BracketOps
Privacy Policy
Last updated: 14 September 2026

1. About this notice

BracketOps is a tournament management app used by Play! Pokémon tournament organisers and competitors. This notice explains what personal information we hold, why, who can see it, and how you can get it corrected or removed.

BracketOps is operated by Tian, who is responsible for the information described here. Play! Pokémon organisers who run events on it, including Play NZ, are partners using the app — they are not its operator.

BracketOps is independent. It is not affiliated with, endorsed by, or operated by The Pokémon Company International, Inc. Any information you give directly to Pokémon — for example through your Pokémon Trainer Club account, or results your organiser reports to Pokémon after an event — is handled under Pokémon's own privacy notice, not this one.

2. Two ways your information reaches us

This matters, because most competitors never create a BracketOps account.

  • You sign in and register. You create an account, complete your profile, and sign up for events yourself.
  • Your organiser imports you. Organisers run events in Tournament Operations Manager (TOM) and upload the resulting tournament file to BracketOps so pairings and standings can be shown live. That file contains every competitor entered in the event. If you played in an event that used BracketOps, we hold information about you even if you have never used this site.

Your organiser decides which events to run and publish. We operate the platform that stores and displays that information for them.

3. What we hold

InformationWhere it comes from
Name, email address, profile pictureGoogle sign-in
Preferred/nickname, Play! Pokémon Player ID, year of birthEntered by you when completing your profile
Name and Player ID of every competitor in an eventThe tournament file your organiser uploads from TOM
Age division, registration status, pairings, table numbers, match results, win/loss/tie record, standingsGenerated as the event runs
Deck lists and team lists, where the event requires themSubmitted by you
Penalties and deck checks recorded by judges, including notesEntered by event staff
A record that a registration payment completedYour organiser's payment provider

We do not store your full date of birth. Only a year of birth is kept, and only when you enter it yourself, because age division rules depend on it. Date of birth is stripped from uploaded tournament files before they are stored.

We do not handle card or bank details. Registration payments happen on your organiser's payment provider's own pages; we only receive confirmation that a payment succeeded.

4. What is shown publicly

A tournament's page can be opened by anyone with the link, without signing in. On that page we show competitors' names, age divisions, pairings, table numbers, match results and standings. This is how competitors and spectators follow a live event, and Play! Pokémon's tournament rules permit organisers to publish tournament details.

Deck lists, team lists, penalties, deck checks, email addresses and years of birth are not shown publicly. They are visible only to you, to the organiser of that event, and to judges assigned to it.

5. Competitors under 18

Junior and Senior divisions are, by definition, made up of children. If you are registering as a minor, or on behalf of one, please be aware that the competitor's name, division and results will appear on a publicly accessible page as described above.

A parent or guardian can ask us to remove a child's information, or to show only a shortened form of their name, using the contact details in section 9. We will act on those requests.

6. Where your information is stored

BracketOps runs on third-party infrastructure, which means your information is stored on servers outside New Zealand:

  • Supabase — database, sign-in and file storage, hosted in India (ap-south-1)
  • Vercel — application hosting and content delivery, United States and global edge locations
  • Google — sign-in only
  • Payment providers — where an organiser charges an entry fee

We do not sell your information, and we do not share it for advertising.

7. How long we keep it

A copy of the tournament file uploaded from TOM, with dates of birth removed, is available to the organiser for seven days after its last upload — long enough to finish reporting results — and is then deleted by a daily automatic clean-up, normally within a day.

Tournament records themselves — results, standings and past events — are currently kept indefinitely so that event history remains available. If you would rather your information were removed, ask us and we will remove it.

8. Your rights

Under the New Zealand Privacy Act 2020 — and, if you are in the UK or EU, under the GDPR — you can ask us to:

  • tell you what information we hold about you, and give you a copy
  • correct anything that is wrong
  • remove your information, or reduce what is shown publicly

You can also complain to the Office of the Privacy Commissioner if you are not satisfied with how we have handled your request.

9. Contact

For any privacy question or request, email bracketops.privacy@gmail.com. For questions about a specific event — including having your details removed from that event's public page — contacting the organiser who ran it is usually fastest, but you can always come to us instead. This applies whether or not you have a BracketOps account.

10. Changes

If we change how we handle personal information we will update this page and the date at the top. Material changes affecting what is published will be announced in the app.