Privacy policy
Whistle.day is built to run tournaments, not collect personal data. Most tournaments are created with anonymous device accounts, we use no tracking cookies or ads, and you can delete your data at any time.
The short version
You do not need to register, verify an email, or install an app to create and run a tournament.
We use local storage on your device to keep your draft and session. We do not use third-party tracking cookies or advertising networks.
If you choose to claim your account with an email address or through Google or Facebook, we store only what is needed to let you log in again.
You can delete your account and all tournaments you have created at any time.
What information we collect
Device accounts: When you start setting up a tournament, the system creates an anonymous account with a randomly generated identifier stored solely in your browser's local storage. No name, email, or physical location is collected.
Claimed accounts: If you choose to keep your tournament accessible across multiple devices, you may associate an email address and password, or sign in via Google or Facebook OAuth. We store your email address and an encrypted password hash, or the unique identifier returned by the identity provider.
Tournament data: Tournament names, dates, sports, court names, team names, match schedules, scores, and set points entered by organizers and referees.
Access tokens: Each tournament uses cryptographically random tokens in URLs to control access — one token for the projector display, another for mobile referee scoring, and one for public results.
How we use your information
We use the information strictly to operate Whistle.day: computing brackets, updating group standings, synchronizing live scores with venue projector displays, and enabling referees to submit scores.
We do not sell, rent, or monetize your personal information or tournament records. We do not profile users or serve behavioral advertisements.
Cookies and local storage
Whistle.day does not use third-party tracking cookies or analytics trackers.
We use browser local storage (localStorage and sessionStorage) to maintain your login session, remember the active tournament on your device, and preserve your chosen display language.
Third-party services
Authentication: If you choose to log in with Google or Facebook, authentication is handled directly by the provider. We receive only your verified email address and basic profile identifier to authenticate you.
Transactional email: If you claim an account or request a password reset, transactional emails are sent through an SMTP relay. We do not send marketing emails or newsletters.
Data retention and automated cleanup
Draft tournaments that were never drawn, have no fixtures, and are owned by an unclaimed device account are automatically purged by our daily maintenance sweep after 30 days.
Real tournaments that were drawn or published remain available until deleted by the organizer.
Your rights under GDPR and privacy laws
Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the right to access, rectify, port, and erase your personal data.
You can exercise your right to erasure at any time through our user deletion path, directly on your Account screen, or by contacting us.
Contact
If you have questions about this privacy policy or wish to submit a data protection request, you can reach the maintainers at privacy@whistle.day.
Common questions
Do players or spectators need an account to view results?
No. Anyone with the public results link or QR code can view the live draw and scores without creating an account or providing any personal details.
Do referees need an account?
No. A referee scans the court QR code provided by the organizer, enters their first name or role, and scores directly from their browser without registration.
Can I delete my data?
Yes. You can delete your account and all associated tournaments at any time from your Account screen, or follow the steps on our user deletion page.