Privacy Policy

Information We Collect

• Account data (email, handle, authentication details).
• Profile data (bios, gamertags, roles, public listings, age-related settings).
• Messages, contact requests, and message attachment metadata.
• Usage data (pages visited, actions taken, device and browser data).
• Payment metadata (subscription status, plan details, billing timestamps).
• Connected account data when you link third-party services (Twitch, YouTube, Discord, stats.gg, stats.cc, Riot ID, and similar integrations).
• Encrypted OAuth tokens and related metadata for linked streaming accounts, used only to maintain verified connections and optional live indicators.

Google and YouTube Data

If you choose to link a YouTube channel, we request Google OAuth access only for the permissions below. We do not request restricted YouTube scopes (upload, manage, or membership) and we do not modify your channel or videos.

• Non-sensitive scopes

  • userinfo.email
  • userinfo.profile

  Used only to identify the Google account completing OAuth (email and basic profile name).

• Sensitive scope

  • youtube.readonly

  Used only to verify that you own the channel you are linking and to read public channel metadata (channel ID, title, and custom URL/handle) for display on your profile and related team or tournament pages.

• Data accessed: Google account email and display name during OAuth; YouTube channel ID, title, and public handle; encrypted OAuth tokens and connection metadata.
• Aggregated data: Non-identifying operational metrics (for example counts of linked channels) that cannot reasonably identify you.

How We Use Information

• Operate, maintain, and improve the Service.
• Provide messaging, contact requests, and scrim coordination.
• Process subscriptions and manage billing.
• Verify and display linked social, stats, and streaming identities on profiles, teams, and tournament pages.
• Check whether linked Twitch or YouTube channels are publicly live and show live indicators where enabled. YouTube live checks use our server-side API key against public live-search results for channel IDs you already linked.
• Prevent abuse, fraud, and unauthorized access.
• Send required transactional emails (verification, security, billing).

Connected Accounts

If you connect external accounts, we receive information according to the permissions you grant:

• Twitch / YouTube: channel identifiers, public handles, display names, and encrypted OAuth tokens needed to verify ownership.
• Discord: profile and connection data when you authorize import or linking.
• Stats providers: public profile URLs or handles you submit (stats.gg, stats.cc, Riot ID).

Disconnect direct OAuth Twitch or YouTube links from Profile → Edit → Connected Accounts. This deletes stored OAuth tokens and linked channel metadata for that connection. Other integrations can be removed from Connected Accounts or related team settings.

Public Information

Some information is public by design, including public profiles, team listings, recruiting information, verified social links, and live indicators when a linked channel is broadcasting.

Messages and Attachments

Messages and contact requests are private between participants, but we may access them to enforce safety policies, resolve disputes, or comply with law. Message attachments are processed using metadata such as file name, size, type, and timestamps. Only open attachments from trusted sources.

Cookies and Similar Technologies

• Strictly necessary (cannot be disabled): authentication, session security, fraud prevention, and storage of your privacy choices (via Supabase and related infrastructure).
• Functional (optional): theme and similar interface preferences stored locally when you opt in.
• Analytics (optional): Vercel Analytics when you opt in.
• Performance (optional): Vercel Speed Insights when you opt in.

We do not use advertising or cross-site tracking cookies. Manage choices in the privacy banner, footer link, or Settings. Optional categories are off until you enable them.

Information Sharing

We share information only as needed to run the Service. We do not sell Google user data or other personal information to data brokers, advertisers, or information resellers.

• Service providers (hosting, database, email, payments, and analytics with consent) that process data on our behalf.
• Integration providers when you initiate a connection (Discord, Google/YouTube, Twitch).
• Legal requests when required by applicable law.

Retention, Deletion, and Security

• While connected: we retain linked channel metadata and encrypted OAuth tokens only while the connection is active.
• On disconnect: we delete OAuth tokens, the integration connection, and the verified social identity for that platform.
• On account deletion: we delete or de-identify associated data within a reasonable period, subject to legal requirements.
• Deletion requests: email info@findscrims.com.

We use reasonable safeguards, including encrypted OAuth token storage, access controls, and secure hosting. No system is 100% secure.

Artificial Intelligence and Automated Processing

Find Scrims does not currently use generative artificial intelligence to create user-facing content, profiles, messages, or match outcomes. Some features use automated, rule-based processing to rank or suggest scrims, teams, roster availability windows, or similar options based on information you provide (such as game, region, rank, and availability). These suggestions are informational only and do not replace your own judgment.

• We do not sell personal information to AI model providers or data brokers for model training.
• We may use automated systems to help detect abuse, spam, fraud, or policy violations. Safety-related reviews may involve human review.
• If we introduce new AI-powered features that materially change how we collect or process personal information, we will update this policy and provide notice as required by law.

Our use of Google user data is subject to additional limits described in the Google API Limited Use section below.

Google API Limited Use

Find Scrims's use of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements:

• We use Google user data only to provide or improve user-facing Service features.
• We do not use Google user data for ads, lending, resale, or generalized AI/ML model training.
• We do not transfer Google user data to third-party AI services or unrelated third parties, except as needed to operate the Service (for example secure hosting) or as required by law.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the following rights subject to legal limits and exceptions:

• Know and access: request details about categories of personal information we collect, use, and disclose.
• Delete: request deletion of personal information, subject to legal retention needs.
• Correct: request correction of inaccurate personal information.
• Opt out of sale/share: we do not sell personal information and do not share it for cross-context behavioral advertising.
• Limit use of sensitive information: we use sensitive information only as needed to provide the Service and as described here.
• Non-discrimination: we will not discriminate against you for exercising privacy rights.

Submit requests to info@findscrims.com. We may verify your request. You may use an authorized agent where permitted by law.

European and UK Privacy Rights (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing may include contract performance (providing the Service), legitimate interests (security, abuse prevention, product improvement with appropriate safeguards), consent (optional cookies and certain communications), and legal obligations.

• Access, rectify, or erase personal data in certain circumstances.
• Restrict or object to processing in certain circumstances.
• Data portability for information you provided in a structured, commonly used format.
• Withdraw consent at any time for processing based on consent (without affecting prior lawful processing).
• Lodge a complaint with your local supervisory authority.

Contact info@findscrims.com to exercise these rights.

International Data Transfers

Find Scrims is operated from the United States. If you access the Service from outside the U.S., your information may be processed in the U.S. and other countries where our service providers operate (for example hosting, database, email, analytics, and payment processors). Those countries may have different data protection laws than your home country. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers.

Payments, Choices, and Children

• Subscription billing is handled by payment processors. Paid plans renew automatically until canceled in your billing portal or as described at checkout. See our Terms of Service and pricing page for renewal and cancellation details.
• Peer-to-peer tournament payments are arranged between users; use caution and verify counterparties.
• You can update profile settings, connect or disconnect accounts, manage cookie preferences, and control subscriptions in your account.
• The Service is not intended for children under 14. Users under 18 require parental or guardian consent and may have additional privacy defaults, including safety notices in messaging.

Related Policies

• Terms of Service
• Community Guidelines
• DMCA Copyright Policy
• Accessibility Statement

Dispute Resolution

For disputes relating to this Privacy Policy or our handling of your information, please contact us first at info@findscrims.com. Our Terms of Service include a binding arbitration agreement, class action waiver, and jury trial waiver that apply to covered disputes, subject to a 30-day opt-out right and small claims court exceptions described there.

Changes and Contact

We may update this policy from time to time. Continued use after updates become effective means you accept the revised policy. Material changes are reflected in the date above.

Questions about this policy or Google user data: info@findscrims.com.