Last updated: 2026
1. Who we are
Iron bracket is operated by Ironbracket Inc., trading as “Iron bracket” (“we”, “us”). We act as the data controller for personal data collected through the Service at ironbracket.dev. For payments and billing, Paddle.com Market Limited (“Paddle”) acts as our Merchant of Record and separately as a data controller for payment data.
2. Categories of personal data we collect
- Account data: name, email address, login credentials, language, country.
- Profile data: birth year, weight class, level (amateur / pro), club affiliation, city, photo, social links.
- Event and match data: registrations, results, rankings, participation history.
- Communications: match-call notifications, chat guide messages, contact requests, support messages.
- Usage & device data: IP address, device and browser identifiers, page views, referrers, session data.
- Purchase metadata: which plan or listing you purchased, subscription status, invoice reference. Payment card details are collected directly by Paddle and never reach our systems.
3. Purposes and legal bases
- Provide the Service (account creation, registrations, brackets, rankings, notifications) — performance of a contract.
- Process payments and subscriptions through Paddle — performance of a contract and legal obligation.
- Security and fraud prevention (rate limiting, abuse detection, audit logs) — legitimate interests.
- Product improvement and analytics — legitimate interests.
- Customer support — performance of a contract / legitimate interests.
- Marketing communications, where applicable — consent (you can withdraw at any time).
- Compliance with law — legal obligation.
4. Data sharing
We do not sell your personal data. We share it only with the categories of recipients below:
- Merchant of Record: Paddle, for sale of subscriptions and equipment listings, subscription management, payments, tax compliance, invoicing, and refunds.
- Hosting & infrastructure providers: cloud providers used to host the Service and its database.
- Analytics and error monitoring: tools that help us understand usage and detect bugs.
- AI providers: model providers that power the in-app chat guide and profile-photo moderation (only the content you submit for those features).
- Tournament organizers: when you register for an event, the organizer of that event receives the participant information necessary to run the event.
- Advertising partners (e.g. Adsterra): to serve ads. See “Cookies” below.
- Professional advisers (legal, accounting) where necessary.
- Authorities, where required by law or to protect rights, safety, or property.
5. International transfers
Our providers may store or process data in countries outside your own, including in Canada, the United States, and the European Economic Area. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
6. Retention
We keep account and profile data for as long as your account is active. When you close your account we delete or anonymize personal data within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. Event results may remain in public rankings in an aggregated / historical form.
7. Your rights
Depending on your jurisdiction, you may have the following rights:
- access to your personal data;
- rectification of inaccurate data;
- erasure (“right to be forgotten”);
- restriction of, or objection to, certain processing;
- data portability;
- withdrawal of consent, where processing is based on consent;
- lodging a complaint with your local data-protection authority.
You can exercise most of these rights directly from your account settings, or by contacting us through the Service. We will respond within one month.
8. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, row-level security in our database, and audit logging. No system is perfectly secure and we cannot guarantee absolute security.
9. Cookies and similar technologies
We use essential cookies to keep you signed in and to remember preferences (such as your language). We may use analytics cookies to understand how the Service is used. Advertising partners (Adsterra) may set cookies to serve and measure ads. You can manage cookies through your browser settings.
10. Children
The Service is not directed at children under the age required by local law to consent to online services. If you believe a child has provided us with personal data without proper consent, please contact us and we will delete it.
11. Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be signalled by updating the “Last updated” date at the top of this page.
12. Contact
For privacy questions or to exercise your rights, contact Ironbracket Inc. through the contact form on the Service. For payment and billing data controlled by Paddle, see Paddle's privacy notice at paddle.com/legal/privacy.