Legal

Privacy Policy

Last updated: July 5, 2026

What we collect

Account info: name, email address, and a hashed password when you sign up.
Tournament data you enter: teams, judges, ballots, schedules, case PDFs, judge schools, time-availability windows.
Operational logs: request timestamps and IP addresses, used for abuse prevention and rate limiting.

What we don’t collect

We don’t use third-party advertising or marketing cookies.
We don’t sell your data.

How we use it

Account info is used to authenticate you and to send transactional email (password resets, email verification). Tournament data is shown only as configured by the tournament host’s Visibility settings — hosts can keep team names, ballots, judge identities, and standings private if they choose.

How we store it

Data lives in a Postgres database. Passwords are stored as bcrypt hashes. Sessions are signed JWTs in HttpOnly, SameSite cookies. Backups are encrypted at rest by our hosting provider.

Sharing

We don’t share personal data with third parties except as needed to operate the Service (e.g., our email delivery provider for password-reset messages) or when required by law.

Your choices

Edit your name, email, school affiliations, and tournament data anytime via your account and the tournament settings.
Delete your account from Account › Delete, or delete a tournament from its Manage tab. Deletion is immediate and irreversible; ballots you entered on other people’s tournaments stay in place but are no longer attributed to you.
Export your tournament data as Excel or PDF from the Schedule tab at any time.

Cookies

We only set cookies that are strictly necessary to run the Service, so we don’t show a cookie banner. Specifically:

eb_session — a signed JWT that keeps you logged in. HttpOnly, SameSite=Lax, expires after 14 days.
eb_flash — a short-lived cookie that carries a one-off success or error message across a redirect (for example, “Team added” after you save a form). HttpOnly, deleted on the next page load.

We don’t set analytics, advertising, or third-party cookies.

Children

Ethics Bowl Manager is built for tournament directors and judges, typically adults. We don’t knowingly collect personal data from children under 13. High-school participants’ data is entered by the tournament host, who is responsible for obtaining any consents required by their institution.

Contact

Privacy questions? Reach out via the About page.