PRIVACY
POLICY.

01Data controller

Thachon is the data controller for personal data collected through the Service. For privacy matters, contact privacy@tarchon.gg.

02What we collect

• Account data: email, player handle, chosen language, and email verification state.
• Profile data you enter: biography, country, region, positions, availability, and looking-for-team status.
• Competition data: team memberships, applications, tournament registrations, results, and supporting evidence.
• Technical data: IP address, device and browser type, and usage logs needed for security.
• We do not collect sensitive data such as health or biometric information, and ask users not to enter it in free-text fields.

03Purposes and legal bases

• Performance of a contract: creating and maintaining your account, running competitions, and presenting verifiable history.
• Legitimate interest: protecting the platform, preventing result manipulation, and improving the product from aggregate usage.
• Consent: email newsletters, which you can withdraw at any time.
• Legal obligation: keeping required records and responding to lawful requests.

04What is public by design

• Player profiles, teams, tournaments, brackets, confirmed match results, and membership history are public so records stay traceable.
• Email, password, and other account details are never published.
• If you do not want something to be public, do not enter it in profile fields.

05Cookies and sessions

• We use a strictly necessary HttpOnly cookie for the sign-in session.
• Preferences such as theme and sidebar state stay in your browser's local storage and are never sent to us.
• We use no advertising cookies and no cross-site tracking.

06Disclosure and processors

• Necessary infrastructure providers such as hosting, database, and email delivery, under data processing agreements.
• Authorities or legal process where there is a lawful request.
• We do not sell personal data and do not trade it for advertising.

07International transfers

Some providers may process data outside Thailand. Where that happens we choose providers with adequate protection and use the standard contractual terms required by law.

08Retention and deletion

• Account data is kept while the account is active.
• When you delete your account we erase or de-identify personal data within a reasonable period.
• Competition records tied to other participants' teams and events remain in the form needed for historical accuracy.
• Security logs are kept only as long as needed to investigate incidents.

09Your rights

• Access and obtain a copy of your data.
• Correct inaccurate or outdated data.
• Request erasure or de-identification.
• Object to or restrict processing.
• Request data portability in a machine-readable format.
• Withdraw consent you previously gave.
• Lodge a complaint with the Personal Data Protection Committee office if you believe we are not complying.

10Security

• Passwords are stored using one-way hashing, and session tokens are never exposed to browser scripts.
• Internal access to data is limited to what is needed to operate the Service.
• If a breach creates a risk to data subjects, we notify within the period the law requires.

11Minors

The Service is intended for people aged 13 and above. Users below the age of majority should have parental consent. If we learn we hold a minor's data without valid consent, we delete it.

12Changes to this policy

Material changes are announced by email or in-product notice before they take effect, and the update date at the top of this page always reflects the current version.

13Contact and exercising your rights

Send data requests or complaints to privacy@tarchon.gg with your account email and the right you want to exercise. We respond within the period required by law.