PrizeMap Privacy Policy

PrizeMap is an indie app for Pokémon TCG players (intended audience 16+, not for children under 13). The service is available worldwide and operated from the United States. This policy explains what we collect, how we use it, and the choices you have.

Information We Collect

• Account details you provide: email address and username (used for identification and leaderboards).
• Tournament profile details you choose to provide: Pokémon TCG Live username, display-name preference or custom display name, country, time zone, optional Discord handle, and notification preference.
• Tournament activity: registrations, check-ins, decklists, pairings, standings, match reports and results, judge calls, penalties, and messages sent in tournament match rooms.
• Diagnostic and usage data: crash logs, performance metrics, gameplay and feature usage to improve stability and engagement.
• Device/technical data: IP-derived general location, device and app identifiers, and other telemetry sent automatically.
• Advertising identifiers: Google AdMob may receive device and ad identifiers for ad delivery, frequency capping, and fraud prevention.

We do not intentionally collect sensitive categories of data.

How We Use Information

• Operate, secure, and maintain the service.
• Authenticate users and display usernames on leaderboards.
• Communicate about the service (primarily via push notifications; email as backup).
• Analyze performance and engagement to improve puzzles, features, and stability.
• Deliver advertising through Google AdMob and prevent fraud/abuse.
• Run tournaments, validate deck eligibility, create pairings and standings, resolve match disputes, and preserve competition integrity.
• Comply with legal obligations and enforce terms.

Tournament Visibility

Public and unlisted tournaments may display your PrizeMap username or chosen display name, country, pairings, match results, standings, and tournament record. Deck archetypes or submitted decklists are shown only under the organizer's stated decklist-visibility policy. Your Pokémon TCG Live username and match-room messages are limited to the participants and event staff who need them to conduct or moderate the match, except where disclosure is required for safety or legal reasons.

Legal Bases for EEA/UK Users

• Contract: to provide and support the service you request.
• Legitimate interests: improve the app, ensure security, and prevent abuse.
• Consent: where required for ads/tracking (including ATT/consent prompts where applicable).

Payments and Subscriptions

Purchases are processed by the Apple App Store and Google Play. We receive purchase tokens/receipts and subscription status to manage your entitlements. We do not receive full payment card details.

Sharing and Disclosure

• Service providers: we use vendors for hosting, authentication, push, analytics/telemetry, crash reporting, subscription management, and ad delivery (including Google AdMob). They receive only what they need to perform their services for us.
• Legal, safety, and rights protection when required by law.
• We do not sell personal information.

Cookies, SDKs, and Tracking

Mobile apps rely on SDKs for authentication, analytics, crash reporting, subscriptions, and ads (including AdMob). If you use the web experience, we may use cookies or local storage for session management and preferences. You can manage ad identifiers in your device settings and follow any in-app consent prompts.

Data Retention

We retain account data while your account is active. Logs and analytics are kept for a limited period to troubleshoot, measure performance, and protect the service. Ad data retention follows platform policies. Backups are maintained on a rolling basis for disaster recovery.

If you delete your account, your account and tournament-profile fields are removed and your tournament identity snapshots are anonymized. Competition records—including pairings, standings, results, submitted decklists, judge actions, audit history, and tournament chat—may be retained under a deleted-player identity so completed events remain accurate, disputes can be reviewed, and abuse can be investigated.

Security

Data is encrypted in transit and access is restricted to necessary personnel and systems under least-privilege principles. No system is perfectly secure; please use strong, unique credentials.

International Transfers

Data may be processed in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Your Rights and Choices

• Access, correction, deletion, and portability where these rights apply.
• Marketing choices: opt out of marketing email via provided links; manage push notifications in device settings.
• Ads and tracking: reset/limit ad identifiers in device settings; follow in-app consent prompts (including ATT where applicable).
• EEA/UK: you may object to or request restriction of processing in some cases and withdraw consent where used.
• California: you may request to know or delete personal information. We do not “sell” personal information; AdMob is used for advertising.

Children

The service is not intended for children under 13. If we learn we have collected personal information from a child under 13, we will delete it.

Contact

For privacy questions or requests, email jtrosclair98@gmail.com.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated in-app and/or by email. The “Last updated” date will always reflect the latest version.