Privacy Policy

Last updated September 9, 2026

Runback is a public record and analysis service for fighting game tournament brackets. This policy explains what information Runback collects, where it comes from, how Runback uses it, and the choices you have.

1. Who operates Runback

Runback is operated by [OPERATOR LEGAL NAME], at [POSTAL ADDRESS]. In this policy, “Runback,” “we,” and “us” refer to that operator.

For privacy questions or requests, email hi@runback.gg.

2. Information Runback handles

Public tournament information. Runback imports information from public tournament brackets and related public sources. This can include player handles, aliases, profile images, locations, account identifiers, entrants, teams, placements, matches, scores, character picks, schedules, streams, and event details. Runback uses this information to create public event pages, player records, rankings, matchup records, character statistics, and other tournament analysis.

Account information. If you create an account, Runback can store your name, email address, profile image, email-verification state, password hash, account identifiers, session information, and sign-in security data. Session data can include an IP address and browser or device description.

Connected-account information. If you connect Discord, Google, or start.gg, Runback receives the identity information and authentication credentials needed for that connection. For start.gg, this can include your start.gg user, player, gamer tag, slug, and email details. Runback does not use Google sign-in to access Gmail, Drive, Calendar, contacts, or other Google content.

Claimed-profile information. If you claim a player profile, Runback stores the link between your account and the public player record. You can add a bio and links for X, Twitch, YouTube, and Discord. These profile details are public.

Saved content and uploads. Runback stores Matchup lists and Top 8 designs that you save. A Top 8 design can include a background or logo that you upload. If you make a design public, anyone with the link can view and copy the design, including those uploaded images.

Saved games, series, and tournaments. Runback stores the games, tournament series, and tournaments that you save, and the date you saved each one. This list is private to your account. Runback uses it only to show your saved items to you and to filter events for you. Runback does not publish it, does not show it to other users, and does not send you messages about it.

Data issue reports. If you report a data issue on a player, tournament, bracket, or match page, Runback stores your description, any evidence link you give, a copy of the public data shown on that page at the time, and the account that sent the report. Runback uses this only to review and correct its own imported records. Runback does not publish the report and does not send you a reply. Runback deletes a closed report 365 days after it is closed.

Browser and service information. Runback uses cookies and browser storage for sign-in, theme choice, recent search selections, and recovery of one Top 8 draft. Our infrastructure can process request data, logs, error details, IP addresses, and user-agent data to deliver and protect the service.

Runback does not collect payment information. Runback does not collect game-account data, replay files, ladder ratings, damage values, or health values.

3. Where information comes from

Information comes from you, your connected sign-in providers, public start.gg records, public tournament sources, your browser, and the systems that deliver Runback.

4. Why Runback uses information

Runback uses information to:

  • provide accounts, profile claims, saved tools, uploads, and sharing
  • publish and maintain the public tournament record
  • calculate rankings and tournament statistics
  • secure the service, prevent abuse, and investigate errors
  • respond to questions and privacy requests
  • meet legal duties and protect users, Runback, and the public

Where data-protection law requires a legal basis, Runback relies on performance of a contract to provide requested account functions, legitimate interests to operate and secure the service and maintain an accurate public tournament record, consent where a user makes an optional connection or profile field public, and legal obligations where they apply. You can withdraw consent for future use where consent is the basis. This does not make earlier lawful use invalid.

5. What is public

Tournament records and derived statistics are public. They can exist without a Runback account.

Your claimed-profile bio and social links are public after you save them. A shared Matchup list is available to anyone with its link. A public Top 8 design is available to anyone with its link and can be copied into another user's account. Your saved games, series, and tournaments are not public and have no share link.

An uploaded Top 8 image is delivered from a public asset URL even when the saved design is private. The URL is difficult to guess, but anyone who receives it can open the file.

Do not upload an image or add profile text that you do not want other people to see.

Deleting or unlinking your Runback account does not by itself delete accurate tournament information that Runback imported from a public bracket. You can ask us to correct or review information that is wrong or connected to the wrong person.

6. When Runback shares information

Runback uses service providers to host and deliver the product. These include Cloudflare for application delivery, storage, security, logs, and related infrastructure, and PlanetScale for database hosting. These providers process information for Runback under their service terms.

Runback also shares data when you ask it to connect to a sign-in provider, when disclosure is required by law, when it is needed to protect users or the service, or as part of a business transfer with suitable protection.

Runback does not sell personal information. Runback does not use personal information for targeted advertising.

7. Google account data

Runback uses Google account data only to let you sign in or link your Google identity to your Runback account. Runback does not use that connection to read Google product content.

Runback's use and transfer of information received from Google APIs will follow the Google API Services User Data Policy(opens in new tab), including its applicable use restrictions.

8. Cookies and browser storage

Runback uses necessary cookies to keep you signed in and a preference cookie to remember your theme. Runback also stores up to five recent search selections in local storage. The Top 8 editor stores one recovery draft in IndexedDB on your device. That draft can include image files that you selected but did not yet upload.

You can clear this data with your browser controls. Clearing sign-in cookies signs you out. Clearing the Top 8 recovery draft can remove unsaved work.

Runback does not currently use advertising cookies or browser analytics cookies. If that changes, this policy and any required consent controls must change first.

9. How long Runback keeps information

Runback keeps account and saved-content data while your account or saved item exists. Runback can keep data longer when needed to complete deletion, protect the service, resolve a dispute, meet a legal duty, or complete a provider backup cycle.

Runback keeps public tournament records and derived statistics as part of its historical bracket record. Unreferenced Top 8 upload objects become eligible for automated removal after seven days. A closed data issue report is removed 365 days after it is closed; a report that is still open or under review is kept until it is closed. Security logs and traces are kept for the time needed to operate, secure, and diagnose the service, subject to infrastructure settings and legal duties.

10. International processing

Runback uses providers that operate in more than one country. The product is delivered through Cloudflare's global network, and the main database is hosted in an Amazon Web Services region in the United States. Information can therefore be processed outside your country. Where required, Runback and its providers use approved safeguards for these transfers.

11. Security

Runback uses access controls, encrypted connections, restricted service credentials, opaque upload keys, and other technical and organizational measures intended to protect information. No online service can promise complete security.

12. Your choices and rights

Depending on where you live, you can have rights to access, correct, delete, restrict, or object to use of your personal information, receive a portable copy, or withdraw consent. You can also unlink connected accounts and change public profile fields through Runback.

To make a request, email hi@runback.gg. We can ask for information needed to confirm that you control the account. We will not include password hashes, provider tokens, session tokens, or another person's information in an access response.

If you are in the European Economic Area or another place with a data-protection authority, you can also complain to your local authority. Runback does not use personal information to make decisions that have legal or similarly significant effects on you.

13. Children

Runback is not intended for children under 16. Do not create an account or upload content if you are under 16. Public tournament records can include youth competitors when the tournament source made those records public. A parent or guardian can contact us to ask for a review.

14. Changes to this policy

Runback can update this policy when the product, providers, or law changes. The page will show the new last-updated date. If a change materially affects account data, Runback will give additional notice where practical or required.

The terms that apply when you use Runback are in the Terms of Service.

15. Contact

  • Email: hi@runback.gg
  • Operator: [OPERATOR LEGAL NAME]
  • Address: [POSTAL ADDRESS]