Privacy Policy

Information We Collect

• Account data (email, handle, authentication details).
• Profile data (bios, gamertags, roles, public listings, age-related settings).
• Messages, contact requests, and message attachment metadata.
• Usage data (pages visited, actions taken, device and browser data).
• Payment metadata (subscription status, plan details, billing timestamps).
• Connected account data when you link third-party services (Twitch, YouTube, Discord, stats.gg, stats.cc, Riot ID, and similar integrations).
• Encrypted OAuth tokens and related metadata for linked streaming accounts, used only to maintain verified connections and optional live indicators.

Google and YouTube Data

If you choose to link a YouTube channel, we request Google OAuth access only for the permissions below. We do not request restricted YouTube scopes (upload, manage, or membership) and we do not modify your channel or videos.

• Non-sensitive scopes

  • userinfo.email
  • userinfo.profile

  Used only to identify the Google account completing OAuth (email and basic profile name).

• Sensitive scope

  • youtube.readonly

  Used only to verify that you own the channel you are linking and to read public channel metadata (channel ID, title, and custom URL/handle) for display on your profile and related team or tournament pages.

• Data accessed: Google account email and display name during OAuth; YouTube channel ID, title, and public handle; encrypted OAuth tokens and connection metadata.
• Aggregated data: Non-identifying operational metrics (for example counts of linked channels) that cannot reasonably identify you.

How We Use Information

• Operate, maintain, and improve the Service.
• Provide messaging, contact requests, and scrim coordination.
• Process subscriptions and manage billing.
• Verify and display linked social, stats, and streaming identities on profiles, teams, and tournament pages.
• Check whether linked Twitch or YouTube channels are publicly live and show live indicators where enabled. YouTube live checks use our server-side API key against public live-search results for channel IDs you already linked.
• Prevent abuse, fraud, and unauthorized access.
• Send required transactional emails (verification, security, billing).

Connected Accounts

If you connect external accounts, we receive information according to the permissions you grant:

• Twitch / YouTube: channel identifiers, public handles, display names, and encrypted OAuth tokens needed to verify ownership.
• Discord: profile and connection data when you authorize import or linking.
• Stats providers: public profile URLs or handles you submit (stats.gg, stats.cc, Riot ID).

Disconnect direct OAuth Twitch or YouTube links from Profile → Edit → Connected Accounts. This deletes stored OAuth tokens and linked channel metadata for that connection. Other integrations can be removed from Connected Accounts or related team settings.

Public Information

Some information is public by design, including public profiles, team listings, recruiting information, verified social links, and live indicators when a linked channel is broadcasting.

Messages and Attachments

Messages and contact requests are private between participants, but we may access them to enforce safety policies, resolve disputes, or comply with law. Message attachments are processed using metadata such as file name, size, type, and timestamps. Only open attachments from trusted sources.

Cookies

• Essential: authentication, security, and cookie-preference storage (via Supabase).
• Optional (with consent): Vercel Analytics and Speed Insights.
• Functional storage: theme preference and similar non-marketing UI settings.

You can accept or decline optional cookies in the cookie notice or in Settings.

Information Sharing

We share information only as needed to run the Service. We do not sell Google user data or other personal information to data brokers, advertisers, or information resellers.

• Service providers (hosting, database, email, payments, and analytics with consent) that process data on our behalf.
• Integration providers when you initiate a connection (Discord, Google/YouTube, Twitch).
• Legal requests when required by applicable law.

Retention, Deletion, and Security

• While connected: we retain linked channel metadata and encrypted OAuth tokens only while the connection is active.
• On disconnect: we delete OAuth tokens, the integration connection, and the verified social identity for that platform.
• On account deletion: we delete or de-identify associated data within a reasonable period, subject to legal requirements.
• Deletion requests: email info@findscrims.com.

We use reasonable safeguards, including encrypted OAuth token storage, access controls, and secure hosting. No system is 100% secure.

Google API Limited Use

Find Scrims's use of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements:

• We use Google user data only to provide or improve user-facing Service features.
• We do not use Google user data for ads, lending, resale, or generalized AI/ML model training.
• We do not transfer Google user data to third-party AI services or unrelated third parties, except as needed to operate the Service (for example secure hosting) or as required by law.

Payments, Choices, and Children

• Subscription billing is handled by payment processors. Peer-to-peer tournament payments are arranged between users; use caution and verify counterparties.
• You can update profile settings, connect or disconnect accounts, manage cookie preferences, and control subscriptions in your account.
• The Service is not intended for children under 13. Users under 18 may have additional privacy defaults and consent requirements.

Changes and Contact

We may update this policy from time to time. Continued use after updates become effective means you accept the revised policy. Material changes are reflected in the date above.

Questions about this policy or Google user data: info@findscrims.com or our Terms of Service.