Who is responsible
No operator details are configured. Set $SITE_OPERATOR
in config.php — see config_sample.php.
What is stored
If you create an account: your name, your email address and your password. The password is never stored as you typed it — only a hash of it, from which the original cannot be read back.
If you save a bracket: the bracket name, its description, the participant names and the scores you entered, linked to your account so you can open and edit it again. Saved brackets are visible to everyone who has the link, so do not put anything in a participant name that should stay private.
Server logs: the web server records requests, which normally includes IP addresses. That happens at the hosting level and is used to keep the service running and to investigate faults.
Cookies
This site sets exactly one cookie, PHPSESSID. It holds a random
identifier and nothing else — no name, no email, no browsing history. It is
what keeps you logged in while you move between pages, and what lets a
bracket you built survive the trip through the login screen before you save
it.
The cookie is deleted when you close your browser. There is no tracking, no analytics, no advertising and no third-party script on this site, so there is nothing here that could follow you to another one.
Your rights
Under the GDPR you may ask what data is held about you, have it corrected, have it deleted, and object to its processing. Deleting your account removes your brackets along with it, because they are linked to it. Write to the address above and it will be dealt with.
You also have the right to complain to a supervisory authority. In Austria that is the Datenschutzbehörde.
How long it is kept
Account data and brackets are kept until you delete them or ask for the account to be removed. There is no automatic expiry.