Privacy Policy

This explains what personal data JongArena collects, why, and who else sees it. JongArena is currently in beta -- this policy will be revisited as the service matures.

What We Collect

Account info: email address, username, display name, and (optionally) a profile avatar. If you sign in with Google, we receive your Google account's name, email, and profile picture.

Activity data: the leagues/clubs you join, match results you submit or that are recorded about you, meetup RSVPs, and notifications.

Technical data: your IP address, retained briefly to rate-limit login/registration/password-reset attempts and prevent abuse (see Security below).

How We Use It

To operate the service: running leagues, calculating standings, showing match history, and sending account-related emails (password reset, email verification).

To keep the service secure: detecting and slowing down brute-force login attempts, fake account creation, and join-code guessing.

We do not sell your data, and we do not use it for advertising.

Who Else Sees It (Third-Party Processors)

Google -- if you choose to sign in with Google. Governed by Google's own privacy policy for that data exchange.

Resend -- our email delivery provider, used to send password-reset and email-verification messages. Resend processes your email address only to deliver those messages.

Vercel and Supabase -- our hosting provider and database provider, respectively. Your data is stored on infrastructure they operate on our behalf.

Other members of a league or club you join can see your display name, username, avatar, and match/standings data within that league or club -- that visibility is the point of the product.

Cookies

We use one essential session cookie (via NextAuth/Auth.js) to keep you signed in. It's required for the service to function and isn't used for advertising or cross-site tracking.

Data Retention & Deletion

We keep your account data while your account is active. To request deletion of your account and associated personal data, contact us (see Contact below) -- note that match history you're part of may be retained in de-identified or aggregate form so other league members' standings remain accurate.

Your Rights

You can access and correct most of your own data directly from your Profile page. For anything else -- a full data export, deletion, or a question about how your data is handled -- contact us. If Indonesia's UU PDP or another data protection law applies to you, you have rights under that law that this policy doesn't override.

Children's Privacy

JongArena isn't directed at children under 13, and we don't knowingly collect personal data from them.

Changes to This Policy

We may update this policy as the service evolves out of beta. Material changes will be reflected by updating the effective date at the top of this page.

Contact

Questions about this policy, or a data request? Reach out at privacy@jongarena.com.