Home/Privacy Policy

Privacy Policy

Effective July 2026

RingFlow is built and operated by CruxStudios. This policy explains what we collect, why, and how long we keep it.

What we collect

Only what is necessary to run a tournament: event name, schedule, bracket data, participant names, weight classes, and round results entered by the event administrator. Admin and moderator credentials are stored as one-way hashes.

We do not collect payment information, government IDs, or any sensitive personal data.

How long we keep it

Data is scoped entirely to the lifetime of an event. When an event is marked complete, all associated data — participants, brackets, results — is permanently deleted. Nothing is archived or retained.

RingFlow is built to be ephemeral. That is not a caveat; it is the point.

Third-party services

We use Supabase for database and authentication, and Cloudflare Turnstile for bot protection on public forms. Turnstile does not fingerprint users. Hosting is on Vercel. Each service operates under its own privacy policy.

Cookies

Session cookies only, for authentication. No advertising cookies, no cross-site tracking, no analytics that profile individual users.

Your rights

You can request a copy of any personal data we hold, ask us to correct it, or ask us to delete it. In most cases your data has already been deleted automatically. Email contact@cruxstudios.dev.

Changes

If we update this policy the effective date above will change. Continued use of RingFlow after an update constitutes acceptance.