Privacy Policy

01Who is responsible for your data

The controller of personal data processed through the Service is Yevhen Besiedovskyi, an independent developer based in Ukraine (website: https://www.yevhendev.com). You can reach us using the details in the “Contact” section below.

02What data we collect

We collect only what is needed to run track battles.

• Twitch account data. When you sign in with Twitch we receive your Twitch user ID, login name, display name, profile picture URL and the email address linked to your Twitch account. We never receive your Twitch password.
• Streamer content. The arena that is created for you: its address (based on your Twitch login), names, tagline, colors, font, an optional logo you upload, voting rules, tournament titles and dates, and the history of battles and tournaments.
• Track submissions. The link or text you submit, the track title, artist and cover image we look up for it, and your Twitch login, display name and avatar, which are linked to your submission.
• Votes. While a streamer has the arena page or console open, the page reads the public chat of the streamer's Twitch channel anonymously, without logging in. When someone types 1 or 2 during a battle, we store their Twitch login, display name and the chosen side. We do not store other chat messages.
• Technical data. A sign-in session token and a language preference cookie (NEXT_LOCALE) stored in your browser. Our hosting and database providers process technical logs (such as IP address, browser type and request time) to operate and secure the Service.

We do not use advertising or analytics cookies and we do not build advertising profiles.

03Why we use your data and on what basis

We use personal data to:

• provide the Service: sign you in, create and run your arena, accept and show tracks, count votes and show results (performance of a contract with you);
• keep the Service secure and prevent abuse such as vote manipulation (our legitimate interests);
• count votes cast by chat participants, who are identified by their public Twitch nickname (our legitimate interest in running the battle; you may object, see “Your rights”);
• remember your language choice (strictly necessary for the function you requested);
• comply with legal obligations.

Where the law requires your consent, we ask for it separately and you can withdraw it at any time.

04What is public

Arena pages are public. Anyone with the link can see the streamer's name, logo and branding, the current battle, the bracket and the tournament history. The authors of submitted tracks stay hidden while a tournament is running; after it ends, the leaderboard and history show the authors' Twitch nickname and avatar. During voting, the nicknames of the latest voters and the side they chose may be shown on screen. Anything shown on a streamer's broadcast is also public on Twitch. Creating an arena makes it public; signing in alone does not create one. Public arenas may appear in search engines and AI search results.

05Who we share data with

We do not sell personal data. We use the following providers, who process data for us or provide features you use:

• Convex — database, backend functions and file storage (our data processor).
• Vercel — website hosting and delivery, including technical request logs.
• Twitch — sign-in and public chat. Twitch processes your data under its own privacy notice.
• YouTube, Spotify and SoundCloud — embedded players load only after you select ‘Allow and load’ for that player. Loading shares your IP address and browser information with the provider and may enable cookies or similar storage under its own policy. You can withdraw permission using the button below the player; this unloads it but does not erase data or cookies already held by the provider. Permission is not saved across page reloads. Cover images and Twitch avatars can still load from external providers when displayed. For YouTube we use the privacy-enhanced youtube-nocookie.com domain.
• YouTube, Spotify, SoundCloud and Apple (iTunes Search) — our servers send them the submitted link or search text to fetch the track title, artist and cover image.

We may also disclose data if the law requires it or to protect rights and safety.

06International transfers

Our providers may process data outside your country, including outside the European Economic Area and Ukraine. In that case we rely on the safeguards the providers offer, such as adequacy decisions or Standard Contractual Clauses.

07How long we keep data

We keep your account, arena and tournament history for as long as your account exists. Track submissions and votes are kept as part of the tournament history. Technical logs are kept by our providers for a limited period. When you ask us to delete your data, we delete or anonymize it, unless the law requires us to keep it. The Service has no self-service deletion yet, so please contact us (see “Contact”); we will respond within 30 days.

08Your rights

Depending on where you live (for example under the GDPR or Ukrainian data protection law), you may have the right to:

• access the data we hold about you and receive a copy;
• correct inaccurate data;
• have your data deleted;
• restrict or object to processing, including processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw your consent at any time, where processing is based on consent;
• lodge a complaint with a data protection authority (in Ukraine — the Ukrainian Parliament Commissioner for Human Rights; in the EU — the supervisory authority in your country).

You can also revoke the Service's access to your Twitch account at any time in your Twitch settings (Connections).

09Children

The Service is for adults aged 18 or over and is not intended for minors. We do not knowingly collect personal data from minors. If you believe a minor has used the Service or their data has been collected, contact us at support@trackfight.app so we can investigate and delete the data where appropriate.

10Security

We use reasonable technical and organizational measures, including encrypted connections (HTTPS) and access control at our providers. No online service is completely secure, so we cannot guarantee absolute security.

11Changes to this policy

We may update this policy from time to time. The date of the latest version is shown at the top of the page. If a change is significant, we will make a reasonable effort to notify you, for example with a notice on the site.

12Contact

For questions about this policy or to exercise your rights, contact Yevhen Besiedovskyi through the website https://trackfight.app.

You can also write to us at support@trackfight.app.