Privacy Policy

Last updated: March 2026 · Effective from: March 2026

1. Who We Are (Data Controller)

KEL Tournaments is the data controller responsible for your personal data collected through this website (keltournaments.com).

Contact: privacy@keltournaments.gg

2. What Data We Collect and Why

We collect only the minimum data necessary to operate the event:

• osu! user ID and username — to verify your identity via osu! OAuth and link your ticket to your account. Legal basis: Legitimate interest (event security) and contract performance.
• osu! avatar URL — displayed in the site interface during your session only, not stored permanently.
• Full name — required for ticket issuance. Legal basis: Contract performance.
• Email address — to send your ticket confirmation and QR code. Legal basis: Contract performance.
• Ticket type and payment reference — to record your purchase. Legal basis: Contract performance and legal obligation.
• Ticket scan timestamp — recorded at event entry for security. Legal basis: Legitimate interest.

3. What We Do NOT Collect

• We do not store payment card details — these are handled by our payment processor.
• We do not store your osu! access token.
• We do not sell, rent, or share your data with third parties for marketing.
• We do not use tracking cookies or analytics.

4. Third Parties

• osu! (ppy Pty Ltd) — authentication. Your login is handled under osu!'s own privacy policy.
• Google Fonts — fonts loaded from Google's servers. Google may log your IP. Alternatively, you can use the site without fonts by disabling them in your browser.

5. How Long We Keep Your Data

Your ticket data (name, email, osu! username, ticket type) is kept for 12 months after the event date (until March 2028) for accounting and legal compliance purposes, then deleted.

You may request earlier deletion — see Your Rights below.

6. Your Rights Under GDPR

You have the right to:

• Access — request a copy of data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, submit a request here or email privacy@keltournaments.gg. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Poland: UODO (uodo.gov.pl).

7. Security

Your data is stored in an encrypted-at-rest database on a server located in the EU. Access is restricted to authorised KEL5 staff only. All connections use HTTPS/TLS.

8. Changes to This Policy

If we make material changes to this policy, we will update the date at the top and notify ticket holders by email.

9. Contact

For any privacy-related questions: privacy@keltournaments.gg