SStraume
Log in

Privacy Policy

Effective [EFFECTIVE DATE]

This policy explains what personal data Straume collects when you use the website and the Straume Telegram bot, why we use it, who processes it for us, and the rights you have under the EU General Data Protection Regulation (GDPR).

  1. 1. Who we are

    The controller of your personal data is [COMPANY NAME, SIA], [REGISTERED ADDRESS], Riga, Latvia (“Straume”, “we”).

    For any question or request about your data, write to [CONTACT EMAIL]. We reply within one month.

  2. 2. What we collect

    Your account: when you sign in with Google or by email, we receive your email address, your name and, if your Google account has one, your profile photo. In Profile → Settings you can change your name and photo and add a country, a city and your preferred language.

    Telegram: when you use the Straume bot or log in with Telegram, we receive your Telegram user ID, name, username, language and profile photo, and whether the bot may send you direct messages. Logging in with Telegram creates an internal sign-in address that is never shown or emailed.

    Tournaments: the tournaments you join or host, your registrations and partners, the match results you or others enter, and the rating (ELO), level and match statistics we calculate from them.

    Technical data: the cookies needed to keep you signed in, and server logs (such as IP address and time of a request) that our hosting providers keep for security and troubleshooting.

  3. 3. What is public

    Straume is a public tournament platform. Your display name, photo, country, city, level, rating, match statistics, tournament registrations and results can be seen by anyone, also without signing in, and appear on the leaderboard and on tournament pages. Tournament announcements and results can also be posted in the Telegram groups linked to a tournament.

    Your email address and your Telegram contact details are never shown to other players.

  4. 4. Why we use it

    To provide the service you signed up for — your account, registration, draws, schedules, results, ratings and Telegram messages (performance of a contract, Article 6(1)(b) GDPR).

    To keep Straume secure, prevent abuse and fix errors, and to publish results and rankings so amateur tournaments are fair and comparable (our legitimate interests, Article 6(1)(f) GDPR).

    To meet our legal obligations, such as keeping accounting records once payments start (Article 6(1)(c) GDPR).

    We don't sell your data and don't use it for advertising. Your rating is calculated automatically from match results; it is for information only and has no legal or similarly significant effect on you.

  5. 5. Who processes it for us

    Vercel hosts the website, with its server functions in the EU. Vercel Web Analytics counts page visits without cookies and without identifying you.

    Supabase hosts the database, file storage and sign-in, in the EU.

    Google provides “Sign in with Google” and Telegram provides the bot and “Log in with Telegram”; their own privacy policies apply to your use of those services.

    LocationIQ turns venue addresses into map coordinates, and CARTO provides the map images on venue pages, which your browser loads directly from CARTO.

    Some of these providers are based outside the EU, for example in the United States. Where data leaves the EU, the transfer relies on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

  6. 6. Cookies

    We only use cookies that are strictly necessary: the sign-in cookies that keep you logged in and a cookie that remembers your language. There are no advertising or tracking cookies, so we don't ask for cookie consent.

  7. 7. How long we keep it

    We keep your account data for as long as you have an account. Tournament results and the rating changes calculated from them are kept as part of the tournament record, because other players' results and ratings depend on them.

    Server logs are kept by our hosting providers only for the limited time they need them for security and troubleshooting.

  8. 8. Deleting your account

    You can delete your account at any time in Profile → Settings → Delete account. We then erase your name, photo, country, city, email address and sign-in, your Telegram link, your admin rights, your subscription and your own weekly tournaments.

    Your past matches stay in the tournament records under the name “Deleted player”, no longer linked to you, so that other players' results and ratings stay correct. Deleted players don't appear on the leaderboard or in search.

    If you use Straume only through Telegram and want your data deleted, write to [CONTACT EMAIL].

  9. 9. Your rights

    You have the right to access your personal data and get a copy of it in a portable format, to correct it, to have it erased, to restrict or object to its processing, and to withdraw any consent you gave. You can view and correct most of your data yourself in Profile → Settings; for a copy of your data or any other request, write to [CONTACT EMAIL].

    If you think we handle your data unlawfully, you can lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv) or with the data protection authority of the EU country where you live.

  10. 10. Children

    Straume is not meant for children under 13, and they may not create an account. If you think a child has given us personal data, contact us and we will delete it.

  11. 11. Changes to this policy

    We may update this policy as Straume changes. The date at the top shows the current version, and we will announce significant changes on the website before they take effect.