Privacy Policy

The short version

• We collect what the sites need to run: your account, profile, teams and matches.
• We never sell your data, never share it for advertising, and never give it to sponsors. We use no analytics, advertising or tracking tools and set no tracking cookies.
• Match results, rankings and team pages are public. Your email, birth year and private team data are not.
• Players under 18 get extra protection: their profiles are hidden from search engines, and visitors who are not signed in see only their display name, team and competition stats.
• Everyone gets the same rights: see, fix, delete or download your data. We answer within 30 days.
• The sites are for people in the United States and Canada, not including Quebec. Your data is stored in the United States.
• This policy was written by Rejects Esports LLC and has not been reviewed by a lawyer yet. It is still our official policy.

About this policy

• Rejects Esports LLC wrote this policy itself, in plain language, from how Round One and TradeBack really work. This policy has not been reviewed by a lawyer yet. We plan to have it reviewed, and we may update it after that review. Any change follows the rules for changes in this policy.
• This policy is still our official version and is in effect as written.
• Nothing in this policy, or anything else we publish, is legal advice to you. If you need legal advice, ask your own lawyer.
• If a court finds that any part of this policy cannot be enforced as written, that part is applied as far as the law allows, and the rest still applies.
• Nothing in this policy takes away a right that the law where you live gives you and that cannot be given up by agreement.
• If something here is unclear, ask us at rejectsesportsbusiness@gmail.com before you rely on your own reading.

Who we are and who to contact

Round One Network and TradeBack are run by Rejects Esports LLC, an Ohio limited liability company ("Round One", "we", "us").

Privacy Officer. The owners of Rejects Esports LLC are our Privacy Officers and are responsible for how we handle personal information. Contact: Privacy Officer, Rejects Esports LLC, 5826 Buckwheat Rd, Milford, OH 45150, rejectsesportsbusiness@gmail.com.

Where the sites are offered

Round One and TradeBack are offered to people in the United States and Canada, except Quebec. We do not offer them in the European Union, the United Kingdom, Quebec or anywhere else yet. If you live somewhere else, please do not use the sites.

What we collect

When you make an account

• Your email address and password. The password is handled by Google Firebase, and we never see it.
• Your birth month and year, asked first at sign-up. We keep your birth year and whether you are 18 or older. We do not keep your birth month. For a player under 18 we also keep the dates you turn 16 and 18, worked out from the month at sign-up, so the "I am 16 or older now" and "I am 18 or older now" buttons in Settings work on the right day. Only the server can read those dates, and they are deleted with your account.
• Which version of the Terms of Service, the Privacy Policy and the Community and Safety Rules you accepted, and when. Organizers also have their Organizer Agreement acceptance recorded, and TradeBack buyers their Subscription Terms acceptance.

When a player is 13 to 15

• The parent or guardian's email address, their name, whether they are a parent or legal guardian, and when they approved, declined or withdrew approval, with the agreement version (see section 9).

Your profile and play

• Display name, picture, banner, bio, region (a broad area like NA East, never your exact location), links, self-reported peak rank, preferred roles, and your Looking for team settings and weekly hours.
• Teams, orgs and events: names, tags, logos, rosters, staff, roster history, recruiting posts, event registrations, lineups and check-ins.
• Matches: Match Room activity (check-ins, map bans and picks, side choices, chat, scores), replay files and scoreboard images uploaded to verify a result, disputes, rulings and appeals.
• Ratings worked out from verified results: Player Rating, Class, EPS and reliability marks.

Linked accounts

• Discord: your Discord user ID and username, through Discord's sign-in. We ask for two permissions: "identify" (who you are) and "guilds.join", which lets us add you to the Round One Discord server when you link, so our bot can send you notifications. We record whether that worked. We cannot read your messages or your servers, and you can leave the Round One server at any time.
• Discord access we keep: to let our bot add you to Discord servers, we keep a Discord access key (a refresh token) for your account on our server only. No page can read it. It is replaced if you link a different Discord account and deleted when your account is deleted. You can also stop it working at any time by removing Round One under Authorized Apps in your Discord settings.
• The Round One Discord server: our bot gives you roles there for your Class, your tier (T3, T4 or Moved up to T2) and your Player Rating band, and sets your nickname to "[TEAM TAG] Name". Everyone on that server can see them. When you delete your account, the bot removes your Round One nickname and roles there. You stay a member of the server until you leave it.
• League Discord servers: an organizer can connect its league's own Discord server to its events. When your team plays in one of those events, our bot adds the linked players (including players under 18), coaches and staff of both teams to that server, makes a private match chat for the two teams and the event staff with a link to the Match Room, and, 5 minutes before the start, a voice channel for each team (its coaches, staff and checked-in players). The bot deletes these channels 6 hours after the result. That server belongs to the organizer, not to Round One: its owners and admins can see who is on it and can see those channels, and Discord's own rules apply there. If the bot cannot add you, it sends you an invite link instead.
• Team roles on league servers: if the organizer turns on team roles, the bot adds a team's linked players, subs, coaches, staff and managers (including players under 18) to the league's server as soon as the team is approved into the event, and gives them a role with the team's name and colour, shown as its own group in the member list. Anyone on that server can see which team you play for. Round One never deletes these roles: after the event they stay on the league's server, and the league's own admins keep or remove them. If you leave the team's entry during the event, you lose the role. We keep a short server-only record of who got each team's role, deleted after the event ends or when the organizer turns team roles off.
• Discord messages we send: if you are 16 or older, the Round One bot also sends your notifications as Discord direct messages once you link Discord. You can turn any area off in Settings. If you are 13 to 15, Discord messages stay off until you turn them on in Settings. We keep a small record of the last send for your account (whether it worked, and Discord's error code if it did not). Settings shows you whether the last message was delivered.
• Ubisoft: you link your Ubisoft account by uploading a replay file you recorded. The server reads the recorder's Ubisoft ID and name and keeps a fingerprint (a hash) of the file so it cannot be used twice. The file itself is not kept.

Safety

• Block and mute lists, team invite settings, and whether you are on the No-stream list.
• Reports you make or that are made about you, a copy of the reported content, what moderators decided, and appeals. Some reports are made automatically by our chat check.
• Chat messages our chat check blocked: the blocked word, the message, where and when, in a log only adult staff can see.
• MOSS anti-cheat files: players in event matches run MOSS, which records running programs, the screen and inputs during the match. Players keep the files on their own PC and upload them only when a Round One moderator asks. Uploaded files are private evidence that only adult staff can see, deleted with the event's other evidence 90 days after the event is final.
• Public ban list: when an account is permanently banned, its display name, linked Ubisoft name, ban type, reason and how it was verified are shown publicly (for players under 18, only display name and ban type).
• For paid events: the state or province you give in Settings, Safety, used only to check whether paid events are allowed where you live. Only you, adult Round One staff and the server can see it. Organizers see only that the check passed.

TradeBack

• The team's matches, rounds, notes, position maps, callouts and stats, and the player and staff logins the coach makes. Replay files are read inside your browser and are not uploaded to us.
• Dictation: a coach or staff login can tap Dictate to speak a note instead of typing it. Your browser turns the speech into text: Chrome sends the audio to Google and Edge sends it to Microsoft to do that, and Safari uses Apple's speech recognition. We never receive or keep the audio. Only the text that ends up in the note reaches us, and it is kept like any typed note. Player logins do not have Dictate.
• Purchases: Stripe handles payment, and Link (a Stripe service) is the merchant of record for it. From Stripe we receive the buyer's name and email, billing country and state or province, the subscription status and payment events. We never see or keep full card or bank numbers.

Organizers

• The organizer's legal name, contact details, event records, the Round One fee invoices and payments.

When you contact us

• What you send through the Contact page (name, email, topic, message) and through Send feedback (your message, an optional screenshot, and your browser type, device type, screen size and theme).

Technical records

• Our hosting and backend providers keep standard server logs, such as IP address, time and the page or service asked for, to run and protect their services. We use IP addresses only for security, such as rate limits on sign-ups and reports. We do not use them to track you.

What is public

• Player profiles: display name, picture, banner, bio, region, links, peak rank, your linked Ubisoft name, your teams and roster history.
• Players under 18: visitors who are not signed in see only the display name, team and competition stats: the picture, banner, bio, links, linked Ubisoft name, region, peak rank, roles and Looking for team state are not available to them at all, and search engines are asked not to list the profile. Those details are shown to signed-in members only. Signed-in members can see the full profile page, while lists such as rosters and the Looking for team board show only initials. At 18 the profile becomes a normal public profile. Your age is never shown publicly.
• Teams and orgs: name, tag, logo, region, roster with roles, staff, roster history, results and recruiting posts.
• Events: brackets, groups, schedules, teams, lineups once revealed, scores, maps, the veto log, check-in and verification times, and the result of a dispute as a short label (never the evidence).
• Rankings: Player Rating, Class and EPS from league and tournament matches. Scrims never count and never show.
• Streams: event matches may be streamed by casters. You can opt out with the No-stream list. We never use anyone under 18 in our promotion.
• TradeBack stats: only if the team turns on shared stats, and then only K/D, KOST, EPS and rounds played.
• On Discord: on the Round One Discord server, your Class, tier, Player Rating band and team tag show as roles and in your nickname. On a league's Discord server, its members can see that you joined and, if the organizer uses team roles, which team you play for.
• Looking for team: if you turn it on, your roles show on the board, and your weekly hours show to signed-in team captains, co-managers and org admins.

How we use it

• To run your account, teams, scrims, events, Match Rooms and TradeBack.
• To verify results from replay files and work out Player Rating, Class and reliability.
• To keep the sites fair and safe: stop cheating, ban evasion and abuse, handle disputes and reports, and protect children.
• To bill organizers for the Round One fee and run TradeBack subscriptions.
• To send you notifications about your matches, disputes, teams and safety decisions inside the site, and as Discord direct messages from the Round One bot once you link Discord (if you are 16 or older they are on until you turn them off; if you are 13 to 15 they are off until you turn them on; at most 40 a day for an account). We send no notification emails, and there are no push notifications yet.
• To send you emails about important things only, such as your account, parent or guardian approval, TradeBack billing, invoices, inactive-account warnings and security notices. We send no marketing emails or newsletters.
• To answer you and fix problems you report.

We do not use your data for anything else, we do not build advertising profiles, and we do not use your data to train AI.

Who else handles it

These companies run parts of the sites for us and handle data only to do that:

• Google Firebase and Google Cloud: sign-in, database, file storage and server code, in the United States (us-central1).
• Google (Firebase Hosting): hosts the website files.
• Stripe and Link: Link, a Stripe service, is the merchant of record for TradeBack payments; Stripe Payments Company processes them, and Stripe calculates, collects and files the sales tax. They receive the buyer's name, email, billing address and payment details under their own privacy policies, and send their own receipts and notices. A buyer can ask Link to delete their payment data; Stripe then cancels the subscription.
• Resend: sends our emails (for example parent or guardian approval, TradeBack billing, invoices and account notices). It receives the email address and the email.
• GoDaddy: the round-one.net domain. It does not receive your account data.
• Discord: runs the Discord sign-in when you link Discord, hosts the Round One Discord server, and delivers the notifications our bot sends as direct messages. When your team plays in an event whose organizer connected a league Discord server, your Discord account is added to that organizer's server, as described in section 3. Discord's own terms and privacy policy apply on Discord.
• Twitch: plays streams when you open one on an event or match page. Twitch may set its own cookies.
• jsDelivr: sends a free image converter to your browser only when you pick an iPhone HEIC picture.
• VDO.Ninja: carries caster camera feeds when a caster turns a camera on in the caster app.
• Your browser's maker (Google for Chrome, Microsoft for Edge, Apple for Safari): turns speech into text when a TradeBack coach or staff login uses Dictate. It receives the audio under its own privacy policy. We never receive the audio, only the text.

We share data with others only:

• when the law requires it, such as a valid court order, subpoena or warrant;
• to protect someone's safety, including reports to the National Center for Missing and Exploited Children (NCMEC) or the police when a child may be at risk;
• as part of selling or merging the business, in which case the new owner must keep to this policy for data collected before the sale, and we tell you first.

When the police or a court asks for data, we give it only with valid legal process, and we tell the user unless the law stops us or someone's safety is at risk. An emergency involving a child's safety is handled at once.

Who sees private data

• Your team: captains, co-managers and staff see the team's private pages, schedules and TradeBack data. Players can view their team's TradeBack data.
• Organizers and event mods: only what they need to run their event: registrations, lineups, check-ins, a yes or no for the event's age rule or paid-event location (never your birth year or guardian details), and Match Room records for their event. Organizers never get your email.
• Round One moderators and admins: what they need to rule on disputes, reports and bans. Only adult staff can open safety reports, reported content, dispute evidence and parent or guardian records. Guardian records are for the owners and Round One admins only. Staff tools need an authenticator app, and staff actions are logged.
• The person you report never sees the report or who made it.
• Block and mute lists are private to you.

How long we keep it

We may keep something longer if the law requires it, or to deal with a legal claim, a safety investigation or fraud.

Children, teens and parents

• Under 13: the sites are not for children under 13, and we do not knowingly collect their information. Sign-up stops anyone under 13 and saves nothing. If we learn that someone under 13 has an account, we lock it at once and delete it.
• 13 to 15: the account stays locked until a parent or legal guardian approves it from a link sent to their own email. Approval ends when the player turns 16. We keep the approval record (see section 3), and after the account ends we keep it in a closed archive for 6 years, then delete it (see section 8). A parent or guardian can withdraw approval at any time on round-one.net/guardian or by emailing us; withdrawing locks the account at once.
• Parent or guardian requests: a parent or guardian can ask to see or delete their child's information by emailing rejectsesportsbusiness@gmail.com with the child's display name and team. We confirm they are the parent or guardian on record before acting.
• Reports: we do not tell a parent or guardian automatically about reports by or about their child. Safety staff decide case by case, because a household member could be involved.
• No promotion: we never use anyone under 18 in our promotion.

Your rights

Everyone who uses the sites, wherever they live in the United States or Canada, has these rights:

• See it: ask what we hold about you.
• Download it: get a copy as a file with the "Download my data" button in Settings, or by emailing us. TradeBack coaches can already export their team's data from the Data tab.
• Fix it: edit your profile, team or tracker data yourself, or ask us. Birth year and the 18 or older flag need an admin to change.
• Delete it: Settings, Delete account. See the Delete your data page for teams, TradeBack and parents.
• Withdraw consent: for example turn off Looking for team, join the No-stream list, or keep TradeBack stats private.
• TradeBack players: if you are a player on a TradeBack team and ask us to delete your stats, we delete them and tell your coach.

How to ask: email rejectsesportsbusiness@gmail.com from your account's email address, or contact us while signed in. We answer within 30 days. We may ask you to prove the account is yours, and we do not charge for requests.

If you live in a US state with its own privacy law, you may have more rights there, and we will honor them. If you live in Canada, you can also complain to the Office of the Privacy Commissioner of Canada.

Storage outside your country

Our data is stored in the United States by Google (us-central1) and our other providers. If you live in Canada, your information is stored and handled in the United States, and US law, including lawful requests from US authorities, applies to it there.

Security

Every read and write is checked by Firebase security rules, so an account only reaches what it is allowed to. Staff tools need an authenticator code, staff access is logged, and connections use HTTPS. No system is perfect.

If there is a data breach that affects your information, we tell every affected user as soon as possible, all at the same time, and we tell the authorities the law requires us to tell (in Ohio within 45 days; in Canada as soon as possible when there is a real risk of significant harm, and we keep a record of every breach for at least 2 years).

Cookies and browser storage

We set no cookies and use no analytics or advertising tools. The sites keep a few things in your browser so they work, such as your sign-in, theme, time zone and offline TradeBack data. The Cookies and storage page lists them.

Future features

• AI coaching: if we add AI features that coach players from their comms or replay recordings, they will be off by default, and only players who opt in will have their data used, with a new notice first.
• Windows app: a future Round One Windows app may download your match replays automatically. It will come with its own notice, and you will choose whether to turn it on.
• Nothing in this section is live today.

Changes to this policy

We will post changes here and update the date and version at the top. If a change matters, we tell you on the sites at least 14 days before it takes effect, and you see it the next time you sign in.

Contact

Privacy Officer, Rejects Esports LLC, 5826 Buckwheat Rd, Milford, OH 45150. Email: rejectsesportsbusiness@gmail.com.