your Information

We may share your information with the following third parties:

5.1 Payment Processing (Stripe)

Subscription payments are processed by Stripe, Inc. Your payment data is handled by Stripe under their Privacy Policy. We receive limited information from Stripe for billing records.

5.2 Email Delivery (Resend)

Transactional emails (e.g., password resets, match invitations) are sent via Resend. Your email address is shared with Resend for the sole purpose of delivering these emails.

5.3 Image Storage (AWS S3)

Profile pictures and banner images are stored on Amazon Web Services (AWS) S3 servers. These images may be transferred to and stored on AWS servers in various regions.

5.4 Legal Compliance

We may disclose your information if required to do so by law or in response to valid legal requests from public authorities.

6. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our third-party service providers (Stripe, AWS, Resend) operate. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on the service provider's Data Privacy Framework certification.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal, tax, or accounting purposes (e.g., billing records may be retained for up to 7 years as required by Danish law). Match and tournament data that is part of other users' records may be anonymized rather than deleted.

8. Your Rights (GDPR & Global)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 Right of Access

You can request a copy of the personal data we hold about you.

8.2 Right to Rectification

You can correct inaccurate or incomplete data. This can be done directly through your account settings.

8.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data. You can delete your account directly from your settings page, or contact us to request erasure.

8.4 Right to Restriction of Processing

You can request that we restrict the processing of your data under certain circumstances.

8.5 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format.

8.6 Right to Object

You can object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

8.8 California Privacy Rights (CCPA/CPRA)

California residents have the right to know what personal information is collected, disclosed, sold, or shared; to request deletion; to opt out of the sale or sharing of personal information; and to non-discrimination for exercising these rights. Duel It Out does not sell your personal information.

9. Exercising Your Rights

To exercise any of the rights described above, please contact us at legal@duelitout.com. We will respond to your request within 30 days as required under GDPR. We may need to verify your identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local data protection authority.

10. Cookies & Tracking

We use essential cookies required for authentication and platform functionality. We do not use tracking cookies for advertising purposes. You can control cookie settings through your browser preferences. Essential cookies include:

  • Session cookies: required to keep you logged in
  • Theme preference cookie: stores your dark/light mode preference
  • CSRF protection cookies: required for security

11. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), hashed passwords (bcrypt), and restricted access to personal data on a need-to-know basis. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our platform is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our platform. Your continued use of the platform after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

  • Email: legal@duelitout.com
  • Feedback: feedback@duelitout.com
  • Response time: We aim to respond within 15 business days.