Melee.gg - Privacy Policy

Welcome to Melee.gg. This privacy policy tells you how we collect, use, and share your information when you use our website. Melee.gg is run by Keyrune Incorporated, a company based in the US. By using our website, you agree to this Privacy Policy, our Cookie Policy, and our Terms of Service. If you don't agree, please don't use our website.

We only collect the information we need to run our service. Your privacy and security are crucial to us.

This policy explains:

• What information we collect, how we use it, and who we share it with.
• How we keep your information safe.
• How you can correct any wrong information.
• How you can remove your information from Melee.
• Extra rights for people in the European Union (EU).
• How we follow the rules for protecting kids' information.

Information Collection, Use, and Sharing

Keyrune Incorporated owns the information we collect on this site. We only collect information that you give us directly, like when you fill out a form or email us. We don't sell or rent this information to anyone.

We won't share your information with anyone outside our company unless we need to for our work.

We use "cookies" on this site. A cookie is a small file that helps us improve your experience on our site by remembering you when you come back. Cookies also help us understand how people use our site. Some of our business partners, like advertisers, may use cookies on our site, but we can't control these cookies.

This website has links to other sites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

How We Collect Information

We collect information in two ways: directly from you and automatically.

When you sign up for Melee.gg, participate in tournaments, or use our services, we collect information like your name, email address, and game-related IDs.

If you email us or use our communication tools, we collect that information too.

For tournament organizers and partners who use Melee.gg, we collect information provided by their staff with the consent of the individuals involved.

We use cookies and similar technologies to improve your experience, understand how our site is used, and make our services better. We collect data like IP addresses, browser types, and page views.

We use tools like Google Analytics and DataDog to understand how our platform is used. This data doesn't identify individual users.

We want you to have choices about your data. We tell you what data we collect and why. You can choose to opt-out of some data collection.

Sometimes we get information about you from other places, like social media platforms and payment services. We only use this information to provide our services and follow strict privacy standards.

What Information We Store

We use forms on our site to collect and store information about you. Here's what we might store:

• First and Last Name
• Email Address
• IP Address
• Username
• MTG Arena Username
• MTG Online Username
• DCI Number
• Flesh and Blood GEM Player Id
• Star Wars: Unlimited ID
• Profile Picture and Bio
• Profile Information from Third-Party Social Media and Payment Websites
• Social Media URLs
• Pronouns
• Mobile Number
• Birthday
• Country/Region

• Content You Post Publicly or Privately on Melee
• Preference Settings
• Date and Time of Website Logins
• Browser Type and Operating System Type
• Emails Sent to Melee
• Changes Made to Your Information and Content

By default, your first and last names are not made public after creating your Melee account. However, you can choose to share this information on your public profile in your Melee account settings.

Who Helps Us Process Your Data

We use services from other companies to help run Melee.gg. These companies may process your data for us. We carefully choose these companies and make sure they protect your data.

• Amazon Web Services (AWS): AWS provides cloud computing and storage services. They have strict security and data protection standards.
• Microsoft Azure: Azure is a cloud computing platform with strong security measures.
• SendGrid: SendGrid helps us send emails. They process email content and recipient information.
• Twilio: Twilio provides messaging and voice services. They process phone numbers and message content.
• DataDog: DataDog monitors our application's performance and security.
• Google Analytics (aggregated): Google Analytics helps us understand how people use our site. The data is anonymized.
• Looker (aggregated): Looker provides data insights without identifying individual users.
• Somnio (development): Somnio assists with coding and development, aligning with our data protection policies.
• Dropbox Sign: Dropbox Sign helps us collect electronic signatures for legal documents.
• ZenDesk: ZenDesk provides customer support services, processing user inquiries and related data.

We recommend reading the privacy policies of these companies to understand how they handle your data.

By using Melee.gg, you agree to our use of these companies for processing your data.

Data Sharing with Tournament Organizers

We share some personal data with tournament organizers to run tournaments. Sensitive information like emails, age, and location are shared only if you give us permission during registration.

• First and Last Name
• MTG Arena Username
• MTG Online Username
• DCI Number
• Flesh and Blood GEM Player Id
• Star Wars: Unlimited ID

If organizers create accounts on behalf of players, they must ensure players agree to our terms, conditions, and privacy policies.

Data Sharing with Wizards of the Coast LLC and Hasbro, Inc.

If you play in a MTG tournament supported by Wizards of the Coast LLC, we share your information with them as we do with tournament organizers.

Data Sharing with Ravensburger AG and The Walt Disney Company

If you sign up for the Lorcana Play program or play in a Lorcana tournament, we share your information with Ravensburger and Disney.

Data Sharing with Asmodee North America

By entering your Star Wars: Unlimited ID into your Organization settings, you agree to allow your Organization profile information to be shared with Asmodee North America. Upon registering for a Star Wars: Unlimited tournament, all data shared with tournament organizers may be shared with Asmodee North America.

Your Rights and Managing Your Data

You can delete your account or your child's information through our self-service tools. This will immediately remove the data from our platform.

Accounts are inactive if they are closed, deleted, or suspended. We delete inactive accounts and their data one year after the last activity.

If we find out we have collected a child's data without parental consent, we will:

• Notify the parent or guardian.
• Collect verifiable parental consent. If we don't get consent within 30 days, we delete the child's information.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with GDPR. You can contact our DPO at contact@melee.gg.

Legal Basis for Processing Data

Under GDPR, we process personal data based on the following legal grounds:

• Consent: When you have given us clear consent to process your personal data for a specific purpose.
• Contract: When processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal Obligation: When processing is necessary for compliance with a legal obligation.
• Vital Interests: When processing is necessary to protect someone's life.
• Public Task: When processing is necessary to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
• Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Children's Privacy

We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible. Parents can contact us to review or delete their child's information by emailing us at contact@melee.gg.

Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specific retention periods for different types of personal data are as follows:

• Account information: Retained until account deletion or inactivity for one year.
• Transaction data: Retained for seven years for tax purposes.
• Communications: Retained for two years unless otherwise requested.

User Rights under GDPR

If you are a resident of the European Union, you have the following rights under GDPR:

• Right to Access: You have the right to request access to your personal data.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request that we delete your personal data.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
• Right to Data Portability: You have the right to request that we transfer your personal data to another organization, or directly to you, under certain conditions.
• Right to Object: You have the right to object to our processing of your personal data.
• Rights related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling.

To exercise any of these rights, please contact us at contact@melee.gg.

International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we will ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or ensuring the recipient is Privacy Shield certified (for transfers to the USA).

Keeping Your Information Safe

We use encryption and other methods to protect your information both online and offline. Only employees who need the information to do their jobs have access to it. Our servers are kept in a secure environment.

Monitoring and Enforcement

We regularly check our data practices to make sure we follow this policy and the law. If we find any problems, we fix them right away.

Regular Audits: We regularly check our data practices with audits.

Impact Assessments: We do assessments for new projects to find and fix any privacy risks.

We take immediate action if we find any issues.

Staff Training: We train our staff on privacy practices regularly.

User Complaints: We take user complaints seriously and investigate them promptly.

Breach Notification

In the event of a data breach that may pose a risk to your rights and freedoms, we will notify you and the relevant authorities within 72 hours of becoming aware of the breach.

We make sure third-party vendors follow our privacy standards and the law.

Access Management

We have procedures for managing user access to our systems, including password policies and access controls. We use multi-factor authentication to ensure only authorized individuals can access our systems.

User Data Encryption

We use SSL/TLS encryption to protect your data when it is being transmitted between your device and our servers.

We use encryption to protect data stored on our servers.

Backup and Disaster Recovery

We automatically create encrypted backups of our database, stored in secure locations, to recover data in case of an emergency.

Updates to Privacy Policy

We may update this privacy policy from time to time. When we make changes, we will notify you by updating the date at the top of this policy and, in some cases, we may provide additional notice (such as adding a statement to our homepage or sending you a notification). We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Updating Your Information

You can update most of your personal information on our site. If you need help, please contact us at contact@melee.gg.

Removing Your Information

You have the right to delete your account and information from Melee. You can do this through your Profile Page. This will remove all your personal information but may not delete all content you created (like decklists and standings).

Contact Information

If you have any questions or concerns about this privacy policy or our data practices, please contact us at:

• Email: contact@melee.gg